Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/80338f3c-5bf6-3690-92b3-407b7ed7ee22.roa
File:                     80338f3c-5bf6-3690-92b3-407b7ed7ee22.roa (raw, json)
Hash identifier:          OG5Fi8hnSXYPiKikcn6UnJPEA2J1nS7VBpqobG+pYhM=
Subject key identifier:   21:FD:A9:29:3B:68:72:7C:1B:C2:AE:19:83:7D:79:CD:69:AB:94:0A
Certificate issuer:       /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial:       010D0C9F43285848A830AB5B4924E0AF40EF6F00
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/80338f3c-5bf6-3690-92b3-407b7ed7ee22.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        104.200.216.0/24 maxlen: 24
                          104.200.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:ab:5b:49:24:e0:af:40:ef:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=de053d0a-37cd-4ba9-b3fe-65ace57674e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8a:d9:77:21:88:9f:b9:7c:5d:a5:1a:1e:8b:
                    40:ad:e0:1f:81:be:93:35:cf:57:40:18:4b:d0:35:
                    90:d5:60:17:af:7c:f0:7a:eb:af:27:e7:1d:6d:8f:
                    41:ac:35:17:93:15:70:44:d5:e5:a7:63:01:e8:24:
                    68:7a:e7:92:2b:33:8e:a5:4c:4a:4a:a9:23:6b:5c:
                    62:cc:6b:2f:9a:09:30:82:ef:75:db:a9:7f:9a:8d:
                    4a:a8:68:d8:8e:05:78:45:20:38:9a:da:8b:7c:cd:
                    ca:09:93:17:26:0d:19:a0:48:b9:52:cb:17:54:fc:
                    67:15:52:79:5c:12:48:52:54:89:14:12:80:06:a5:
                    78:1e:00:b7:55:5f:6d:88:fa:29:e4:e4:b0:49:95:
                    f8:5f:ee:dd:6d:1c:7d:63:00:c0:c5:06:7f:12:48:
                    ef:2f:1a:0f:c2:04:2e:97:9a:9f:78:ad:2e:9e:ab:
                    1b:b4:39:85:4e:d0:22:38:2a:cd:e2:22:4c:a5:b1:
                    5a:5d:c9:a7:2c:b4:12:71:35:b7:b3:64:b0:e4:fc:
                    44:ab:5b:31:8b:d4:fe:fe:98:ac:fa:88:39:ba:e0:
                    33:c0:c4:d9:00:f4:ef:3e:4a:5f:52:5e:0a:11:d6:
                    49:b9:63:fd:0b:87:84:d2:59:54:ac:bc:be:87:5b:
                    10:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FD:A9:29:3B:68:72:7C:1B:C2:AE:19:83:7D:79:CD:69:AB:94:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/80338f3c-5bf6-3690-92b3-407b7ed7ee22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.216.0/24
                  104.200.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:2b:4a:88:0c:a5:49:59:95:fb:4a:51:d3:79:2a:33:21:22:
         de:1f:f1:30:0a:a2:d8:ee:90:42:f7:ee:6a:b2:63:da:1d:b4:
         13:3d:e6:ca:03:88:c8:ab:d2:89:ac:09:9d:80:f6:98:1c:14:
         08:61:68:cf:45:9e:77:1f:c4:f1:f9:5c:aa:1f:79:29:32:f8:
         cc:29:d2:a5:d4:1e:d9:c5:d7:3c:19:31:bd:cd:cd:f9:23:e0:
         33:4b:c6:62:22:85:1e:c9:3f:8a:41:6a:77:6e:0b:d2:3c:9a:
         a1:83:c2:c6:5e:3a:6b:67:e4:34:22:84:49:73:9c:db:cc:de:
         21:d3:5a:c5:e1:69:1b:7d:3f:a2:7e:01:37:93:2f:e9:a1:dd:
         a1:1f:bc:b1:e5:f0:5a:2b:a7:b5:9e:f2:15:42:7e:9e:fc:e9:
         62:91:b6:41:78:00:33:c6:2a:f1:0a:48:55:5c:85:e8:f7:70:
         f2:9b:0b:7f:df:63:6c:55:da:17:02:af:6a:62:ff:1c:ea:89:
         e6:68:27:20:44:79:e4:2b:13:73:f2:7d:16:29:cd:c4:31:b5:
         fe:19:2e:89:10:a7:a0:68:75:2e:40:2b:ed:07:a0:12:6f:71:
         75:dc:21:82:0d:08:34:a8:41:39:1d:cd:8c:0c:8d:4a:bb:97:
         22:02:a6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:33 2025 by rpki-client