Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6b486459-fd42-3f9d-ba11-c668c95bcc60.roa
File:                     6b486459-fd42-3f9d-ba11-c668c95bcc60.roa (raw, json)
Hash identifier:          Hswn+gBGeXwyHPNDo++v0UEBjFFRTfVd5em7u8T9a6s=
Subject key identifier:   C9:70:A8:EF:51:9C:9E:D9:FE:08:9E:FA:85:0C:64:BC:B9:92:9B:C2
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849028F7F67147B29664C279C00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6b486459-fd42-3f9d-ba11-c668c95bcc60.roa
Signing time:             Wed 26 Feb 2025 10:54:34 +0000
ROA not before:           Wed 26 Feb 2025 10:54:34 +0000
ROA not after:            Tue 27 May 2025 09:54:34 +0000
asID:                     30036
IP address blocks:        104.201.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:8f:7f:67:14:7b:29:66:4c:27:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 26 10:54:34 2025 GMT
            Not After : May 27 09:54:34 2025 GMT
        Subject: CN=88a5bbcf-4061-4d33-8730-ac2c2e473322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2d:ee:f1:d9:20:b8:7f:20:d9:3c:41:c4:67:
                    22:e7:66:6e:8f:67:f6:8b:b9:6c:f2:b4:d6:a1:01:
                    65:92:37:28:7c:1f:b0:56:ed:dd:20:6c:d5:6a:09:
                    c1:83:e9:8e:e6:31:bd:de:4e:7a:71:55:fe:06:0c:
                    75:4a:d3:93:b8:41:a2:c0:3c:1d:a8:7c:f9:c7:90:
                    f7:07:ca:98:8f:3e:1d:e8:75:b7:55:f3:d9:55:ec:
                    44:2d:9c:b8:b7:65:e0:b4:23:d0:82:3d:9e:80:63:
                    5a:1d:b0:2d:0d:68:08:40:f0:9d:0b:c9:23:e2:bb:
                    fa:66:22:41:7f:e7:f6:e3:e9:3b:61:36:88:ee:26:
                    a3:3e:b4:99:b3:f9:5f:6d:31:49:28:73:37:c0:b9:
                    fa:ef:8a:4e:2c:e9:e3:b1:44:ba:fa:99:69:56:4a:
                    12:6e:71:28:4d:36:49:e9:e0:98:80:3b:85:1c:7c:
                    4f:66:49:1c:4e:41:bd:8d:7f:a2:75:82:da:6b:13:
                    cb:75:db:50:09:77:48:92:08:6c:d4:bc:5b:02:94:
                    a9:4f:78:d6:df:ed:47:3a:ec:e4:49:e1:7b:1d:4e:
                    21:8b:09:d2:5b:09:dd:85:46:31:c4:bb:06:cc:8d:
                    05:08:36:1d:c1:38:67:61:3c:f2:18:f6:3d:e4:9e:
                    24:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:70:A8:EF:51:9C:9E:D9:FE:08:9E:FA:85:0C:64:BC:B9:92:9B:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6b486459-fd42-3f9d-ba11-c668c95bcc60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.201.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:8e:09:c1:58:c8:37:32:89:22:71:45:77:78:e0:e7:a4:60:
         f5:f1:6c:58:5d:83:96:74:87:44:15:e4:83:a5:dc:28:c2:ae:
         d3:af:80:e0:16:09:c9:0a:34:56:cd:1e:51:6d:15:fc:d1:a8:
         9f:02:70:93:dc:ea:fa:7d:44:80:e4:6d:db:47:33:25:f3:11:
         e9:2e:b1:51:5c:46:1c:5e:ab:0a:2e:6f:4d:84:84:c4:ff:69:
         1f:b8:89:a6:d0:6d:6c:ba:1b:f9:e5:c0:4e:bb:61:a8:5b:1a:
         7c:b7:bf:fd:df:b5:f4:58:af:05:da:df:7f:7a:1f:0e:91:83:
         1a:ac:d0:ea:dc:38:f6:20:52:67:68:d1:8b:5b:a8:cb:6e:52:
         22:b8:9b:bf:a0:8e:e5:25:af:1c:7f:57:dc:e7:28:74:f0:3e:
         5d:18:63:c0:05:a3:e0:f7:7d:c1:22:21:9f:6d:24:45:34:ee:
         8e:bb:06:e0:e6:f3:32:4a:c8:fc:74:3f:3c:64:c3:3e:d5:41:
         bf:a3:47:02:ce:a5:51:c3:00:cc:fe:16:cc:a1:ae:b0:a5:97:
         a6:f7:1c:36:b2:26:e1:3a:cb:bb:4f:b9:4e:6e:68:4d:91:fc:
         74:c0:14:1d:cd:28:fc:9c:c0:7f:f7:12:40:be:27:cd:5f:9b:
         15:52:0b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:01:09 2025 by rpki-client