Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b4f8977-6d44-3e66-b4a6-e9e4b8426a71.roa
File:                     6b4f8977-6d44-3e66-b4a6-e9e4b8426a71.roa (raw, json)
Hash identifier:          AQb14p2Y5Mzu+8BMh3lEsIXErL9ktY1dv6PrhgIRfmo=
Subject key identifier:   5A:5E:F7:3B:46:DF:9F:4D:EE:27:62:D8:C4:91:A9:96:4A:15:14:6D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473B4D4E3CBFC34E85C4687E80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b4f8977-6d44-3e66-b4a6-e9e4b8426a71.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        104.29.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:4d:4e:3c:bf:c3:4e:85:c4:68:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=06d31840-6895-4c09-b3aa-98a30e467312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:dd:52:85:ea:20:dc:9e:ba:6e:75:83:17:
                    79:a3:8c:d4:c1:59:53:1d:a4:f2:43:e3:cd:3e:fd:
                    46:ee:57:9c:62:36:a2:40:65:85:44:fc:23:28:8d:
                    ee:21:4b:e7:91:9f:bf:20:bc:3d:46:de:a9:2f:2e:
                    9f:dc:28:2f:f6:9e:f1:e0:d7:8c:5d:f0:9e:db:f3:
                    ec:7d:5a:17:91:76:59:61:37:bd:9e:a9:1c:d9:79:
                    74:bb:c8:4d:bc:68:0d:04:47:39:78:db:d5:f5:b7:
                    63:8e:60:0e:05:ac:40:1f:4c:c2:1d:bb:ea:67:bc:
                    c8:cb:d8:21:f0:a9:2a:ce:12:ac:e8:72:0d:03:32:
                    38:99:e5:81:01:66:4c:96:07:fc:63:3c:a9:6f:24:
                    99:b3:17:de:59:97:29:62:91:71:8f:92:f4:44:d5:
                    79:36:10:c2:5d:5f:f6:b5:63:6b:80:be:28:59:c7:
                    7a:9d:71:61:86:74:18:e0:1c:0e:9e:c2:e5:44:2d:
                    6b:28:22:4e:2c:5f:15:a2:5b:f6:4b:91:2e:94:f1:
                    f2:75:99:ae:76:95:67:c0:50:f4:95:3e:61:02:56:
                    fb:f7:c5:2c:fa:83:5a:28:eb:9d:79:e8:d0:b7:3b:
                    3f:bb:f4:17:04:e2:ad:66:58:7c:83:b8:2f:0c:65:
                    f9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5E:F7:3B:46:DF:9F:4D:EE:27:62:D8:C4:91:A9:96:4A:15:14:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/6b4f8977-6d44-3e66-b4a6-e9e4b8426a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:bc:53:52:82:e7:53:f8:6c:ed:a2:85:95:b7:66:f2:9a:5f:
         2b:11:61:33:88:e9:95:a8:4c:f2:55:fd:4c:60:f0:38:61:0e:
         f8:d6:ad:16:a9:19:b3:8b:7d:6c:d8:24:fa:e0:6b:d4:86:3c:
         a9:a1:45:d2:e7:aa:3c:1c:d3:2e:fe:88:04:9e:7f:1d:8d:d6:
         88:f4:45:d4:7e:6d:41:ec:8f:93:fa:a3:75:fe:5d:3e:07:99:
         e7:66:87:92:ba:89:a1:03:ca:a2:17:62:ec:d1:e0:0f:c9:37:
         9b:ae:5c:f9:84:64:01:3a:9e:03:25:b7:ef:90:84:4d:d7:cb:
         75:93:a0:a8:58:5c:ac:2c:4c:6e:75:51:82:cf:96:b6:24:63:
         73:bc:b9:1b:7d:e6:d7:f3:c4:03:51:b8:81:cd:61:83:27:ae:
         bc:1d:38:3a:5b:78:4a:42:4d:ef:15:07:9f:17:af:3d:61:c9:
         ec:69:48:be:51:ad:43:28:40:97:58:69:42:81:ed:85:94:fe:
         c2:d6:d5:2f:b5:73:be:15:6b:a3:32:8e:f2:4d:30:4c:20:d7:
         e3:12:fe:e1:e6:d9:a6:9f:c4:d2:ae:82:2e:13:1d:70:e2:de:
         67:a5:d7:57:5b:ff:ba:e6:86:db:46:fe:1f:36:c1:03:1e:5d:
         6f:51:f5:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc7TU48v8NOhcRofoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
MDZkMzE4NDAtNjg5NS00YzA5LWIzYWEtOThhMzBlNDY3MzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8LdUoXqINyeum51gxd5o4zUwVlTHaTyQ+PN
Pv1G7lecYjaiQGWFRPwjKI3uIUvnkZ+/ILw9Rt6pLy6f3Cgv9p7x4NeMXfCe2/Ps
fVoXkXZZYTe9nqkc2Xl0u8hNvGgNBEc5eNvV9bdjjmAOBaxAH0zCHbvqZ7zIy9gh
8KkqzhKs6HINAzI4meWBAWZMlgf8YzypbySZsxfeWZcpYpFxj5L0RNV5NhDCXV/2
tWNrgL4oWcd6nXFhhnQY4BwOnsLlRC1rKCJOLF8Volv2S5EulPHydZmudpVnwFD0
lT5hAlb798Us+oNaKOudeejQtzs/u/QXBOKtZlh8g7gvDGX5cQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFpe9ztG359N7idi2MSRqZZKFRRtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNmI0Zjg5NzctNmQ0NC0z
ZTY2LWI0YTYtZTllNGI4NDI2YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFi8U1KC51P4bO2ihZW3ZvKaXysRYTOI6ZWoTPJV/Uxg8DhhDvjWrRap
GbOLfWzYJPrga9SGPKmhRdLnqjwc0y7+iASefx2N1oj0RdR+bUHsj5P6o3X+XT4H
medmh5K6iaEDyqIXYuzR4A/JN5uuXPmEZAE6ngMlt++QhE3Xy3WToKhYXKwsTG51
UYLPlrYkY3O8uRt95tfzxANRuIHNYYMnrrwdODpbeEpCTe8VB58Xrz1hyexpSL5R
rUMoQJdYaUKB7YWU/sLW1S+1c74Va6MyjvJNMEwg1+MS/uHm2aafxNKugi4THXDi
3mel11db/7rmhttG/h82wQMeXW9R9cg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:53 2025 by rpki-client