Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/18929dd0-8abe-380b-8457-8fd0f487c7b5.roa
File:                     18929dd0-8abe-380b-8457-8fd0f487c7b5.roa (raw, json)
Hash identifier:          4SI1Z/npX5eYcCtJ4qDiyQCNcMNzI42CFzvyoiwkjSY=
Subject key identifier:   3C:B4:09:8C:05:38:5E:B9:FF:E9:45:B6:52:73:01:6F:93:F5:DD:2E
Certificate issuer:       /CN=e5333a6e-37dc-4213-b928-ae0341454759
Certificate serial:       010D0C9F43285849CE9A3EE0DA36D21613BD9080
Authority key identifier: 39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/18929dd0-8abe-380b-8457-8fd0f487c7b5.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     46650
IP address blocks:        104.245.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:3e:e0:da:36:d2:16:13:bd:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5333a6e-37dc-4213-b928-ae0341454759
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=9512fd83-753c-4779-9753-bb9414fec399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:53:9a:bb:58:5b:85:8f:61:b4:6a:53:10:
                    53:98:04:11:35:75:20:b2:00:c8:a5:e1:23:c7:fa:
                    68:6f:d8:f8:40:8c:80:e8:a9:d2:d4:9b:cb:bf:79:
                    7f:97:0e:75:9d:1b:37:fe:c1:d9:e2:c9:a2:86:52:
                    93:61:1a:85:b9:08:0f:a4:82:1e:c8:03:00:7e:7b:
                    22:14:0c:f0:3c:ce:bd:05:c1:97:69:4e:76:03:ee:
                    fc:73:08:6f:7a:83:a6:57:a4:1f:58:6d:d8:7a:65:
                    fe:60:22:51:11:98:0e:d6:f8:ae:09:ef:11:56:3f:
                    78:05:43:59:97:af:26:32:4e:f6:6a:2d:c2:35:21:
                    99:23:cc:61:5f:bb:47:1e:7a:34:08:39:02:d8:e0:
                    e4:45:49:f1:fe:70:2a:3b:16:73:c1:c9:d7:70:ce:
                    43:c7:fd:f5:f4:2f:dc:4a:a0:20:28:bf:12:d7:fd:
                    c0:3d:5b:c1:00:e2:80:e1:78:37:69:ae:94:8d:a7:
                    28:bd:ad:e6:53:02:9a:3a:cb:7b:28:bc:12:c2:c9:
                    34:b8:7a:95:25:75:ed:35:c4:71:8a:99:1e:fc:9b:
                    e3:85:9b:83:45:8d:77:a2:44:2f:5b:85:40:39:c5:
                    37:27:76:18:f2:da:90:2a:40:0a:af:5f:df:a4:27:
                    87:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B4:09:8C:05:38:5E:B9:FF:E9:45:B6:52:73:01:6F:93:F5:DD:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/18929dd0-8abe-380b-8457-8fd0f487c7b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl

            X509v3 Authority Key Identifier:
                keyid:39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:3c:ff:81:7c:a4:8d:c5:76:4e:d6:f1:9d:c6:8c:c1:35:8f:
         01:b0:df:dd:be:c2:cf:99:b1:3d:da:ea:71:57:b8:e8:f3:22:
         03:1c:fe:af:53:df:6e:bc:6a:66:f8:38:01:b7:22:e2:e0:59:
         80:11:bc:bc:c0:76:12:18:2c:46:98:19:36:56:69:15:2c:9f:
         76:7e:6b:d6:1a:1f:3c:f5:04:21:de:3a:c7:16:29:31:37:75:
         00:d0:68:6d:3e:83:65:e8:5f:4c:dd:bb:93:ab:be:b3:bc:a5:
         31:85:39:e0:07:7b:d7:3b:e6:f0:b4:eb:e8:0e:9e:93:63:d5:
         e3:45:3e:90:ef:63:0c:c7:88:9d:4e:ab:b0:13:a0:cd:fa:d3:
         07:48:6f:e4:b1:48:73:d8:f3:e7:12:2d:3a:5d:01:8f:d0:4d:
         97:6e:07:e4:11:b6:3a:3c:25:37:33:44:33:e7:b2:9b:88:5b:
         32:9d:da:df:87:14:e8:9c:cb:30:4f:27:6c:cf:9f:5a:de:5a:
         af:8b:0d:ed:17:14:82:9f:a8:65:b2:08:df:5b:11:7f:46:8a:
         8b:c1:26:3c:be:df:8d:75:9a:a9:b2:79:70:30:99:20:40:87:
         f8:26:83:22:40:4c:f9:39:b0:cf:dd:a2:bd:28:c7:2e:73:27:
         00:90:92:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:31:19 2025 by rpki-client