Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9a1e6bf-cacb-30f2-ba4d-910cd37d4f56.roa
File:                     a9a1e6bf-cacb-30f2-ba4d-910cd37d4f56.roa (raw, json)
Hash identifier:          8ibXGAy1TOSSdjy/lWOdGi50rADvM4MTWqreIAQ0NEY=
Subject key identifier:   F7:7B:DF:CF:CB:AF:C2:52:BD:87:E6:07:21:68:C1:30:F5:CB:50:05
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584905B6CD06826F5296BCA5D120
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9a1e6bf-cacb-30f2-ba4d-910cd37d4f56.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13335
IP address blocks:        104.29.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:cd:06:82:6f:52:96:bc:a5:d1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=ed1d86a6-05fe-4d50-b3de-4282b0c80651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2c:85:8a:d2:a2:cd:37:fc:6a:f3:d2:0d:43:
                    49:78:76:3e:60:fd:23:57:86:c6:aa:46:64:c4:33:
                    13:4d:51:ef:95:f2:4a:92:6b:f2:aa:99:d1:a0:a1:
                    f4:dd:9d:8c:34:ca:83:19:8e:b8:7f:5e:90:1e:e1:
                    aa:1a:5a:5a:ff:a1:35:36:74:39:04:ae:0d:7b:b6:
                    cb:15:82:6f:9c:4d:2c:a0:c3:8b:e4:05:32:cc:0b:
                    23:2b:b2:74:82:e7:6a:13:04:94:2f:b6:6b:79:d4:
                    24:70:0a:b6:d4:ec:a8:6a:4e:9f:93:a2:18:51:62:
                    71:8d:85:03:d7:dd:b2:a3:8a:95:50:21:85:e7:39:
                    ce:20:9a:aa:3a:47:48:7f:96:5a:fe:eb:a1:45:d5:
                    ec:93:49:52:18:dd:6c:f3:50:20:e3:e0:b4:a7:b1:
                    0a:66:2b:97:a3:6d:6b:e1:ed:0e:92:98:fc:99:cd:
                    b1:20:40:7b:22:c5:ea:8e:53:47:0b:07:6e:fb:b5:
                    c7:35:30:82:55:76:db:bd:67:9b:9b:2a:da:32:0b:
                    d0:41:5b:df:f2:25:e2:71:9f:6d:8a:e7:72:56:3f:
                    51:60:62:fb:f9:73:f7:5c:0c:23:10:fd:21:86:ea:
                    41:fe:0a:05:f7:dd:fb:ce:d7:b8:83:89:57:3b:4f:
                    75:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7B:DF:CF:CB:AF:C2:52:BD:87:E6:07:21:68:C1:30:F5:CB:50:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a9a1e6bf-cacb-30f2-ba4d-910cd37d4f56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:df:f7:d1:66:d9:a4:da:e6:d4:e7:7d:82:bd:bc:e0:1b:d3:
         fc:15:b5:90:7d:9e:72:50:3e:2d:51:8d:02:be:5d:8a:09:83:
         1c:c5:98:a7:77:d8:eb:b6:c0:e9:95:59:e2:65:4c:19:6c:0d:
         21:b4:e8:14:f9:1e:c8:18:8c:d1:b9:8e:b0:8f:f1:05:db:99:
         11:f2:df:a6:b6:26:89:a7:61:61:19:19:db:bd:db:a7:bc:f8:
         a1:7d:2e:cb:51:ec:b9:7c:ce:76:14:05:21:bd:a8:55:b2:03:
         eb:c1:8e:6a:2f:f1:20:81:13:1d:9b:8a:6b:92:ac:e3:be:1d:
         79:82:20:01:d5:3b:d7:cd:ce:b8:5c:10:57:7c:50:e0:6a:fa:
         9b:45:c5:0c:ab:7e:c8:ea:56:9b:64:94:c6:5c:23:1f:0b:04:
         0b:8d:6c:d1:ec:cf:9a:4f:1a:54:96:0d:02:06:fc:6d:66:53:
         e7:d1:2f:5a:6c:de:54:e1:d6:c3:10:5d:dd:a2:97:2f:7e:a6:
         49:4c:39:99:c3:2f:04:aa:fe:d9:6e:27:3d:72:8c:5a:64:b2:
         ba:7d:40:12:32:bf:94:80:06:d7:c3:ac:14:57:10:7b:17:44:
         08:82:a2:44:a0:90:3f:ab:00:93:96:e4:c2:d0:0b:7b:89:1c:
         cf:de:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:52:17 2025 by rpki-client