Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/62f7d583-c80e-34c3-9aaa-2268f2d87c00.roa
File:                     62f7d583-c80e-34c3-9aaa-2268f2d87c00.roa (raw, json)
Hash identifier:          Gy0LR2hTXccOBPLRz5yXOx2nJV46XDvkk50Yte7oG0c=
Subject key identifier:   9A:B7:5F:F8:C2:09:2A:68:E1:21:29:F2:32:01:71:A0:99:FC:92:8D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584A71EB23418B5F0259D2AE49A0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/62f7d583-c80e-34c3-9aaa-2268f2d87c00.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     13335
IP address blocks:        104.29.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:23:41:8b:5f:02:59:d2:ae:49:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=f7da0f7a-67bf-48d9-9354-351ff7ab647a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:63:06:0d:26:5b:02:10:f2:47:0c:c7:07:da:
                    f8:d0:4f:74:a8:dc:54:a7:ad:6f:88:94:36:1f:f3:
                    33:a7:f9:65:b3:15:89:9e:70:74:5c:23:3a:35:a8:
                    64:4a:a8:7a:63:2c:47:7b:f1:9d:f6:c0:e5:f9:7e:
                    b5:0d:f7:c4:36:7b:60:ea:99:6f:d4:87:ba:09:5d:
                    61:3e:b4:1e:b2:79:99:52:7a:de:3d:ca:6b:86:1a:
                    87:59:fc:4d:94:c3:8d:94:0f:ec:bd:3b:21:ab:53:
                    32:a3:5f:de:13:d5:3e:24:82:09:dc:ec:c9:8c:85:
                    7d:6f:e1:2e:c4:4a:9d:47:07:9c:34:2d:4a:88:f9:
                    70:f7:6a:f8:68:bf:e9:00:06:b2:2d:87:ff:4d:ca:
                    cf:02:81:d8:e8:4c:40:17:52:35:ab:8b:c8:cc:4a:
                    23:ee:c0:5b:ee:bb:38:35:d0:2b:0d:01:37:ea:39:
                    0e:ae:f8:4e:d3:a3:38:cd:06:c3:c0:aa:ed:1b:f5:
                    e7:b5:94:e8:f6:fe:89:11:ae:cf:0c:2f:8f:56:43:
                    7a:9f:7c:d3:39:7e:85:d3:ba:55:49:da:88:be:7f:
                    a1:f3:ad:7d:ca:98:96:36:9a:ee:12:b0:c2:ba:24:
                    24:e1:3c:e9:3d:3c:84:f2:4c:e1:fb:51:07:1a:87:
                    be:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B7:5F:F8:C2:09:2A:68:E1:21:29:F2:32:01:71:A0:99:FC:92:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/62f7d583-c80e-34c3-9aaa-2268f2d87c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:32:65:85:09:f9:a7:7d:ff:36:a7:b9:72:e0:50:ab:a3:ad:
         95:18:d3:79:9f:f2:bd:2b:e2:9e:cc:30:a9:d2:6e:74:16:bc:
         86:7e:8e:32:e6:2f:13:f5:c9:a4:83:20:87:a4:f3:db:8b:b9:
         fa:18:f8:30:2f:6c:e2:2f:36:98:98:43:a6:6e:3c:2d:a9:90:
         84:47:26:b7:20:8d:8d:9d:d0:fc:66:a7:e0:f0:00:c9:2f:28:
         6f:f8:38:84:54:a2:77:cd:11:59:e6:bf:e9:55:fb:5b:62:40:
         98:90:50:35:86:a9:87:0d:13:62:73:58:93:6d:8e:43:3b:6e:
         50:95:bb:56:32:96:64:fd:0a:af:a3:bf:16:32:92:3c:84:1b:
         ca:d9:42:85:23:04:22:d4:b9:f2:ad:32:a3:54:c3:20:9c:0e:
         4b:73:a0:29:de:e3:4a:a5:52:81:3e:bd:03:84:bf:44:58:c6:
         da:5f:1d:e2:29:76:5c:9e:91:a5:16:82:7f:b4:e2:f5:7b:5d:
         96:74:d8:99:cc:26:58:5d:ed:04:2f:d5:fb:4f:5b:5b:c5:02:
         12:48:60:87:a9:b3:e0:cf:43:b1:de:79:6e:86:d8:bf:6e:ef:
         ff:5d:39:4c:ed:d3:64:f0:c9:38:f6:59:e1:eb:07:e0:7a:8d:
         65:09:7c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:01:35 2025 by rpki-client