Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/01a39d28-287e-393c-b5a5-abeed65d5dfc.roa
File:                     01a39d28-287e-393c-b5a5-abeed65d5dfc.roa (raw, json)
Hash identifier:          +2aBPxlEMM+bBIKDiP2Oz3H/U0aO1tLJQMA096Bcc3M=
Subject key identifier:   89:6E:E4:5E:4B:E5:C4:0C:DB:6D:FA:A5:59:65:5F:A2:BB:08:5C:24
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285849AA4F6B0C8764C11D7CA170C0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/01a39d28-287e-393c-b5a5-abeed65d5dfc.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     55293
IP address blocks:        104.218.8.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:6b:0c:87:64:c1:1d:7c:a1:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=4127f7be-c66b-4e51-937a-9682557c044a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:23:3c:1f:36:79:ba:9b:ad:8b:3b:53:4d:
                    7e:bc:9b:f7:a1:57:38:05:3f:f2:8f:14:f9:6a:83:
                    6d:a2:45:9e:a6:f5:58:37:ba:44:f2:7c:f5:9b:77:
                    b5:89:89:42:70:f0:d3:ff:f0:96:0a:ff:a8:60:7b:
                    94:ed:9f:00:3a:1a:11:f7:11:83:34:24:11:38:97:
                    ab:64:0c:2b:8b:2b:69:6f:15:46:f9:1a:6f:ba:fd:
                    a4:27:7d:2d:40:33:8b:f3:0a:ca:db:c0:20:e7:83:
                    00:45:41:37:b1:96:8c:6b:59:10:1c:8f:19:43:96:
                    6e:c0:7d:d1:7b:ee:6c:b8:c3:8e:09:ab:a0:3b:8f:
                    34:f9:7f:b7:1c:64:4c:9c:8d:9b:ca:65:1a:b2:fd:
                    61:66:da:f3:c7:ed:de:73:12:e6:51:83:9b:da:20:
                    65:e6:e9:d6:8a:81:b2:2b:32:12:43:63:7b:3b:97:
                    2a:8e:e6:2b:2c:8f:b5:4b:33:2d:32:c2:27:d0:15:
                    7b:d9:a3:f0:04:47:f4:44:04:83:91:e9:42:ad:ed:
                    19:78:69:d3:48:50:0c:ad:0a:94:dc:79:dc:fb:83:
                    a4:0f:f9:d5:36:bc:40:27:3c:ab:ec:9b:84:ef:29:
                    c1:35:e7:95:b9:a8:01:1c:0a:49:a1:3f:1d:ac:eb:
                    63:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:6E:E4:5E:4B:E5:C4:0C:DB:6D:FA:A5:59:65:5F:A2:BB:08:5C:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/01a39d28-287e-393c-b5a5-abeed65d5dfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:51:21:c2:6b:64:ab:e8:2d:53:af:35:6f:8e:73:0b:fe:48:
         65:44:94:ab:b3:a7:2f:7b:c4:95:90:cb:34:da:8d:8d:f5:f9:
         cc:2b:cb:6f:69:ab:1e:21:5d:ce:01:0d:37:dc:66:20:07:62:
         00:9a:bf:4c:c5:62:2f:a3:e8:4f:ca:3b:46:bf:3a:bf:e4:50:
         53:31:00:9b:fb:11:cf:0a:55:fc:b5:8e:13:2d:7a:ff:ae:84:
         8f:6c:fb:64:20:25:d0:cb:cf:72:6c:e8:d6:e0:31:84:da:05:
         47:37:f8:cf:b7:d7:31:22:08:05:53:17:06:af:1d:44:cb:9f:
         16:15:4e:97:1e:77:9c:83:c5:b7:11:63:cc:23:a0:d6:90:6d:
         30:d8:b7:bc:b7:9b:08:54:d3:19:b1:08:b4:59:5c:00:73:5c:
         da:37:50:7d:de:62:77:c1:fb:3b:a2:d7:a8:1d:5b:a7:50:5c:
         c7:6b:a4:02:6c:3e:f0:90:88:bf:b6:4c:ca:0a:d4:0f:e7:3d:
         52:ec:21:a0:83:62:ca:6d:cd:85:df:de:fb:88:22:f4:ce:82:
         c6:1a:58:f2:c0:c1:a5:db:9e:65:8e:28:4c:0a:66:af:1c:3c:
         82:c6:d6:de:ee:69:49:48:46:c3:db:43:92:d2:96:ea:a3:ac:
         24:24:1a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:10:27 2025 by rpki-client