Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/274eccfe-b1e2-39fe-b087-b859ed7ba9a4.roa
File:                     274eccfe-b1e2-39fe-b087-b859ed7ba9a4.roa (raw, json)
Hash identifier:          FD/K3Ggz/lE0bmAjnRtXlYItqkOPe2V3/yvYFINlhFk=
Subject key identifier:   F2:0F:7E:BA:DE:35:37:9E:BB:24:40:85:9C:32:A5:6A:E1:4E:91:34
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F432858490296E489CA26E4557DE0C200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/274eccfe-b1e2-39fe-b087-b859ed7ba9a4.roa
Signing time:             Wed 26 Feb 2025 11:09:28 +0000
ROA not before:           Wed 26 Feb 2025 11:09:28 +0000
ROA not after:            Tue 27 May 2025 10:09:28 +0000
asID:                     30036
IP address blocks:        104.201.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:96:e4:89:ca:26:e4:55:7d:e0:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 26 11:09:28 2025 GMT
            Not After : May 27 10:09:28 2025 GMT
        Subject: CN=1ddc1261-fc8f-4780-9d14-cfc5ef9b7379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1f:73:f4:81:34:b3:45:8c:88:54:65:a1:63:
                    9f:5f:93:aa:11:4a:e9:df:35:6e:1a:76:f3:63:3a:
                    eb:84:00:84:2a:ec:49:38:f5:c0:73:d6:9e:ed:b1:
                    5a:3a:26:2d:ee:d2:23:45:48:72:ff:20:79:e6:ef:
                    dd:08:2e:3a:a0:e2:fa:ae:8c:cd:e1:ad:d5:57:15:
                    b9:6f:15:cf:f0:af:f5:8c:b9:17:43:66:54:ca:9b:
                    3d:22:d6:cc:80:76:95:ed:fb:37:e7:dc:a4:e1:f6:
                    b6:c0:8f:55:11:c5:92:16:e4:78:67:61:8b:65:55:
                    76:4d:56:48:48:0b:33:4f:d2:22:8b:e4:3b:9c:80:
                    04:26:b7:aa:8a:a3:12:f7:38:27:5e:f7:a0:26:6a:
                    d1:67:8d:be:4c:98:b6:9a:96:bd:f9:5a:9d:2c:06:
                    e7:8e:41:a1:3c:87:bd:c8:8e:89:71:c9:39:21:2c:
                    d7:65:3b:fc:e5:78:37:b8:d4:f5:c6:c7:18:3b:5c:
                    86:7b:ac:af:04:20:2e:c6:fc:f3:6c:5f:8e:8f:04:
                    0b:59:29:b9:e6:f8:68:b9:2c:c3:04:67:91:35:ee:
                    01:2f:7b:98:9b:0c:64:e4:1d:e1:3b:62:5a:63:6f:
                    e1:81:ce:b6:5b:e4:d0:c5:6a:b6:4a:7c:1e:20:23:
                    17:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0F:7E:BA:DE:35:37:9E:BB:24:40:85:9C:32:A5:6A:E1:4E:91:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/274eccfe-b1e2-39fe-b087-b859ed7ba9a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.201.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c7:04:b2:b5:7c:55:da:36:43:a0:a2:90:fc:59:ed:29:a2:
         b0:f8:76:e6:be:71:9c:3b:63:80:5c:8c:e4:11:6a:5f:08:0f:
         15:b8:65:ef:17:ab:bc:63:f4:3f:1c:00:cf:83:48:e7:e0:93:
         13:8d:b2:77:1f:39:a6:fa:ba:be:2b:c6:18:07:1a:fb:fe:93:
         15:b1:91:99:30:39:f2:07:af:30:26:68:a5:a9:1a:e4:ed:c9:
         5f:94:47:ea:c4:0d:a3:b6:4b:b3:ab:bc:9e:cf:81:54:a0:14:
         49:aa:a2:54:de:a2:14:9e:3f:28:94:d7:30:c3:93:26:fd:7d:
         cd:1e:d3:a4:43:02:57:9e:a3:7a:88:72:ad:58:82:d1:55:65:
         1d:99:17:e9:9c:aa:fe:71:ff:98:26:db:05:da:1a:ef:09:fa:
         2f:cd:17:d7:02:e9:16:c3:ce:8c:c0:c7:d8:c7:64:68:5f:27:
         6b:58:56:3b:f1:97:9b:64:70:0d:c7:00:ff:91:5e:33:56:45:
         60:73:62:cc:cb:79:44:f4:e4:5e:05:8e:24:b8:00:92:dc:03:
         16:53:2a:5d:83:b4:7d:66:99:28:56:64:50:89:8e:f2:46:5e:
         cd:83:66:a5:50:a9:89:23:16:5f:74:bc:b3:9e:9d:4b:96:ef:
         71:43:e0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:01:18 2025 by rpki-client