Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0fbb6846-8108-3d37-9e02-19434829d00a.roa
File:                     0fbb6846-8108-3d37-9e02-19434829d00a.roa (raw, json)
Hash identifier:          W0MU1RODd+Iuy5muxREmPUFfHMxYdgMguoQ9YfmnIiY=
Subject key identifier:   7A:53:6F:C7:03:87:45:64:34:4E:E1:E6:B5:39:72:EA:28:C9:46:D5
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473AD4C1AC8336E15FB4964C00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0fbb6846-8108-3d37-9e02-19434829d00a.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        104.29.71.0/24 maxlen: 24
                          104.29.72.0/24 maxlen: 24
                          172.68.16.0/24 maxlen: 24
                          172.68.17.0/24 maxlen: 24
                          172.68.18.0/24 maxlen: 24
                          172.68.19.0/24 maxlen: 24
                          172.69.10.0/24 maxlen: 24
                          172.69.11.0/24 maxlen: 24
                          172.69.114.0/24 maxlen: 24
                          172.69.137.0/24 maxlen: 24
                          172.69.138.0/24 maxlen: 24
                          172.69.139.0/24 maxlen: 24
                          172.71.5.0/24 maxlen: 24
                          172.71.6.0/24 maxlen: 24
                          172.71.7.0/24 maxlen: 24
                          172.71.9.0/24 maxlen: 24
                          172.71.10.0/24 maxlen: 24
                          172.71.11.0/24 maxlen: 24
                          172.71.233.0/24 maxlen: 24
                          172.71.234.0/24 maxlen: 24
                          172.71.235.0/24 maxlen: 24
                          172.71.237.0/24 maxlen: 24
                          172.71.238.0/24 maxlen: 24
                          172.71.239.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:d4:c1:ac:83:36:e1:5f:b4:96:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=067e83ea-d0f6-4283-8614-a6988a1f176f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:18:08:45:28:1e:5a:21:dd:8b:3e:99:f4:a6:
                    28:5c:55:88:4e:65:95:d2:4d:fb:b0:18:07:5d:09:
                    22:eb:87:e3:ac:e0:b4:a0:8f:46:b5:e7:e1:15:ca:
                    7d:9d:ff:05:c8:29:df:69:75:ee:46:18:f6:e5:ba:
                    5f:ba:27:07:e3:db:77:03:be:9d:3b:e6:4d:83:ba:
                    09:45:9c:d9:1f:e5:d2:9f:46:1e:88:7c:4c:bf:99:
                    28:1f:79:83:7b:1a:ad:59:41:24:2e:46:60:3d:58:
                    a8:5c:f2:9f:43:c7:7e:bf:21:86:43:af:91:3a:d0:
                    4f:22:56:cd:7d:a4:79:c6:21:cd:1d:2f:14:a6:af:
                    09:81:8d:d5:87:0c:9e:e9:75:b7:62:b0:03:ba:b2:
                    3e:c8:18:51:15:80:de:67:21:9c:64:71:60:c6:b4:
                    d0:a5:f3:73:33:62:98:04:03:65:c0:0a:18:75:b5:
                    a5:7b:43:12:6f:51:89:66:44:a4:de:a2:b5:77:7a:
                    77:85:af:eb:83:ff:ca:6b:fc:cc:f8:99:e1:9c:d8:
                    f9:9d:4d:36:5f:65:c5:08:92:8f:16:21:5a:31:85:
                    64:bb:e9:4c:9f:6b:8e:0c:6a:63:3d:71:c6:08:4c:
                    e8:15:5b:bb:bc:11:ec:7e:7c:e8:f1:77:99:9a:a9:
                    5a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:53:6F:C7:03:87:45:64:34:4E:E1:E6:B5:39:72:EA:28:C9:46:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0fbb6846-8108-3d37-9e02-19434829d00a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.71.0-104.29.72.255
                  172.68.16.0/22
                  172.69.10.0/23
                  172.69.114.0/24
                  172.69.137.0-172.69.139.255
                  172.71.5.0-172.71.7.255
                  172.71.9.0-172.71.11.255
                  172.71.233.0-172.71.235.255
                  172.71.237.0-172.71.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:15:f1:87:e4:dc:62:5e:e6:3c:d2:37:37:3d:4a:3b:a3:61:
         9c:73:ac:d1:36:fd:e0:3d:48:cc:5f:9a:ac:e3:fb:97:36:40:
         c2:e7:41:1d:d1:d2:8f:4a:d1:87:37:6b:71:64:7d:66:6c:aa:
         f8:3c:71:5e:e2:d7:10:19:6d:d9:db:c7:76:25:b5:9b:4c:6c:
         28:b8:2d:95:10:60:12:c1:ac:65:ed:a9:a4:4d:50:e8:f9:13:
         89:d9:40:d9:d0:46:9f:dd:8e:71:b9:f3:f9:b8:6f:96:95:46:
         0f:e7:d6:a9:be:93:91:22:ed:6f:2a:64:a9:0c:9f:e5:98:07:
         8e:7d:42:02:89:55:18:c8:e6:23:4a:c8:3b:96:36:ef:80:85:
         57:64:fc:c5:7a:89:4e:02:6d:ae:23:42:4c:32:80:6d:f0:48:
         d1:01:63:76:97:38:a7:27:4b:37:e0:ef:2b:db:64:16:bf:d2:
         aa:4d:00:3e:25:93:10:da:c6:37:6f:b2:23:5f:fb:99:49:85:
         b4:f5:36:b5:e9:52:be:ff:5f:e2:80:be:f9:7c:7c:97:6b:a9:
         62:c9:f5:91:75:33:41:70:64:6f:5f:6f:93:4c:fe:a6:94:32:
         e7:0c:97:93:af:60:65:e8:eb:98:dc:e7:57:da:00:d1:bc:40:
         47:73:68:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:10:43 2024 by rpki-client on console-ams.rpki-client.org