Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/dabb5b5a-e1c1-306f-8465-f7f0a800fee9.roa
File:                     dabb5b5a-e1c1-306f-8465-f7f0a800fee9.roa (raw, json)
Hash identifier:          BJknIsIkUaOH3q81rJRiyh+n3gC3GfO7FVh9jBsFFQs=
Subject key identifier:   0F:35:30:6A:B6:2C:CD:C2:83:EE:38:1A:E5:17:4B:D1:E6:A4:A8:EB
Certificate issuer:       /CN=3fd37bf6-6955-4ed5-8347-2896767afab0
Certificate serial:       010D0C9F4328584A4DA044D5A918E088D485E900
Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/dabb5b5a-e1c1-306f-8465-f7f0a800fee9.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     40545
IP address blocks:        104.255.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:44:d5:a9:18:e0:88:d4:85:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=e74f4950-4249-4374-b6ff-709a2a8a51f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:37:62:58:c5:61:b8:46:99:0c:d2:b1:28:87:
                    f1:5e:e4:05:1d:d5:37:b1:fa:db:7d:7c:15:6b:e0:
                    ad:27:c7:6b:74:31:70:15:b8:cf:f7:b8:7b:d1:75:
                    c7:99:b3:f8:97:5e:e8:b6:6f:f5:1f:a7:89:ce:e6:
                    66:20:bd:06:bb:58:79:b1:8a:c1:14:0a:cc:a0:73:
                    2e:70:3a:38:e0:bb:ea:a0:bb:8f:3b:00:51:79:c9:
                    de:52:05:46:08:d8:82:39:47:22:d7:cc:87:df:7f:
                    1a:35:21:98:55:82:1e:4e:e4:ad:a4:ef:a7:60:87:
                    7f:0e:a4:42:c3:36:50:76:fc:dc:ab:f0:35:13:2b:
                    bd:a6:1d:68:37:47:62:0f:3a:b4:2e:c1:19:f2:17:
                    c5:8d:2c:da:8b:8c:41:c0:e0:dd:2a:24:cf:9f:32:
                    ad:05:ea:04:6b:ff:fa:19:a9:3b:dc:1f:ff:cc:a0:
                    08:ea:d8:f4:d7:62:a7:91:aa:ad:6c:a1:26:02:53:
                    bc:1c:cb:a9:6d:4e:dd:a8:4b:c0:07:3f:a1:45:81:
                    89:e5:a1:a8:5d:20:b3:e4:c0:4b:38:d6:b8:ef:45:
                    7b:d1:25:c0:7a:1d:4b:d4:30:37:0e:56:f1:46:cf:
                    c6:3d:6a:c9:82:c9:7f:aa:f7:e3:18:3a:42:b9:37:
                    e3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:35:30:6A:B6:2C:CD:C2:83:EE:38:1A:E5:17:4B:D1:E6:A4:A8:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/dabb5b5a-e1c1-306f-8465-f7f0a800fee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:9c:9e:c0:48:91:42:ec:1e:a7:03:64:67:b8:bc:3c:68:b2:
         e4:45:10:9d:9f:af:6c:98:c7:2d:21:8c:5c:6f:bf:1f:27:03:
         5e:ca:78:d0:2a:d7:da:5c:f3:e7:ea:f1:1d:66:b1:ef:b6:60:
         41:8c:8e:95:c5:b9:19:9f:23:cd:45:cd:48:5a:21:bc:77:8c:
         d4:2d:4e:12:77:77:83:7b:60:a3:05:3b:4a:9c:19:44:e5:1e:
         4c:64:ea:92:49:aa:88:7e:0d:b0:6c:aa:72:0d:93:0b:38:fc:
         73:2b:f5:52:96:17:fa:cc:31:7f:2a:7c:5f:e4:bb:65:89:44:
         1c:1c:3b:5a:64:d7:53:80:f4:91:c2:bd:c3:dc:f5:b6:b8:30:
         15:57:c0:25:39:0f:36:3a:1d:d1:66:a1:c4:2d:f9:2c:db:65:
         12:71:ac:88:9d:bf:1f:ba:2c:15:70:7e:00:32:32:68:4e:97:
         43:b1:01:b2:63:48:35:2f:88:f7:03:d8:a6:72:28:6e:ea:12:
         f4:d1:d2:4e:81:06:7f:fb:7a:18:b7:12:7d:45:63:d5:49:0d:
         1f:8a:a5:72:7e:c7:78:7d:63:5e:22:74:23:12:9a:60:fb:f3:
         25:a1:b6:e2:52:c9:b4:07:68:01:94:4a:37:71:4c:b4:a8:c7:
         c8:93:2e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 04:18:21 2025 by rpki-client