Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06b85e86-f832-36bb-8acc-012d0d584bbb.roa
File:                     06b85e86-f832-36bb-8acc-012d0d584bbb.roa (raw, json)
Hash identifier:          zgBJgbsJrAFRbMIiJYBqhs1LSk1Wi0sVEip9jlu2uyM=
Subject key identifier:   88:34:D6:98:73:7D:A0:DF:7A:F7:6A:00:FD:D1:6A:89:9F:F7:C1:50
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E6550E042EF94D4B49285B80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06b85e86-f832-36bb-8acc-012d0d584bbb.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        104.29.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:0e:04:2e:f9:4d:4b:49:28:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=353918cb-a9fc-485a-8dc1-3c597e1fc181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d0:43:d1:f7:ef:73:2c:b3:97:45:61:7b:1b:
                    9c:3e:0a:23:ca:43:c5:c9:13:2b:98:d3:6b:45:ee:
                    bf:ec:9f:6f:9d:81:9e:be:07:fd:71:68:da:43:62:
                    f1:91:27:c1:e6:66:7d:2b:76:34:0e:5d:c4:c8:ce:
                    e4:1d:85:16:38:be:03:6d:19:07:d6:68:cc:34:08:
                    1a:11:c4:33:99:58:d2:41:42:67:3b:88:44:b5:86:
                    13:c0:02:19:19:c0:4d:ee:06:cb:a0:f2:b9:ac:bf:
                    83:8d:c6:a4:3d:d5:fb:42:ec:26:07:1f:3d:2e:a9:
                    6a:09:48:03:7e:e0:b3:35:42:47:08:8b:0c:9c:7e:
                    1d:69:f2:02:a4:fa:b3:c0:39:ae:8a:6d:d2:5a:b9:
                    c1:5e:4f:bb:ab:07:17:3b:b4:65:5b:8c:61:5a:f6:
                    a6:ad:f7:47:64:fe:6b:c2:8e:47:66:3f:41:0b:c7:
                    80:8d:4b:96:19:a5:94:b0:03:ee:89:09:f3:1d:a5:
                    d5:a2:1d:ab:ee:45:e8:ef:5a:2a:e7:60:13:2a:4b:
                    6c:f8:6d:d6:dd:2c:ad:23:51:e9:a0:7f:17:df:dc:
                    46:66:72:66:7b:9a:d3:22:09:93:3f:55:be:bd:77:
                    6e:96:fa:c1:cf:7c:40:2b:bd:22:25:30:db:b7:cd:
                    da:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:34:D6:98:73:7D:A0:DF:7A:F7:6A:00:FD:D1:6A:89:9F:F7:C1:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/06b85e86-f832-36bb-8acc-012d0d584bbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:5c:a1:04:39:d9:7a:7e:77:ed:f7:06:ab:8a:eb:84:63:cb:
         dd:b1:88:24:47:57:86:bc:dd:c3:e6:e8:d7:88:80:9e:f4:a2:
         16:3f:b7:b0:7f:e4:48:c7:e7:96:fd:29:a3:ed:d1:ee:18:95:
         65:33:51:aa:ed:1a:07:2b:a4:e7:5a:82:de:42:1e:a8:b1:a9:
         9e:8f:4c:d9:64:0f:35:9a:89:85:69:47:10:09:81:27:6f:f3:
         7f:05:64:ae:c1:dc:90:33:e8:0a:bd:9a:f0:47:5e:36:1b:f4:
         2a:70:d1:8d:fc:c0:5b:b1:3e:00:6c:d0:f5:e0:ae:3c:12:c1:
         e5:72:c1:1c:d0:74:b3:09:88:1d:3e:b8:de:03:21:d7:eb:e6:
         07:81:a2:34:9b:73:14:8e:6c:ec:43:1f:43:b8:4f:69:32:79:
         26:12:30:22:8a:06:f3:b0:34:85:c5:2b:07:3e:e7:5a:83:42:
         5c:73:bf:d0:10:7c:fc:e9:43:1f:8c:a3:8c:f4:dd:51:21:e3:
         85:86:dd:d2:7f:de:33:58:0a:88:0d:7f:54:ad:de:33:9e:5c:
         c1:0c:fb:df:2c:93:3f:89:3f:c4:f2:22:f3:62:9e:d8:03:5d:
         a8:5c:8f:4e:85:19:ff:15:7d:a7:d9:4e:98:a9:b3:f5:19:ba:
         ba:fb:ed:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:26:35 2025 by rpki-client