Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de1fb12c-bc83-3f12-8c82-7299f92c1fa0.roa
File:                     de1fb12c-bc83-3f12-8c82-7299f92c1fa0.roa (raw, json)
Hash identifier:          BUwaIRUpHK2RIgoUhihtuVK28ztfQL8CHKNLoi9o/2Q=
Subject key identifier:   40:75:41:6D:25:ED:C1:D6:B7:E8:22:CF:5A:D4:D8:AC:43:52:E5:B7
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849028FAAD7336BF19D96AC5900
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de1fb12c-bc83-3f12-8c82-7299f92c1fa0.roa
Signing time:             Wed 26 Feb 2025 10:54:55 +0000
ROA not before:           Wed 26 Feb 2025 10:54:55 +0000
ROA not after:            Tue 27 May 2025 09:54:55 +0000
asID:                     30036
IP address blocks:        104.201.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:8f:aa:d7:33:6b:f1:9d:96:ac:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 26 10:54:55 2025 GMT
            Not After : May 27 09:54:55 2025 GMT
        Subject: CN=cfebcaf3-be3f-47ac-8523-fb130ea29948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:24:72:dc:cb:6c:fd:e7:79:d9:27:c0:fe:a2:
                    c4:4a:c9:71:ec:d6:c8:cc:57:4b:a9:da:96:7f:a9:
                    79:6e:3e:8d:b6:42:0d:eb:48:3a:fd:05:90:15:49:
                    06:8a:3a:47:3c:f1:b9:d7:e7:cf:ad:33:36:4f:68:
                    9f:7d:58:31:23:6f:c0:d9:dc:86:9d:34:25:2e:55:
                    fb:5a:c8:d2:b6:51:02:f4:f1:6d:a2:06:6f:47:ea:
                    e5:ef:34:2c:b2:04:b5:bd:52:73:d5:2a:6a:9b:3f:
                    bd:bd:0f:55:33:9b:b3:4f:ec:d1:66:18:21:81:ad:
                    56:7a:06:2c:02:58:11:b6:4e:61:6f:69:d6:90:35:
                    20:13:2d:44:0c:f1:ea:a9:ac:d8:14:08:aa:6b:ea:
                    2d:09:80:89:fc:f3:00:bd:68:02:b4:f8:d2:fe:5c:
                    06:d5:3f:ac:61:56:6b:66:01:e0:86:74:cc:32:c4:
                    6f:f3:1c:5a:03:13:c4:da:d6:24:d0:6c:79:6f:8e:
                    69:e3:23:83:e8:55:a3:1c:92:8b:d6:3a:19:61:d2:
                    a8:33:80:ac:9c:b6:92:3b:d3:a5:08:b6:4f:d7:21:
                    ed:2b:8e:86:ca:0a:8b:c1:3d:f3:f0:d1:b5:c2:ba:
                    3f:cc:bb:4d:da:d7:79:cb:d6:6a:60:b3:2a:1f:94:
                    a6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:75:41:6D:25:ED:C1:D6:B7:E8:22:CF:5A:D4:D8:AC:43:52:E5:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/de1fb12c-bc83-3f12-8c82-7299f92c1fa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.201.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:48:d2:c4:df:80:6a:86:1c:19:5f:69:32:01:5e:c8:02:cd:
         e9:74:50:f6:b9:98:62:02:21:9f:5b:d5:79:0a:20:3f:5c:1a:
         31:ae:98:de:3c:95:a5:bb:76:d3:dc:95:aa:8b:fe:54:d4:84:
         18:54:9d:74:2e:ce:5d:ac:c6:89:07:a2:da:27:b7:83:76:38:
         f5:34:dd:3e:a2:28:2b:d8:53:d2:d1:59:b6:50:a3:74:01:ec:
         db:0d:b7:bc:2d:fb:dc:2e:ea:4f:00:ee:2f:82:c6:8e:74:db:
         aa:cc:b6:3f:93:64:33:9f:67:a9:d9:ac:9e:31:c4:50:29:28:
         9f:20:cf:9a:5e:a7:1a:ba:f2:aa:9c:ef:aa:55:4b:c2:e2:4e:
         5b:3f:e4:fc:3a:68:7b:16:f0:8c:a3:2f:06:06:62:95:27:44:
         f9:11:9e:02:78:a2:5f:f3:d1:6c:6f:8a:a2:75:3c:5b:17:e8:
         54:0f:3f:da:8e:35:2a:8e:40:19:88:93:ab:75:f4:24:78:30:
         7e:2b:6c:0c:1b:49:90:d6:e6:5f:4e:04:cb:0b:b7:b6:d6:08:
         df:c2:fa:ac:44:02:0f:ea:eb:e1:52:44:51:76:c3:c4:c7:11:
         82:39:f0:c8:83:f9:ca:a0:32:06:b8:d5:cf:f0:f2:26:31:0c:
         4d:74:4e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:48:53 2025 by rpki-client