Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afda2b53-b1ee-3f07-be4d-53f3f87f6c40.roa
File:                     afda2b53-b1ee-3f07-be4d-53f3f87f6c40.roa (raw, json)
Hash identifier:          JPLdA+Br/+ysqoE71A4Rp44RLMS4Qx/jEhVfjRBQmT8=
Subject key identifier:   41:9B:1E:CF:5B:84:72:BE:5B:F1:CC:36:32:C7:F9:13:8F:07:A8:1E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858499F24A86FF9473AFDE78EA900
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afda2b53-b1ee-3f07-be4d-53f3f87f6c40.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        104.197.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:a8:6f:f9:47:3a:fd:e7:8e:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=5b4a2a63-b36d-4c57-a3a2-ae187deb70b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d5:0c:c0:43:3f:ae:ef:b7:c8:ab:a3:90:94:
                    6d:10:a0:0e:47:61:02:38:97:25:d3:32:c7:76:99:
                    64:c6:c0:c2:89:de:85:7d:de:f8:37:62:aa:13:84:
                    50:63:97:64:c8:b3:03:28:3b:c8:07:21:49:60:ef:
                    ef:88:ef:e1:62:84:f2:ab:c1:27:67:4d:f9:60:54:
                    6d:0b:af:71:06:e9:87:46:63:6c:04:a5:22:63:c1:
                    e7:b1:44:05:42:ab:db:df:e1:a4:f6:23:44:8b:bc:
                    da:b4:62:a1:54:6a:c1:ff:c0:86:ba:45:f2:fe:94:
                    88:e1:3e:8e:69:d4:d6:80:68:ed:c1:53:a7:1c:32:
                    cd:bf:ea:87:23:80:ad:17:37:7e:50:76:18:49:b9:
                    43:ac:4e:ed:8a:b0:7b:4d:37:ab:36:db:26:8e:47:
                    d8:79:ad:08:63:ee:0d:1d:8e:10:98:ca:8e:d6:63:
                    1e:97:c9:b4:97:e5:72:19:51:6e:46:53:3f:33:21:
                    9e:df:57:ea:ae:86:75:7d:2b:8d:67:1d:12:d7:d9:
                    b8:70:b8:59:ee:e0:95:1f:96:98:13:2b:41:45:aa:
                    f3:5c:58:8b:bd:70:f5:d2:1a:47:03:f9:eb:95:ac:
                    d0:04:37:1e:fa:ec:40:a0:d6:a2:ab:fc:61:59:9d:
                    6f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9B:1E:CF:5B:84:72:BE:5B:F1:CC:36:32:C7:F9:13:8F:07:A8:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afda2b53-b1ee-3f07-be4d-53f3f87f6c40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.197.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:bd:28:12:1b:40:d7:4c:f3:80:2e:76:3e:7b:db:59:fd:05:
         18:1f:51:cb:dc:be:06:b2:76:f1:fe:b0:db:48:41:bc:76:72:
         88:d1:d4:13:f7:bf:08:61:ac:ae:f9:33:df:1a:37:59:02:fb:
         52:4d:5b:44:21:92:8f:1b:bb:2d:ab:47:c6:17:a4:fd:34:49:
         63:51:ca:d5:7b:02:31:ba:65:fe:77:92:b1:3f:d8:d9:b8:9f:
         98:76:47:bd:d8:d4:ec:f9:26:e6:68:35:e8:0e:c7:96:03:c7:
         a4:ac:8b:dc:cf:47:11:61:b0:ff:50:97:66:4d:af:97:cd:33:
         1b:e7:d0:20:30:74:44:81:6a:fa:30:22:6c:c9:54:81:c7:a9:
         8a:3f:7c:09:52:2e:59:de:bc:33:50:35:b9:68:23:f2:e4:58:
         15:87:dd:1f:db:a5:e5:d7:c1:56:af:48:a2:50:ad:10:51:ba:
         79:35:5b:99:73:f7:9d:c8:34:c1:27:08:e3:69:d1:dd:ad:b2:
         43:aa:56:b9:3d:6d:55:ad:ca:78:b2:32:e4:98:69:9e:14:34:
         14:6a:11:40:1a:6b:2d:b7:2b:ce:73:c3:49:58:92:74:7f:14:
         ba:40:27:36:92:08:bb:ab:ae:fd:1b:52:0e:09:a8:9a:0e:0e:
         6d:5e:3f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 23:27:23 2025 by rpki-client