Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa
File:                     47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa (raw, json)
Hash identifier:          zd7iz3xqJ6eDtMHeV5mkmPHZcbdg6AAnZ/pExlNpEbM=
Subject key identifier:   D2:14:93:38:6C:18:13:7D:D3:38:BD:19:5B:7F:81:AD:BF:12:31:1D
Certificate issuer:       /CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
Certificate serial:       010D0C9F4328584A5BFCE6FF08D375BC39723490
Authority key identifier: 04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     14397
IP address blocks:        104.251.115.0/24 maxlen: 24
                          104.251.116.0/24 maxlen: 24
                          104.251.117.0/24 maxlen: 24
                          104.251.118.0/24 maxlen: 24
                          104.251.121.0/24 maxlen: 24
                          104.251.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5b:fc:e6:ff:08:d3:75:bc:39:72:34:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=5aae8aa7-f0fd-4126-ae77-e8835b5b4814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e5:67:82:cd:f1:4c:00:66:6a:a4:3d:11:8d:
                    62:75:7e:ee:44:66:75:6b:e2:7f:fc:c2:74:e2:4d:
                    85:e6:c9:32:75:c4:3f:7e:b4:19:52:dc:79:04:af:
                    0f:9b:5a:53:f3:0d:a0:15:a0:cf:51:f4:7f:18:b4:
                    68:23:70:1b:ef:85:c8:d0:f0:17:ca:1e:28:c4:56:
                    c8:c5:88:bc:58:b7:d7:3e:2e:3c:8b:a7:e6:f4:3f:
                    83:3d:b5:c5:3e:cc:00:c2:70:c0:4b:62:09:9b:b3:
                    fc:d5:8d:ac:83:78:27:ec:fb:14:22:09:91:aa:84:
                    6f:45:6f:7b:5b:92:ee:12:27:40:93:e5:a5:b5:64:
                    ba:12:0c:b5:f7:b7:ab:8b:c5:b0:6e:dd:6a:0b:db:
                    1f:d4:46:cf:3b:bb:c7:2c:5f:0f:93:e3:6a:b7:99:
                    75:a6:9e:00:4e:6e:b2:dc:94:11:92:ec:3c:27:e5:
                    2e:9a:ea:5a:fe:d6:43:b3:3a:3c:24:3e:0a:b1:aa:
                    ae:78:bd:8a:f6:5e:11:ff:f4:64:8b:a7:90:52:b7:
                    f3:6c:45:03:e8:34:b1:e9:1f:2b:df:8b:dd:85:93:
                    1e:f5:bf:fd:3b:67:83:cd:6a:e4:43:3c:04:83:0a:
                    d7:fb:5e:2f:fb:ae:1d:c3:84:e4:df:af:55:f6:f7:
                    56:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:14:93:38:6C:18:13:7D:D3:38:BD:19:5B:7F:81:AD:BF:12:31:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/47b622a2-d750-3c73-819d-f6bcdc12c0d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.crl

            X509v3 Authority Key Identifier:
                keyid:04:F1:0E:DC:60:CF:00:7E:40:32:5E:77:15:99:D7:BE:05:F2:06:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/73d2dbae-3f1a-4d9e-9e01-f7ef250f55ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.115.0-104.251.118.255
                  104.251.121.0/24
                  104.251.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:20:39:57:1f:72:15:f1:af:d9:c7:82:22:d4:db:ca:91:4f:
         46:82:d4:be:94:e7:04:af:ec:b6:cc:c8:e6:6a:05:c5:50:c8:
         7a:11:dc:c6:0f:a6:8b:aa:c2:f0:ff:88:00:db:ff:58:18:b6:
         1c:75:2e:5d:8d:2f:f3:dd:0f:4d:c5:0b:7c:22:7e:0b:43:f8:
         4b:90:4c:91:dc:95:78:20:9e:29:92:77:e7:ba:48:e1:d2:82:
         66:10:d2:a7:b3:9d:24:d5:13:8b:d6:83:05:a5:98:25:85:8b:
         f0:8b:ad:3f:24:52:e5:1c:b8:51:17:d9:64:91:b2:52:41:69:
         59:8c:f6:f9:63:91:2b:df:4b:4a:e6:6c:52:01:54:63:23:34:
         44:91:78:e9:0d:66:0d:cd:34:ab:8d:91:12:00:b4:c5:bd:26:
         00:1f:fd:66:2c:05:ee:8e:9c:9a:b7:c3:68:23:47:c8:89:a2:
         d7:89:02:77:9f:9e:49:cf:a5:f9:3a:cb:79:af:fe:07:f1:e6:
         6a:4f:5c:a7:06:41:00:6d:00:8d:04:d0:de:5a:54:10:48:82:
         1b:cc:97:ee:20:12:dd:ac:18:14:db:33:28:34:5c:14:08:26:
         b6:ba:52:7c:f9:60:c2:2a:bd:d7:cf:48:a8:20:11:1e:1a:7b:
         b4:18:78:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:44:15 2025 by rpki-client