Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/baefd537-0bc5-3b64-85b6-167655f13a50.roa
File:                     baefd537-0bc5-3b64-85b6-167655f13a50.roa (raw, json)
Hash identifier:          UGxiKx4IMsXxYG145048NGR7cbLTz2OXh4F70NBbILk=
Subject key identifier:   94:B1:0B:02:CD:7C:1D:3F:D5:CE:D0:D8:13:F2:1C:E9:46:8B:86:0C
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F432858473AD5BE2146868C4D71545D80
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/baefd537-0bc5-3b64-85b6-167655f13a50.roa
Signing time:             Sun 15 Sep 2024 12:00:00 +0000
ROA not before:           Sun 15 Sep 2024 12:00:00 +0000
ROA not after:            Fri 19 Dec 2025 05:00:00 +0000
asID:                     13335
IP address blocks:        104.29.46.0/24 maxlen: 24
                          104.29.47.0/24 maxlen: 24
                          104.29.48.0/24 maxlen: 24
                          108.162.243.0/24 maxlen: 24
                          108.162.244.0/24 maxlen: 24
                          108.162.245.0/24 maxlen: 24
                          108.162.246.0/24 maxlen: 24
                          162.158.41.0/24 maxlen: 24
                          162.158.42.0/24 maxlen: 24
                          172.68.21.0/24 maxlen: 24
                          172.68.22.0/24 maxlen: 24
                          172.68.23.0/24 maxlen: 24
                          172.69.191.0/24 maxlen: 24
                          172.71.141.0/24 maxlen: 24
                          172.71.142.0/24 maxlen: 24
                          172.71.143.0/24 maxlen: 24
                          172.71.145.0/24 maxlen: 24
                          172.71.146.0/24 maxlen: 24
                          172.71.147.0/24 maxlen: 24
                          172.71.149.0/24 maxlen: 24
                          172.71.150.0/24 maxlen: 24
                          172.71.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:d5:be:21:46:86:8c:4d:71:54:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Sep 15 12:00:00 2024 GMT
            Not After : Dec 19 05:00:00 2025 GMT
        Subject: CN=47e0d956-f8ab-460c-b012-6657232a2882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:6a:73:0f:59:7c:f5:fc:0a:1f:1e:9c:d2:
                    ee:40:db:2f:0a:0e:c8:ee:3b:06:ef:7b:9f:14:61:
                    94:dc:b8:9b:1b:3a:6e:46:44:ee:ff:9c:09:d0:8e:
                    37:bd:9f:a7:ca:2b:3c:9f:ed:af:d2:70:6c:ab:f3:
                    df:98:d3:18:99:c1:87:42:b8:de:b4:e5:83:fc:0a:
                    a6:ce:65:9a:4f:95:0d:52:e3:cb:32:c7:08:91:3d:
                    33:27:e0:ec:aa:f8:01:32:2e:6d:a5:9d:79:18:d3:
                    94:32:ea:cd:48:c4:96:f9:f6:43:58:b1:e8:7a:7b:
                    a9:fb:24:80:77:53:a9:1b:a5:94:9f:bd:2a:83:26:
                    e2:ad:3f:2f:f2:34:74:eb:96:55:12:dd:9e:fa:81:
                    7c:07:82:5d:d5:b7:8b:78:03:85:ab:61:44:ac:7d:
                    5f:d4:08:6c:78:53:33:19:7f:80:4a:5c:b8:ec:67:
                    eb:c4:43:61:eb:ef:59:71:ae:2d:08:61:c1:32:e7:
                    aa:b9:ad:36:a1:4e:64:ff:b1:29:61:64:76:04:4a:
                    e4:11:57:a8:d1:d5:1d:9e:ce:a2:34:8f:1c:10:3c:
                    91:c3:39:a5:b9:16:09:1e:88:0c:43:bf:41:d8:b2:
                    01:14:40:72:eb:73:04:79:99:d7:ad:cb:54:11:7c:
                    2f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B1:0B:02:CD:7C:1D:3F:D5:CE:D0:D8:13:F2:1C:E9:46:8B:86:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/baefd537-0bc5-3b64-85b6-167655f13a50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.46.0-104.29.48.255
                  108.162.243.0-108.162.246.255
                  162.158.41.0-162.158.42.255
                  172.68.21.0-172.68.23.255
                  172.69.191.0/24
                  172.71.141.0-172.71.143.255
                  172.71.145.0-172.71.147.255
                  172.71.149.0-172.71.151.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:cf:3e:83:ee:de:ef:a2:80:18:ed:aa:28:3b:64:d6:8c:a5:
         c7:18:86:41:7a:ef:ff:58:ca:53:1b:ee:ea:64:3c:32:70:cf:
         6a:25:9d:20:ea:62:75:91:9f:16:92:95:5f:62:73:91:56:06:
         b2:5b:32:63:4a:c7:32:de:05:2c:e6:44:e9:3b:d6:c6:b7:8c:
         b3:d8:03:d7:87:c7:79:22:1f:8e:58:c1:00:74:50:77:07:7f:
         2d:08:ee:88:36:37:0b:d0:e0:86:ed:c3:1b:b0:a7:74:fd:13:
         8e:12:c0:69:02:32:10:8e:8f:b3:fa:8a:09:0b:8a:71:39:32:
         5e:dc:ae:1c:c4:2b:72:87:9b:cf:30:28:e6:91:1f:7b:ee:55:
         58:64:f3:07:79:76:6e:02:84:52:5a:4c:b4:fd:46:ae:b1:59:
         d8:fe:9d:7a:a4:4b:6e:99:33:c1:39:f8:99:00:d7:65:90:26:
         4f:7d:cc:6a:55:4c:d8:b7:99:71:55:06:9e:d9:18:49:9d:b3:
         31:5d:44:82:6a:3f:b6:2a:f2:d3:0d:9e:d8:80:61:08:de:e4:
         66:0c:19:9f:aa:36:59:c7:72:25:c9:40:58:34:94:03:5b:9f:
         0d:32:2c:32:21:c1:06:c2:49:60:90:87:32:bf:2f:68:02:46:
         4e:ef:45:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:24 2024 by rpki-client on console-fra.rpki-client.org