Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f62bf965-4049-3295-b26a-d5b7c8e53f19.roa
File:                     f62bf965-4049-3295-b26a-d5b7c8e53f19.roa (raw, json)
Hash identifier:          YLidJ4iM6NkTeSgltoHDDOasVyl2pkI4W4srpllMfk0=
Subject key identifier:   79:B9:61:05:E9:DA:52:8E:C2:AE:F9:E7:79:21:1E:AB:FA:5A:53:AB
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285849002157E40034D212C498CFC0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f62bf965-4049-3295-b26a-d5b7c8e53f19.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     36800
IP address blocks:        108.179.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:57:e4:00:34:d2:12:c4:98:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=c4ffb289-6934-4a6b-bce5-a37da31760b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0d:2d:5a:ba:f4:ce:b2:71:d3:66:41:e5:61:
                    21:e4:e4:fa:34:83:9d:5a:95:90:0a:5d:ee:f4:13:
                    ff:ae:af:fb:e4:60:5e:96:f2:0d:d4:b0:6d:e4:ed:
                    84:57:bd:a9:95:50:9c:59:df:92:ca:07:11:20:26:
                    fb:a1:0b:a6:a0:13:5a:b2:40:45:30:d6:7d:d0:07:
                    61:31:12:03:6b:58:70:96:de:dc:dc:97:31:96:e6:
                    ed:55:85:c6:90:6b:e2:09:93:77:31:05:dc:3a:1e:
                    0a:30:6b:25:fa:b3:a7:8c:ea:e1:64:4d:c1:5c:fe:
                    a1:f1:e8:69:45:51:d7:30:59:09:a1:02:5d:ec:58:
                    0b:9d:8d:23:03:a9:b8:cf:01:a2:d1:ea:f6:fa:50:
                    5b:e5:29:5b:a3:3a:ab:91:dc:5e:e9:a9:95:98:27:
                    5d:af:8a:42:b2:00:ff:22:81:ed:90:40:9b:36:8f:
                    52:f2:f3:b2:17:d7:41:5f:0c:1a:7c:fe:f8:97:33:
                    b9:01:6b:4f:fe:ce:d9:cf:ca:19:3c:b8:6e:41:51:
                    e9:23:7e:30:ca:c0:28:00:38:e8:06:52:8f:16:33:
                    e3:2f:30:97:4f:46:a8:67:62:3a:83:38:cf:f4:f8:
                    a0:04:43:bf:a7:ba:87:8d:2b:bf:ab:fc:f2:8e:19:
                    4f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B9:61:05:E9:DA:52:8E:C2:AE:F9:E7:79:21:1E:AB:FA:5A:53:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f62bf965-4049-3295-b26a-d5b7c8e53f19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.179.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e6:57:3a:04:d1:e6:7e:54:ae:75:c1:6c:d2:60:29:7a:d1:82:
         b9:bf:7e:81:bf:6d:09:b8:bb:7e:bf:fe:e5:a2:bd:33:59:df:
         7b:4c:e5:1a:f9:47:df:40:b4:66:90:8c:49:9a:a6:f8:eb:7e:
         f3:4b:2b:4f:74:46:79:c5:0f:91:91:ec:aa:b6:84:fe:08:42:
         df:e0:34:c0:10:0e:1a:e4:2d:c1:36:b8:71:ce:aa:1e:f4:de:
         39:31:35:a5:4c:90:e1:f5:fd:f8:a7:43:82:cb:6c:a8:d3:25:
         6a:bf:1b:b2:1b:ca:49:fd:17:ae:f7:07:85:bd:90:71:41:cf:
         78:36:1a:23:ae:c6:67:04:e0:2f:23:a1:1a:2b:cd:f7:b1:1b:
         25:32:94:81:b4:f3:71:9f:86:d9:b8:b9:30:03:27:c8:7f:83:
         d0:cb:f9:48:eb:bf:b3:92:1f:be:60:d6:b3:4e:cb:95:0a:b9:
         bf:df:3a:b0:57:66:bd:6b:bd:7a:1b:af:40:56:64:4a:71:85:
         33:c4:f8:00:1e:71:9b:1e:42:57:6c:7a:e5:81:92:e9:fb:a6:
         08:7a:8c:61:14:69:53:f1:62:c1:1a:9f:e6:db:a4:44:57:fa:
         22:bf:b1:64:b3:d4:98:0c:2d:d4:ae:73:73:62:df:40:22:ba:
         59:cc:34:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:47:47 2025 by rpki-client