Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0b9808d9-6af3-39ec-8c6f-3d86d7f2a905.roa
File:                     0b9808d9-6af3-39ec-8c6f-3d86d7f2a905.roa (raw, json)
Hash identifier:          rjZJeYkFlRgTPI+ZHuaf5P7cfRa2aAvMrCMHJ+3WTdE=
Subject key identifier:   DE:E1:06:DD:E8:AA:55:30:A2:C5:71:DC:FC:37:5E:F4:F2:A2:58:B6
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584905B6C11373A2388F423638C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0b9808d9-6af3-39ec-8c6f-3d86d7f2a905.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13335
IP address blocks:        104.18.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:c1:13:73:a2:38:8f:42:36:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=5782789b-bc8b-4196-8177-2858ac7587bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:57:b6:47:6b:cd:89:5c:3f:72:36:db:f3:
                    3f:66:31:81:4c:7f:b9:cd:e0:8c:69:cd:6b:f3:82:
                    47:2f:f6:13:b5:e2:0e:b0:93:1b:88:56:1d:b2:24:
                    13:37:cb:ed:a6:de:7f:f5:87:15:c4:9e:ac:f2:36:
                    28:13:d8:d4:c8:eb:4e:cb:31:0f:96:fd:d2:78:37:
                    8e:0e:57:44:11:4a:ea:50:27:a0:43:e0:b6:27:cc:
                    ae:ff:b4:41:2b:13:c5:8d:14:cf:38:6c:39:5f:d0:
                    b8:df:83:c6:d6:f9:b8:78:5d:a1:58:9d:f6:b3:9a:
                    e5:41:f0:46:fb:d6:ca:18:68:05:0f:41:97:e9:65:
                    54:e6:c1:80:cd:75:32:d7:dd:25:be:88:0b:05:c0:
                    68:78:cc:2e:4d:ce:97:83:35:e4:86:4a:d7:62:b6:
                    27:15:99:11:1d:7d:1c:aa:89:67:db:51:57:1c:3e:
                    42:c7:1c:a1:22:f3:61:74:19:5d:87:48:f9:9e:ac:
                    be:93:7f:32:04:ad:9b:b1:ac:ec:55:44:9f:c4:bb:
                    95:92:8e:24:bd:43:40:ff:91:53:16:06:eb:7b:18:
                    14:43:27:ab:e6:7e:f2:6d:39:d3:3c:1f:ce:84:f9:
                    c1:75:31:a2:9b:12:07:60:0d:5f:73:27:c3:8d:fe:
                    a0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E1:06:DD:E8:AA:55:30:A2:C5:71:DC:FC:37:5E:F4:F2:A2:58:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0b9808d9-6af3-39ec-8c6f-3d86d7f2a905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.18.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:fb:d5:2e:8e:06:12:76:4c:dc:00:ed:5f:61:2f:5f:3f:f7:
         22:a0:c6:05:57:90:ae:59:cd:41:1b:0c:c9:f1:16:3f:a0:01:
         66:1c:c9:f6:64:bd:21:30:7c:70:bd:be:d3:d2:52:89:fe:5b:
         bc:86:8c:16:6f:d4:d8:8e:13:df:e3:5e:23:fc:fe:5b:b0:a9:
         a1:5a:f4:04:cc:2c:d7:24:d4:eb:95:fe:52:80:95:ce:70:24:
         df:6f:98:72:fc:9f:d0:ff:58:61:fb:8f:5e:3d:d1:27:07:0c:
         07:3b:70:3f:1f:f3:c1:bd:fc:10:f6:67:f0:44:35:2e:81:0d:
         27:76:45:eb:8d:40:99:cd:b7:72:ee:3c:f9:7c:68:a9:12:ed:
         56:d1:d7:f2:d2:3a:6a:6f:11:28:b6:cb:41:3f:92:76:8d:aa:
         8c:01:75:49:24:62:9b:83:a4:56:0c:19:82:5c:3d:57:f0:b1:
         69:64:03:d1:6f:54:43:12:b2:0d:ea:cb:c8:c5:5e:d9:43:71:
         c0:d5:35:74:7e:b1:7b:22:68:7b:ca:ec:61:c4:01:99:68:53:
         32:97:2f:8f:41:94:77:e3:0f:3d:fa:87:64:59:ef:e4:c4:f7:
         4b:d2:36:ca:ae:ac:b0:88:69:33:04:eb:38:c4:5d:fe:f5:42:
         7a:b1:48:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:18 2025 by rpki-client