Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1522aa76-1dfa-3c0c-9493-7693278d4818.roa
File:                     1522aa76-1dfa-3c0c-9493-7693278d4818.roa (raw, json)
Hash identifier:          TBdLc1AXy64Y38gLBbt2K1qLqH3lirQ8z81vDKenHCw=
Subject key identifier:   63:39:6A:43:7D:E7:CF:D3:E0:55:43:70:AB:F1:EC:64:1B:F3:77:24
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849D85F8B97D5825EBE37BBF180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1522aa76-1dfa-3c0c-9493-7693278d4818.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     33905
IP address blocks:        104.96.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:8b:97:d5:82:5e:be:37:bb:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=cb6e242e-3497-4ec8-b36b-3608ad631e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4b:fd:e5:62:16:5c:11:6b:60:b6:89:24:27:
                    23:26:61:38:e0:8e:f8:73:f8:e2:ab:d1:f6:bb:62:
                    fc:67:97:e6:6d:31:4e:f7:f8:c0:73:97:52:ac:d3:
                    ea:d3:9b:d0:01:75:df:7c:ef:a2:99:04:95:e8:36:
                    df:8e:fb:2b:a8:97:d5:75:8b:e2:e6:ff:52:13:da:
                    cc:8f:29:3e:34:71:be:4c:78:af:99:07:85:1c:f5:
                    9b:7c:55:f0:dc:8a:f8:18:1e:b1:63:76:1d:8b:d4:
                    67:5e:d1:d6:5c:87:6d:12:9e:ee:d1:6f:3e:be:ee:
                    2c:9a:ec:36:69:e4:18:66:a3:2e:88:d9:77:e9:48:
                    9e:6c:92:80:b6:cc:68:1d:4c:c1:4b:91:f0:e5:be:
                    f5:23:4d:1e:f7:f1:6a:8e:5d:4c:6c:cb:12:a6:6b:
                    1e:e0:55:74:be:39:22:da:6c:ed:08:de:ae:2c:98:
                    f5:82:e5:15:b1:20:83:47:77:71:ed:39:e3:1a:d2:
                    0f:fd:92:10:41:fb:80:93:75:4c:ab:77:9c:ac:c2:
                    e0:6c:8c:da:52:ab:07:d4:70:36:80:63:3c:14:0a:
                    46:87:3c:50:d6:4b:98:fd:cb:7d:90:68:4c:8b:a0:
                    60:f5:8d:e5:c3:0e:42:80:5e:a3:0c:58:c9:7a:dd:
                    23:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:39:6A:43:7D:E7:CF:D3:E0:55:43:70:AB:F1:EC:64:1B:F3:77:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1522aa76-1dfa-3c0c-9493-7693278d4818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.96.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b6:ee:dc:01:e0:06:54:ba:98:c1:75:46:ea:e2:4d:07:14:
         76:09:43:3f:ce:88:22:28:54:fa:03:ef:50:4f:de:1a:54:e0:
         7d:1d:56:96:ef:d3:33:96:8b:17:b2:f9:c7:e7:fa:ae:8c:c8:
         57:d0:d3:78:eb:40:51:14:bb:6b:d3:a1:69:c6:6d:b1:d6:2a:
         88:3b:ee:7c:b1:74:e0:62:70:fd:f8:69:b9:90:99:3e:16:d5:
         85:28:76:40:de:83:8d:10:cd:75:b4:90:03:61:56:82:6f:b4:
         66:d6:98:90:26:96:18:c3:57:37:cc:2d:13:00:14:9a:fd:46:
         99:c0:bf:b5:48:6c:c1:7c:e6:c2:f8:49:df:c4:10:1a:74:af:
         8e:9d:9b:f7:9f:e5:79:6a:93:6c:2a:24:32:67:63:1d:52:1b:
         db:44:d4:9d:8f:fe:a7:a2:77:37:b5:4a:86:49:1f:b3:85:27:
         d6:c3:9c:2b:40:25:1a:47:2c:7b:cd:54:c3:a5:28:7d:43:64:
         a5:90:b9:64:97:a9:5f:7e:a1:bb:8e:42:cf:d9:22:11:f4:fd:
         14:d0:e4:e5:9e:34:ac:b1:5d:0e:d3:37:f3:49:31:f9:70:75:
         3d:3c:f0:1a:50:09:cc:84:60:3f:74:45:9f:d6:2a:90:99:21:
         03:07:3f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:45:37 2025 by rpki-client