Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b833d3b3-a64d-3401-a451-0e437bc93ba4.roa
File:                     b833d3b3-a64d-3401-a451-0e437bc93ba4.roa (raw, json)
Hash identifier:          m52B0aEusejqngN7eL5YXJCCmIeQg1dfZDMDq4Mw/J0=
Subject key identifier:   AC:5D:E7:2F:C6:A9:A9:F2:63:40:B2:8A:70:31:E7:C1:27:19:CD:28
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E6550BDB38A70A7873854120
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b833d3b3-a64d-3401-a451-0e437bc93ba4.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     13335
IP address blocks:        104.29.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:55:0b:db:38:a7:0a:78:73:85:41:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=e80d3f00-a5dc-4224-b21d-8f747b1fad88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0a:7d:8a:d7:a2:dd:67:0c:2f:01:81:12:a4:
                    cc:6f:6a:a5:0f:2d:4a:b0:e1:03:0a:2f:ec:ea:f2:
                    a9:8a:bc:6e:de:7d:13:03:b0:c2:7e:b5:19:7a:e6:
                    42:6d:28:f6:a9:99:d3:95:2a:d2:b3:23:be:2e:a2:
                    3e:1b:ed:3f:86:a2:ee:fe:5e:f9:a7:17:ac:8b:07:
                    30:ac:d2:05:8c:08:92:8c:4d:7d:34:7d:34:5b:20:
                    f2:28:ad:f3:59:61:03:68:6a:c5:84:a9:fa:fa:d2:
                    08:87:db:c0:55:45:32:f1:94:4f:07:13:1a:64:73:
                    6f:41:b9:60:60:28:db:d9:a1:9c:a0:a9:57:71:4d:
                    09:46:ab:50:ec:80:fc:6b:a2:98:a2:ed:64:66:aa:
                    40:02:f4:5b:45:7e:ac:60:c0:e1:c6:36:08:c6:6b:
                    29:f3:f4:d7:4e:9d:67:21:48:2f:5c:cc:46:18:c0:
                    39:6c:e7:e2:ce:0f:3d:db:16:34:70:f8:9a:43:b3:
                    93:ca:5b:86:78:d2:2f:cb:ce:fa:87:28:b3:73:26:
                    a4:c2:18:73:68:9d:8b:3a:f2:0e:64:36:3f:e7:83:
                    74:87:c4:df:4b:10:df:71:a6:50:8a:41:bb:23:ec:
                    ff:1f:f6:df:c7:d6:34:c0:76:a5:90:2f:54:ed:f5:
                    6e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5D:E7:2F:C6:A9:A9:F2:63:40:B2:8A:70:31:E7:C1:27:19:CD:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b833d3b3-a64d-3401-a451-0e437bc93ba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:22:83:16:f9:c7:fb:63:cf:91:cf:23:65:a6:d5:d0:88:86:
         58:70:99:e1:be:63:7c:e4:6b:c0:60:f2:05:27:02:8a:1b:46:
         a4:7a:73:c6:ad:2c:61:ed:56:80:1c:88:ac:ed:de:7b:0b:69:
         1e:ad:de:33:5f:c2:ea:20:97:c4:b4:98:e2:e7:aa:a6:18:f2:
         24:c1:8c:9b:73:22:9b:5b:f4:9e:4b:c7:a3:ad:3e:20:b4:aa:
         b8:34:55:c7:ab:96:8a:3e:65:8d:15:ae:3b:41:e3:03:c8:87:
         04:ae:c5:bd:32:37:db:c7:ef:ec:a1:d3:9c:60:45:32:b5:43:
         86:8c:8d:bb:29:39:5c:27:28:e0:8d:b2:c6:29:c4:a7:15:f5:
         d6:a7:33:38:1c:64:fc:4f:e7:15:62:27:2c:cd:6e:81:fb:c8:
         0f:7e:37:74:8b:c5:b4:7d:8d:72:3f:c5:fe:35:17:cb:25:17:
         e8:c4:5b:7d:7c:4f:57:41:27:04:f7:72:f3:ba:d5:f9:c2:36:
         3a:25:76:da:d6:fa:f1:89:ff:8c:63:52:34:85:c9:ef:5b:55:
         a2:31:b9:50:d2:6b:52:58:e9:8e:be:8f:09:1e:17:65:19:a1:
         a1:91:f7:71:12:7e:95:d6:57:66:5c:f3:fb:94:24:a7:3b:55:
         8f:fe:a3:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQvbOKcKeHOFQSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk
ZTgwZDNmMDAtYTVkYy00MjI0LWIyMWQtOGY3NDdiMWZhZDg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wp9itei3WcMLwGBEqTMb2qlDy1KsOEDCi/s
6vKpirxu3n0TA7DCfrUZeuZCbSj2qZnTlSrSsyO+LqI+G+0/hqLu/l75pxesiwcw
rNIFjAiSjE19NH00WyDyKK3zWWEDaGrFhKn6+tIIh9vAVUUy8ZRPBxMaZHNvQblg
YCjb2aGcoKlXcU0JRqtQ7ID8a6KYou1kZqpAAvRbRX6sYMDhxjYIxmsp8/TXTp1n
IUgvXMxGGMA5bOfizg892xY0cPiaQ7OTyluGeNIvy876hyizcyakwhhzaJ2LOvIO
ZDY/54N0h8TfSxDfcaZQikG7I+z/H/bfx9Y0wHalkC9U7fVuHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKxd5y/GqanyY0CyinAx58EnGc0oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjgzM2QzYjMtYTY0ZC0z
NDAxLWE0NTEtMGU0MzdiYzkzYmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaB1BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0igxb5x/tjz5HPI2Wm1dCIhlhwmeG+Y3zka8Bg8gUnAoobRqR6c8at
LGHtVoAciKzt3nsLaR6t3jNfwuogl8S0mOLnqqYY8iTBjJtzIptb9J5Lx6OtPiC0
qrg0Vcerloo+ZY0VrjtB4wPIhwSuxb0yN9vH7+yh05xgRTK1Q4aMjbspOVwnKOCN
ssYpxKcV9danMzgcZPxP5xViJyzNboH7yA9+N3SLxbR9jXI/xf41F8slF+jEW318
T1dBJwT3cvO61fnCNjoldtrW+vGJ/4xjUjSFye9bVaIxuVDSa1JY6Y6+jwkeF2UZ
oaGR93ESfpXWV2Zc8/uUJKc7VY/+o4Q=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:41:52 2025 by rpki-client