Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/59a6fd1d-ffee-391f-b0f0-c2d4bf028bf9.roa
File:                     59a6fd1d-ffee-391f-b0f0-c2d4bf028bf9.roa (raw, json)
Hash identifier:          +SiQkBsSo2MqE6ZFy1PTgJ4fmQ+dnyX/raFBNMv2TI4=
Subject key identifier:   B5:DA:2F:EB:81:EE:72:19:A5:C7:66:99:35:EA:B7:D1:1D:55:CB:3F
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584A331B14A13595C26CBECED670
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/59a6fd1d-ffee-391f-b0f0-c2d4bf028bf9.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     54113
IP address blocks:        104.156.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1b:14:a1:35:95:c2:6c:be:ce:d6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=13f6a2aa-8740-4d1c-a1eb-338f0d640fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:66:b0:52:82:6a:ff:57:12:b5:bf:20:be:
                    c6:9a:47:8c:51:9c:88:52:8e:13:ae:f7:73:9b:7a:
                    83:4a:d4:c3:14:b1:4c:ad:46:b6:c3:9f:c1:80:7b:
                    38:68:df:11:9e:67:a2:ce:ed:f2:90:33:da:cb:d4:
                    ae:4a:5b:e9:48:53:29:3d:8e:b5:8d:bd:0a:02:16:
                    26:57:c9:ad:ce:0d:9d:c3:d3:2f:63:fd:4e:44:ec:
                    12:ed:84:fe:74:ee:da:04:de:e6:aa:37:1b:6b:18:
                    08:ab:b1:b7:14:41:1e:8b:93:50:89:7b:9e:9d:56:
                    3e:e3:03:4d:c5:94:6d:a1:3a:a4:4e:f5:a2:44:95:
                    47:b3:d8:90:4a:8a:35:9f:fc:c7:c4:0e:34:d7:cd:
                    5d:b6:46:fc:ab:c2:86:4c:18:1b:7e:85:cc:ee:64:
                    2b:52:64:09:a4:1b:c2:b7:d8:7a:62:49:e6:02:d2:
                    68:a8:8d:8c:93:70:b1:ed:92:65:18:08:f0:ca:f0:
                    72:8a:dd:d7:52:98:b5:c9:c1:5e:41:42:91:60:4d:
                    04:d2:a3:a4:37:c9:af:82:0a:23:8a:bc:88:ac:f9:
                    55:24:01:9a:96:40:6d:cb:29:4c:77:d5:8d:44:0c:
                    3d:95:b3:0a:1c:06:a2:f5:5d:f4:e4:46:a7:ff:bf:
                    e6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DA:2F:EB:81:EE:72:19:A5:C7:66:99:35:EA:B7:D1:1D:55:CB:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/59a6fd1d-ffee-391f-b0f0-c2d4bf028bf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6a:72:af:f3:b7:32:c6:62:59:76:7f:60:e6:75:6a:bd:51:
         3d:08:94:e4:fa:88:3e:08:b1:e0:a3:96:42:e9:a1:40:9a:84:
         7f:2f:c9:b5:5a:65:69:64:19:d2:81:e0:31:ac:c0:ae:21:a5:
         a2:e0:02:79:ea:39:79:c7:52:c7:bc:79:80:4f:43:a8:f0:7b:
         25:a6:dc:82:5f:30:71:9a:3f:6e:0f:f0:90:bf:ce:25:d9:27:
         8a:1c:f5:b4:bb:31:56:c9:33:04:f7:74:a7:f3:28:da:3e:18:
         52:77:68:bc:a0:da:d1:6a:89:02:98:56:57:c3:2c:a6:2d:de:
         e8:9f:a9:c2:83:c7:15:44:02:05:12:7d:a4:ac:d5:fd:da:3b:
         3c:32:78:7b:7b:fe:dc:5f:ee:64:25:b2:16:31:9b:9a:13:6c:
         ca:00:35:16:6b:54:99:a8:d4:fc:ea:ac:9e:4b:1f:db:43:97:
         ad:66:6f:ea:ab:ba:c5:03:56:a4:da:95:e2:17:ab:e6:53:f3:
         57:a7:d1:8e:b1:f4:61:e2:f3:e0:7b:f4:b2:61:34:a7:f6:81:
         55:ed:53:dd:61:44:ca:51:3b:d6:9c:52:fd:bd:42:e0:8a:ba:
         20:bb:21:35:32:e3:6c:2c:1f:b0:a5:c9:ce:81:9b:d2:d1:8e:
         74:b9:6e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:20:47 2025 by rpki-client