Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5abf74c3-691c-33c0-bbe2-6de0649e3de2.roa
File:                     5abf74c3-691c-33c0-bbe2-6de0649e3de2.roa (raw, json)
Hash identifier:          6fUuDjP0yLeAmIJVzmlKgtubffz7m+Wbm5qnTGyNfqs=
Subject key identifier:   FE:25:48:3F:FC:1E:3B:F0:09:61:7D:6A:B8:D6:80:95:47:27:AF:D9
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E6550117BDC734030BF88C80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5abf74c3-691c-33c0-bbe2-6de0649e3de2.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        104.29.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:01:17:bd:c7:34:03:0b:f8:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=21931e11-5bd3-4b4e-9103-afec24a12b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5c:20:c5:db:a9:a6:52:54:5d:0a:d9:41:62:
                    08:32:f3:83:79:f1:41:a8:88:a9:1a:9d:95:eb:28:
                    3a:52:d0:02:a5:b4:3c:1a:c7:cd:b3:e7:6b:cb:e0:
                    c1:de:cf:ef:9f:28:85:01:2e:83:76:10:bb:4c:3d:
                    3c:03:75:c4:f3:d7:98:ed:d2:e7:88:de:45:86:08:
                    99:e0:c7:cc:bc:29:68:2e:05:03:1f:55:c3:17:13:
                    ff:45:40:9e:54:55:5c:0c:8c:df:d9:2a:2c:02:00:
                    b3:bf:3e:33:67:83:45:b8:9a:62:26:34:d1:8c:ae:
                    9e:a0:fd:4a:47:b9:f0:bb:69:76:b3:8f:68:df:4d:
                    ee:97:47:f4:0b:52:4a:07:02:89:74:65:7b:9e:99:
                    ee:5c:f6:05:fe:78:50:6a:84:d7:52:27:2c:eb:4a:
                    c5:86:3a:be:47:61:0f:4d:ed:ab:9b:69:4b:ee:a8:
                    cb:c5:74:e1:85:89:89:32:80:38:0d:1b:1c:08:73:
                    1a:77:3d:ea:df:f8:5e:f0:6d:c1:32:a1:84:38:1e:
                    51:e8:6e:7f:b3:00:ee:71:a7:89:09:de:a5:40:bf:
                    1f:ee:e5:5a:87:d0:0e:2c:a2:9d:f4:e3:6b:72:1e:
                    dd:87:3c:ec:85:b3:70:0b:ff:e1:11:fe:50:e6:89:
                    bb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:25:48:3F:FC:1E:3B:F0:09:61:7D:6A:B8:D6:80:95:47:27:AF:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5abf74c3-691c-33c0-bbe2-6de0649e3de2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:fa:35:e9:34:21:66:17:ea:cb:7e:84:85:6b:9b:7d:c3:e6:
         a9:9c:f9:76:76:f4:94:1d:8c:50:22:07:45:7b:e1:d5:fc:74:
         2c:8d:d5:42:31:4f:7e:25:a9:f6:ab:3b:6d:2e:e1:89:4e:52:
         e1:83:98:b7:d9:37:9c:ab:af:10:0c:c3:dc:25:7e:f0:ec:d0:
         92:3d:a3:25:74:c0:f0:86:03:d0:01:0c:6b:4a:bb:7a:20:2d:
         b6:bc:6f:a1:dd:47:0b:6e:8a:2d:ec:10:9b:c6:02:f1:7d:68:
         b9:59:d2:55:9b:bf:eb:f5:5e:bb:a0:e7:6b:72:76:ab:cc:f8:
         3d:98:0f:b4:b7:fc:d7:bc:33:2a:9f:43:65:a9:3b:60:06:c2:
         8d:10:2b:29:46:3f:3f:72:4e:c6:06:7b:ef:6d:3d:79:17:c6:
         da:1c:09:29:73:22:94:7b:51:ee:53:24:86:7e:5a:d0:0c:bc:
         7f:4f:c7:e3:2a:76:6d:bd:ae:74:3f:90:da:c6:79:39:ae:7b:
         1b:0b:02:42:6f:f7:13:66:14:03:45:66:54:98:20:67:c9:f7:
         a7:f4:b3:d0:97:6f:27:52:d0:d6:b5:bf:dc:43:5a:a4:04:ee:
         75:b5:8d:43:07:be:1b:91:12:1f:13:ab:0f:4d:44:19:79:f3:
         e8:2d:7b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:35:57 2025 by rpki-client