Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06573e63-97cb-3095-bb07-f1aff6375b83.roa
File:                     06573e63-97cb-3095-bb07-f1aff6375b83.roa (raw, json)
Hash identifier:          zdd3/6vaT7mue7RxrUNKQtxq8uErbBf2LSeeSVCnRJ4=
Subject key identifier:   2A:1A:49:C6:9E:25:04:EB:0F:28:24:71:43:5E:D6:9D:68:70:81:70
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584A71EB237ECE5556441B55CEC0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06573e63-97cb-3095-bb07-f1aff6375b83.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     13335
IP address blocks:        104.29.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:23:7e:ce:55:56:44:1b:55:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=2bdb08f6-075e-483f-b5e6-1570e527e0ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:17:6f:2a:e7:20:12:7e:1d:48:19:f0:49:ba:
                    83:e1:89:ed:b5:55:3f:64:2c:d3:bf:04:74:d4:21:
                    b3:67:91:dc:50:92:13:02:f7:54:8f:19:b6:5d:d0:
                    78:2b:36:6a:af:a8:c2:5a:79:7a:26:6a:ff:0f:cd:
                    7e:be:fe:94:d4:7e:50:da:b3:41:01:0f:3d:37:f0:
                    d0:b2:de:5d:2c:b8:96:98:ed:b5:87:98:dd:7e:5e:
                    53:bd:55:89:e8:76:40:bd:d6:2b:6e:55:6b:b1:f2:
                    68:8c:78:29:e8:15:1c:df:f3:45:bd:dd:2f:f2:dd:
                    c5:bb:2b:0f:a3:76:8c:e5:a3:35:28:ea:8c:c9:a8:
                    a2:1d:26:91:df:4b:e2:46:c8:e7:b7:2e:a0:76:bd:
                    7f:69:ee:12:ee:ff:da:b9:0f:e4:54:f1:e2:ed:1c:
                    a9:17:bd:0c:de:43:11:08:6f:3f:2f:15:d0:49:94:
                    05:a0:1b:ef:a8:61:fd:3f:25:90:1e:2a:03:21:25:
                    7f:30:a2:22:fb:08:69:96:98:1a:c6:f2:8d:28:45:
                    f2:a1:64:13:5a:67:03:e0:32:11:90:49:81:ff:66:
                    65:6d:8a:e8:36:0b:c0:18:01:36:e5:f2:be:48:e6:
                    c2:36:3e:f8:fe:d5:de:2d:40:51:07:7b:ef:82:06:
                    be:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1A:49:C6:9E:25:04:EB:0F:28:24:71:43:5E:D6:9D:68:70:81:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06573e63-97cb-3095-bb07-f1aff6375b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:f5:d4:fb:31:50:d2:0c:7b:24:3b:3e:fe:0a:9e:d0:d8:fb:
         b1:2b:ab:97:fa:00:56:da:5f:0f:7b:c6:c9:be:94:bd:64:9f:
         6d:d6:7a:05:a3:3a:e8:c5:25:16:02:4f:a4:3e:c8:98:a5:a1:
         56:03:0d:6d:bf:76:fa:e1:d5:df:31:60:72:aa:07:b2:98:aa:
         07:a0:30:c5:1e:c0:8b:ac:96:3b:3f:81:ad:67:d6:f4:82:61:
         54:1d:25:48:4a:22:ec:ad:da:4f:6f:e2:fb:15:52:68:7e:e3:
         0e:d9:a2:88:32:f5:74:3d:0b:10:82:e7:b5:f9:bd:3b:97:d5:
         21:7c:05:e3:4f:71:7f:51:e2:19:19:7d:85:8e:99:55:b8:78:
         cc:82:9e:17:38:69:01:87:c0:c3:e9:76:58:10:8f:53:10:06:
         fa:45:66:cc:d1:08:56:75:65:8b:8a:bb:3d:6b:8d:7f:d1:cb:
         f5:98:da:9d:5b:2f:ee:cc:f6:97:40:02:52:63:09:f1:2e:d2:
         ff:e9:f8:00:71:04:90:cb:bf:3c:ca:b8:7e:c7:5b:2a:8c:c8:
         0d:73:7f:62:2d:81:e2:be:1e:e9:b6:10:ae:86:2e:d8:04:0b:
         7e:de:17:e1:d8:c7:6a:b5:af:e4:74:85:1a:57:90:79:98:94:
         1c:10:3c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:58:13 2025 by rpki-client