Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/447163c1-0ac8-3c96-89cf-754b8a35bd98.roa
File:                     447163c1-0ac8-3c96-89cf-754b8a35bd98.roa (raw, json)
Hash identifier:          KdwQfi8bmweoVzULRYC/TvwXeaYKCzm8b4vvJqLYnRQ=
Subject key identifier:   49:4C:5B:0F:86:46:CC:A1:69:ED:95:C4:D8:EA:44:1D:C9:11:0E:EE
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584905B6C6F8180BB941CC284D30
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/447163c1-0ac8-3c96-89cf-754b8a35bd98.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13335
IP address blocks:        104.24.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:c6:f8:18:0b:b9:41:cc:28:4d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=6a70943d-5651-4bcf-ac78-f17675866c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7d:28:dd:70:ae:34:04:36:a1:33:b1:ea:e4:
                    d7:05:5f:d4:12:89:96:9e:e4:d1:c7:91:91:ee:dc:
                    8a:1e:26:fc:84:a8:10:ee:3c:ab:2d:2e:0e:d0:77:
                    34:3e:df:48:16:b8:69:02:dc:10:28:c4:db:24:dd:
                    46:56:d8:3b:b2:59:7a:8e:14:e9:d0:d6:27:79:c2:
                    fb:dd:54:6d:88:d1:7a:3b:1c:07:1f:dd:ef:ab:fc:
                    d1:4d:e4:96:5e:3d:be:a5:df:2b:12:fe:58:a3:ec:
                    16:cc:59:82:fb:44:e2:86:d6:71:ce:c1:62:19:55:
                    e2:12:61:77:6a:dc:0b:86:b8:2d:b9:16:af:f8:4b:
                    a1:4b:f2:a4:6d:1e:bb:b6:f3:85:0b:5f:8e:5d:aa:
                    ef:46:bb:29:32:f2:d1:de:6f:a9:c2:3d:7d:1d:fb:
                    18:f6:d2:ba:ca:f0:eb:90:ce:b8:55:9a:55:30:da:
                    a5:f7:13:5b:ff:19:e2:5e:29:5b:f5:58:d5:4d:0f:
                    b9:03:32:34:eb:a9:88:0c:63:48:bd:a1:f4:25:84:
                    39:02:5d:fd:24:cf:af:e1:a4:ed:88:c3:fe:fe:40:
                    eb:7f:f3:5b:3e:b8:0c:c0:08:ab:17:7d:59:96:47:
                    e4:60:e4:b1:70:27:71:0d:eb:2a:34:10:55:84:28:
                    0d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4C:5B:0F:86:46:CC:A1:69:ED:95:C4:D8:EA:44:1D:C9:11:0E:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/447163c1-0ac8-3c96-89cf-754b8a35bd98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.24.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:70:06:e6:de:b6:f2:fc:4b:f2:47:52:6f:22:48:58:9c:53:
         0d:64:93:4d:07:12:17:79:f4:c1:84:dd:88:99:4e:83:aa:8d:
         ba:7a:35:5d:1d:47:3b:c5:0b:03:7c:e3:ba:c7:9b:af:25:2c:
         d9:da:30:29:7d:bd:2b:18:bc:3c:9b:3e:61:7a:02:d9:63:a8:
         8b:60:45:94:61:c6:4d:c3:19:28:ad:30:16:1d:43:17:22:37:
         01:05:2d:13:ba:94:5b:df:4e:9c:6b:6f:e5:96:06:46:05:39:
         8c:aa:b9:79:96:4e:fd:eb:97:20:a5:fb:4c:57:59:89:f0:93:
         6a:b8:54:4f:44:1e:26:2d:9a:3a:97:11:0c:1e:76:67:d9:a9:
         43:24:e2:5c:6b:f4:e0:fe:2e:2c:3a:d7:5a:24:20:08:66:ec:
         ff:1b:d1:cd:17:44:e1:aa:a3:27:a6:b2:42:8b:06:65:9c:33:
         33:18:39:ca:6b:6b:9f:04:0e:b5:03:9f:0d:e4:b4:13:53:62:
         19:7f:e8:13:67:f5:82:60:4d:f4:25:5d:c6:09:bd:d6:f5:14:
         c3:7f:20:a2:1b:62:5b:b3:1e:51:91:72:b5:64:24:78:d7:b0:
         05:9e:a1:d1:c1:8a:57:24:15:ba:0b:14:7b:0b:5a:58:53:77:
         8b:89:74:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:41:00 2025 by rpki-client