Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/302e0aa6-5f2f-37aa-8e4e-7339b1fa53db.roa
File:                     302e0aa6-5f2f-37aa-8e4e-7339b1fa53db.roa (raw, json)
Hash identifier:          Q7CAh9jDaaIJoiDXDZWw7pRi7PEg8mNMNIUL8gkuR80=
Subject key identifier:   5A:41:B1:92:4E:26:E7:A5:DF:52:D5:D4:21:B8:87:D5:EB:63:D1:EE
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F4328584A0C055A22A6267B10146B51A0
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/302e0aa6-5f2f-37aa-8e4e-7339b1fa53db.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     53828
IP address blocks:        104.245.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:5a:22:a6:26:7b:10:14:6b:51:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=d8f8aed9-21db-4d8c-80f9-85f1f637e62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4f:f4:c7:33:3f:44:df:6c:d0:6f:1e:4f:eb:
                    07:f5:eb:fd:63:a9:4e:ea:59:0b:f5:fe:4a:bd:13:
                    dd:b4:59:8a:a1:36:c0:15:a2:77:39:07:01:6d:b5:
                    87:5a:bd:cc:a6:e8:97:d3:27:dd:de:5b:12:4d:fb:
                    ac:04:f8:78:ab:36:39:15:25:2a:0e:59:a0:76:a0:
                    14:48:32:fd:c7:84:2a:a5:20:85:39:fd:d0:e5:07:
                    7a:e8:b4:12:e9:37:88:13:1a:6b:8b:64:90:74:6c:
                    4f:a5:2b:9e:c4:56:74:8d:c2:68:7d:4a:ea:07:c6:
                    f0:a0:b6:1f:05:fd:47:a3:5d:8e:72:27:33:c2:f7:
                    c5:10:ec:e0:84:ce:f6:1e:17:b1:b1:89:88:69:cc:
                    76:fd:3d:5e:80:d5:f7:5d:30:dc:76:2a:18:eb:59:
                    86:2d:fd:19:2a:7e:80:15:8a:38:0f:27:9a:95:b1:
                    fc:71:33:cf:a5:cd:87:6f:66:52:e2:34:83:0e:34:
                    01:60:eb:e4:25:a9:71:7b:79:ce:46:21:48:48:3b:
                    c8:22:3d:1c:33:f8:ac:b7:66:4f:9f:24:15:76:ea:
                    6d:46:74:34:53:41:59:6d:a9:66:e2:95:08:73:4e:
                    22:a3:76:c2:c9:e4:eb:de:46:41:f0:e5:20:8b:58:
                    6b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:41:B1:92:4E:26:E7:A5:DF:52:D5:D4:21:B8:87:D5:EB:63:D1:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/302e0aa6-5f2f-37aa-8e4e-7339b1fa53db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:db:44:6e:ea:b8:29:9e:7e:4c:1d:9f:60:35:e7:12:de:c9:
         55:fa:bf:df:ac:c1:5d:f7:3c:b6:31:26:7e:3e:86:b0:9b:77:
         61:4e:48:73:f3:fd:e9:6d:a0:f1:e3:03:74:ec:88:03:a2:e9:
         78:a8:90:39:34:60:73:79:b4:a1:c5:fc:ca:0e:27:32:27:19:
         f3:a1:3c:22:5f:c3:91:d7:44:94:b5:14:ff:a7:cf:c1:d4:67:
         7f:38:50:4a:b5:21:c2:e7:53:99:43:4e:fe:9d:c6:cc:8c:0d:
         22:c1:93:b9:ae:b7:e1:27:4f:1e:f6:75:07:81:9e:7c:f0:f9:
         dd:28:47:c2:27:eb:2b:e7:f0:84:1c:db:e2:30:22:26:d6:8b:
         09:44:76:9f:1c:f8:ae:12:ed:60:c1:b6:e5:8e:be:06:85:6c:
         d7:cd:6b:0e:9b:29:8f:6f:c2:02:1a:ae:26:a4:71:d4:2a:4b:
         f8:98:1b:8b:45:70:93:cb:b0:48:d2:38:e1:d0:7f:15:81:e3:
         d1:7e:34:e8:87:cf:50:71:e6:43:20:ff:25:88:33:4b:e0:e3:
         4d:b8:a0:70:56:c2:59:47:11:14:15:2c:38:88:0c:ce:95:a9:
         4a:31:32:48:df:5b:6c:7d:89:26:e8:f6:f2:33:8e:e7:73:92:
         03:a3:54:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:39:38 2025 by rpki-client