Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/29d5e091-9446-3719-ad71-bce2ae8ab71c.roa
File:                     29d5e091-9446-3719-ad71-bce2ae8ab71c.roa (raw, json)
Hash identifier:          n73JH7Ke78FMW0CTRJ628TqPHcg8OX0H3/1MtShgYlk=
Subject key identifier:   06:F7:AE:9B:1D:61:F0:3E:40:85:77:68:82:98:47:5F:4F:A6:03:AF
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285849244E779C5FA86B2CF5602700
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/29d5e091-9446-3719-ad71-bce2ae8ab71c.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     14061
IP address blocks:        107.170.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:77:9c:5f:a8:6b:2c:f5:60:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=cc0e032a-25fc-4297-be3a-2551afaa53fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:47:c4:54:6c:cd:0d:7d:ed:56:83:65:4b:1b:
                    1b:15:18:c9:47:84:61:9a:fa:40:28:3f:e4:d8:96:
                    04:12:cd:1c:c5:4e:cc:71:c4:d2:57:1a:53:b0:47:
                    63:1d:87:34:9f:b7:a1:51:c0:9a:32:a8:f0:46:4f:
                    5b:b4:33:09:61:95:e5:9f:d9:d0:02:7d:d2:12:ae:
                    b1:12:94:04:92:d9:3e:42:2c:11:07:2c:3e:59:0a:
                    c2:f3:38:49:a9:14:db:96:69:71:74:89:77:60:60:
                    86:9b:db:47:f1:ab:28:e6:27:3f:5c:df:97:a1:7c:
                    2a:5c:49:44:c0:ac:c7:ff:87:27:10:99:84:ce:f8:
                    cb:b5:46:28:24:7f:a6:bd:40:9b:55:cd:a6:ef:b0:
                    b9:54:7e:68:70:ef:5a:e5:8e:79:9d:e9:73:c3:1c:
                    19:2f:4c:92:d3:88:af:eb:89:e6:df:58:76:dd:59:
                    5a:84:83:97:7c:a6:5e:93:29:3e:0b:b2:14:7b:8e:
                    96:af:22:df:d4:61:43:69:bf:28:5e:99:42:37:9c:
                    21:b7:4a:a9:43:3c:6b:a3:2f:38:e0:75:6a:f7:c9:
                    28:9d:5c:77:22:f4:51:4d:0e:74:b2:a7:96:69:cd:
                    3f:01:ef:6d:af:25:31:e3:66:f6:8b:2d:90:80:56:
                    a3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F7:AE:9B:1D:61:F0:3E:40:85:77:68:82:98:47:5F:4F:A6:03:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/29d5e091-9446-3719-ad71-bce2ae8ab71c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.170.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:0b:6e:ea:9b:08:77:20:11:1c:da:43:2f:79:fe:b2:e3:cb:
         c7:e6:dd:d3:c7:98:80:a1:ae:a8:c0:42:cc:c3:14:20:b2:6a:
         31:48:0c:7c:2e:13:e4:5c:9f:93:1b:e1:4f:21:a1:fe:df:70:
         54:a3:dc:0b:20:ef:93:5b:a4:ec:12:52:05:9c:c1:f3:7f:ed:
         e1:18:8c:9b:5b:2d:a8:2d:11:12:18:ad:44:a5:d4:7d:b3:cd:
         68:b3:47:50:5d:54:82:a2:a3:75:93:a0:6e:28:24:3e:46:82:
         be:24:42:35:1c:80:14:ad:3e:65:70:53:db:da:be:a9:ea:2c:
         3c:d0:16:79:2b:25:ab:c4:16:5f:aa:57:5b:67:ef:99:0d:03:
         1a:c0:91:41:97:8e:12:10:1b:97:a8:a4:54:31:ed:d2:73:f2:
         b1:11:c3:cf:c1:8b:f5:c3:5e:c0:49:ee:f9:c4:18:1c:6a:13:
         85:d9:e5:01:21:ab:99:1f:f7:31:ed:92:c7:1f:87:b3:74:74:
         d7:4d:a4:72:0f:73:28:62:8d:e9:ac:05:4b:1f:f2:ce:a8:f5:
         bb:c2:0d:85:08:b7:e6:7e:44:d7:52:23:8c:e9:84:36:bb:3a:
         4b:8c:c3:7c:17:ff:51:41:09:ed:f9:1d:13:09:8f:8e:a2:4c:
         de:31:ea:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:24:45 2025 by rpki-client