Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a83e6f24-07d1-3db4-b07b-ee14911a684f.roa
File:                     a83e6f24-07d1-3db4-b07b-ee14911a684f.roa (raw, json)
Hash identifier:          qsbnpO5cW3kdbsKCSRuQVfN/odaLv2kd4xUaxrVNo4Y=
Subject key identifier:   29:03:4A:F6:CC:17:44:71:45:B5:E8:F8:C1:00:CF:09:0B:52:66:24
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F432858489E6B6D4C37F99AE7C63F8080
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a83e6f24-07d1-3db4-b07b-ee14911a684f.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     14061
IP address blocks:        104.131.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:6d:4c:37:f9:9a:e7:c6:3f:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=a75977af-cf0d-42ab-b9d4-58551eb70fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4d:cb:bb:76:38:0b:04:18:79:20:94:e5:eb:
                    f5:d1:14:1e:53:a9:4f:db:cd:1e:73:0a:3c:57:6b:
                    26:ac:0e:84:83:61:53:d3:bf:58:be:be:90:67:62:
                    b4:ff:34:3b:93:50:8a:ab:ed:f1:5d:5f:60:47:e9:
                    ab:48:a9:dd:be:ce:a4:27:cf:74:c1:dd:99:89:c7:
                    b2:3d:c6:f1:04:01:3b:f3:7d:02:55:9b:86:5f:00:
                    40:f4:2d:1e:15:15:3d:4b:e1:a5:5b:c6:b8:f1:2d:
                    75:59:79:e9:27:16:de:e5:bd:58:7f:e2:eb:40:16:
                    04:0f:a2:2e:2e:ce:91:1d:0c:b1:2b:94:3b:44:e5:
                    52:7f:c9:5b:b8:00:af:4a:69:a8:48:57:38:28:58:
                    b8:0f:ae:e1:5b:b3:51:a5:d5:11:85:4b:6c:eb:40:
                    fa:78:37:12:bf:01:71:f3:2f:2c:e6:68:90:9f:f7:
                    11:35:04:fc:9f:1f:19:9b:87:f3:71:21:6b:f1:23:
                    6c:b1:bf:68:e0:bb:db:d0:8b:b9:b2:6b:0f:ae:fa:
                    7f:2e:7e:cf:f3:83:d4:32:16:b3:6b:53:2b:c4:f6:
                    3f:ac:a1:47:5f:c3:36:1b:d3:73:6e:63:ba:7e:6f:
                    38:13:5f:11:c0:0d:80:88:68:e5:4f:01:4d:1b:4b:
                    a5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:03:4A:F6:CC:17:44:71:45:B5:E8:F8:C1:00:CF:09:0B:52:66:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a83e6f24-07d1-3db4-b07b-ee14911a684f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.131.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ca:0b:70:83:ca:0d:6a:8c:24:a2:56:07:c8:fd:d5:4b:ef:
         cd:40:94:11:98:cc:8f:85:33:56:4e:6b:65:79:e7:a3:00:e9:
         8f:87:44:d0:66:98:de:72:ea:ba:8d:54:9a:db:d1:3a:1a:11:
         04:b7:00:54:a4:e9:ad:40:e1:2f:2c:ab:aa:1e:70:f0:a4:a1:
         1a:ce:66:8b:8c:b8:73:32:d4:5c:41:1a:17:ca:7f:7e:4d:c8:
         c3:bf:f3:59:94:fb:f5:93:89:c4:cc:71:15:37:d2:0c:63:ee:
         87:53:62:48:11:a0:b3:ad:55:33:e9:a6:14:fa:63:e9:94:ed:
         41:90:7c:58:5d:aa:d7:7f:21:24:02:8d:28:78:d6:b0:33:af:
         57:96:aa:82:2f:d8:99:9b:e7:14:aa:41:f6:11:aa:23:f8:e6:
         17:31:f4:61:e9:d2:5b:60:87:37:38:83:79:24:9a:a0:53:43:
         2f:b3:34:30:a2:79:45:64:bd:9a:99:36:95:aa:9a:98:38:cf:
         fc:98:c3:07:d5:a9:97:10:7e:47:b8:47:fe:6a:54:13:31:72:
         9e:a2:a9:56:34:7d:ce:b5:62:b3:5d:ff:77:27:ec:a3:a1:95:
         e0:43:8e:5a:80:c3:aa:60:f3:6f:7e:c0:02:e8:2b:6f:9b:08:
         a8:fb:4f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:27:45 2025 by rpki-client