Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/ea91c50d-9962-3ff7-9380-50486d4ddb6b.roa
File:                     ea91c50d-9962-3ff7-9380-50486d4ddb6b.roa (raw, json)
Hash identifier:          fRuGIv6VUS83B3ZbSuDqjsRYRnGvIrkDj2lf37EMlH8=
Subject key identifier:   49:71:9F:AD:16:6A:0C:94:EF:67:EE:D9:A2:2B:89:A3:18:22:E0:80
Certificate issuer:       /CN=223ca9d9-14f2-4824-b1ba-16bc030ccf15
Certificate serial:       010D0C9F432858498E647DCC74BF72D13143E280
Authority key identifier: 6A:78:B9:AC:DB:19:7E:87:5D:2E:D8:52:E1:25:FE:21:99:B1:D3:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/ea91c50d-9962-3ff7-9380-50486d4ddb6b.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     399078
IP address blocks:        104.166.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:7d:cc:74:bf:72:d1:31:43:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=223ca9d9-14f2-4824-b1ba-16bc030ccf15
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=dafd48ad-95d6-4be4-9cc0-63e8969701fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1d:07:0e:35:f9:cf:f6:32:6c:c5:87:d3:0d:
                    62:f9:f6:96:f4:1f:e7:95:23:fd:d5:52:a2:d5:3d:
                    67:90:34:86:a3:3f:ad:f3:d6:71:ff:2e:f2:24:c5:
                    1f:10:64:20:c6:7f:83:52:ab:9e:c1:52:4b:9a:f0:
                    6c:c8:dc:98:cb:ed:54:d6:0f:91:ae:4d:25:d5:a2:
                    c3:c6:ef:ab:b0:83:b7:c2:1e:08:d6:d2:1a:af:c8:
                    c1:da:f5:72:7d:f9:1a:a7:70:ce:ae:12:9a:00:09:
                    24:f4:f5:5e:c3:b4:42:ca:87:05:42:3a:af:e6:d9:
                    e4:e5:c6:09:1e:b5:f3:62:59:77:a1:d9:2f:67:eb:
                    88:84:f5:fb:01:e6:4c:f8:bb:3b:ef:81:5f:76:40:
                    c6:9d:74:e7:31:99:36:7a:1c:d9:13:e8:b7:bc:51:
                    a9:b2:e4:c2:98:b3:09:de:7b:51:6b:09:19:f3:31:
                    eb:69:43:ea:0c:f8:89:dc:3c:4b:be:7e:e7:ed:20:
                    f0:74:53:a6:4c:ca:22:8b:6d:b7:47:61:d4:22:c1:
                    37:28:3e:51:a7:69:77:b0:db:b1:98:3c:cc:65:05:
                    1b:a3:af:3f:f0:9c:e4:2e:46:13:b4:03:f0:24:b2:
                    d0:a9:74:74:33:60:86:30:a9:78:37:e6:e5:62:1e:
                    d7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:71:9F:AD:16:6A:0C:94:EF:67:EE:D9:A2:2B:89:A3:18:22:E0:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/ea91c50d-9962-3ff7-9380-50486d4ddb6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15/223ca9d9-14f2-4824-b1ba-16bc030ccf15.crl

            X509v3 Authority Key Identifier:
                keyid:6A:78:B9:AC:DB:19:7E:87:5D:2E:D8:52:E1:25:FE:21:99:B1:D3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/223ca9d9-14f2-4824-b1ba-16bc030ccf15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.166.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:13:ae:74:00:43:1f:39:9b:09:68:03:25:0c:d3:76:b3:1d:
         23:f6:04:7e:94:90:55:e5:89:b3:72:52:53:5f:1d:b1:e0:cd:
         e9:0a:69:17:64:25:44:f1:48:e3:3a:bd:7a:48:89:6a:8e:a7:
         a0:82:79:10:a7:e6:85:99:cd:61:01:32:19:f1:6f:cb:8b:28:
         69:f6:ec:c9:ff:4f:d9:7a:32:c6:96:c6:91:c3:09:a2:bc:05:
         cd:a3:f1:57:7b:02:2d:7b:25:ad:f1:a9:60:eb:fe:ec:a3:62:
         7c:00:b3:3b:ea:a3:4e:f7:9a:00:20:10:d5:99:d0:3c:89:0d:
         8b:c5:a9:06:ae:ec:d9:d8:d4:44:44:c5:c8:2d:9e:4a:92:97:
         66:93:35:6d:25:26:f5:23:55:84:0e:d1:0a:7c:0c:12:a6:31:
         77:3a:c0:c6:90:69:f0:e7:a1:c6:51:be:97:4d:75:14:fa:6d:
         31:99:4f:b7:25:06:41:a0:02:dd:5e:e6:a5:7d:1f:7f:98:f6:
         85:b8:c9:3e:30:9f:7a:54:d0:ed:63:37:c0:f7:10:00:ff:81:
         c2:f0:9c:fc:8f:6a:fc:5c:7a:51:35:fd:52:6a:f0:a6:2d:b8:
         93:70:da:64:64:6c:2e:d2:a9:63:d2:de:b6:5a:d0:83:5b:27:
         c5:b2:1e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:10:58 2025 by rpki-client