Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1771fe13-34a3-301e-9564-158507d33584.roa
File:                     1771fe13-34a3-301e-9564-158507d33584.roa (raw, json)
Hash identifier:          N6za+UmWq26awWZaVIZzAi45YXjFjE3NIwoycNufML4=
Subject key identifier:   77:AB:25:EE:6D:97:0C:99:9A:2B:97:0A:C6:FE:37:1A:31:42:7E:73
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858491261B2E92B085EA86C9DD0C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1771fe13-34a3-301e-9564-158507d33584.roa
Signing time:             Tue 04 Mar 2025 02:55:14 +0000
ROA not before:           Tue 04 Mar 2025 02:55:14 +0000
ROA not after:            Mon 02 Jun 2025 01:55:14 +0000
asID:                     13335
IP address blocks:        104.23.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:61:b2:e9:2b:08:5e:a8:6c:9d:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Mar  4 02:55:14 2025 GMT
            Not After : Jun  2 01:55:14 2025 GMT
        Subject: CN=29e804d7-965b-47f0-894b-0990782ca580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:37:da:a0:34:c0:9d:5f:a8:4f:c7:b5:6e:f3:
                    6f:6b:4d:42:ae:e7:36:ed:46:b7:23:45:9e:1d:c9:
                    56:86:89:f4:42:a9:fd:26:d8:b9:1d:7e:47:13:18:
                    5b:e5:e8:ee:bd:7d:88:c4:5b:0b:96:d1:2d:0c:5e:
                    ee:8d:c4:1c:76:e9:6d:7e:dc:6d:1a:0a:c3:26:dd:
                    41:6d:4b:03:43:d0:a4:3e:77:ab:da:1f:bf:c3:c8:
                    78:f3:48:b6:2a:e9:07:d8:a4:f9:f2:b9:d5:54:fe:
                    26:c5:4d:9a:cd:90:17:89:ab:72:bc:2d:c6:e3:3d:
                    e9:18:08:64:c7:7f:b2:0f:fa:90:b8:2c:87:64:4a:
                    37:b6:35:b4:be:6c:da:11:52:45:7b:51:18:e8:1b:
                    cc:6a:85:4c:4a:bd:54:1c:a1:a5:1d:03:12:3f:15:
                    13:d0:50:54:85:04:3e:e5:a5:26:0e:61:b0:84:88:
                    ae:3e:1a:28:ff:b1:52:58:ec:3a:3d:8c:75:e4:ae:
                    2f:e7:d7:c2:e5:7c:d4:7f:78:1e:2f:9f:4b:b6:bd:
                    c7:ef:42:58:42:82:70:9b:83:a2:21:2b:f6:cb:54:
                    c4:c5:ba:98:30:87:d3:4b:fc:df:90:0b:a3:f8:26:
                    38:70:63:5c:c2:1d:f5:1d:da:9b:65:99:87:a4:b3:
                    83:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AB:25:EE:6D:97:0C:99:9A:2B:97:0A:C6:FE:37:1A:31:42:7E:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1771fe13-34a3-301e-9564-158507d33584.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.23.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ea:1c:4a:aa:43:e2:73:60:9a:ff:2c:c2:78:a0:2f:df:d5:
         b3:5c:84:5f:6c:d0:77:6f:e5:11:2b:1d:4b:85:d0:47:c0:34:
         3b:cc:33:d7:96:91:23:e4:a6:1b:a4:9d:4d:81:92:fd:5d:0d:
         24:44:ae:af:12:03:cf:14:76:6c:fa:15:d3:a4:84:5e:b6:35:
         34:f7:30:2f:b9:be:80:4a:e4:fb:36:3c:c2:d3:13:c2:1c:88:
         85:06:24:68:e5:eb:1d:bb:3f:5c:a6:a8:73:8e:97:ad:c4:94:
         6f:32:ba:4b:a6:a2:39:fe:d3:b7:da:7a:37:72:f1:d0:82:a9:
         00:97:a5:b0:94:08:30:a1:08:77:81:f2:9e:cc:75:d8:24:a7:
         92:4c:8f:e4:b0:46:53:40:3e:55:0d:ce:62:70:06:f8:e3:95:
         8b:ee:aa:54:44:db:7b:ea:f2:23:e6:33:ef:f7:0a:04:38:c0:
         22:7a:ff:ee:c1:3a:ce:a3:96:8c:1f:21:2d:00:e6:01:ae:55:
         87:9e:7e:f5:5f:dc:c9:ac:dd:3c:4e:9a:3b:02:b5:6a:9f:9e:
         1a:4d:11:6a:ae:6a:c9:91:f9:56:71:bc:6c:f0:2e:e8:8d:e7:
         a9:a7:62:24:39:ac:5b:7c:d6:34:11:f0:b1:3d:a8:a9:3e:82:
         82:93:4d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:20:22 2025 by rpki-client