Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c1ee10b8-1ac5-30a8-a84b-0e74c6289e6c.roa
File:                     c1ee10b8-1ac5-30a8-a84b-0e74c6289e6c.roa (raw, json)
Hash identifier:          IRjxzhp7Nx7z16Dr33J8ewM+x8eIytIgidQRQdbL5xk=
Subject key identifier:   31:4E:7B:43:E7:E3:B3:B9:B8:32:D9:1C:E3:3D:78:EA:03:27:FA:09
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849071BFCA93583E495134AECA0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c1ee10b8-1ac5-30a8-a84b-0e74c6289e6c.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        104.29.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:fc:a9:35:83:e4:95:13:4a:ec:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=f319920b-df2b-4d69-bcb8-d6bfae0e4f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ea:f7:58:0f:6b:a9:8e:35:07:c3:55:81:78:
                    1e:ed:5d:23:4f:26:dc:a2:d7:77:b0:83:90:a7:de:
                    57:39:dc:78:36:ea:99:ce:a0:f7:f2:ba:bd:76:f7:
                    1f:bb:f4:5b:b3:90:92:72:7e:49:d7:94:5d:65:f2:
                    a2:f3:c5:5a:67:38:eb:ca:8b:4a:5a:37:37:ea:84:
                    25:b2:ae:b8:d0:a9:a1:d4:75:9d:f6:86:bb:8b:85:
                    40:b7:af:e4:1b:20:5c:bb:d6:7b:6b:7f:54:44:73:
                    94:ff:6d:b8:6c:ce:7a:ce:c4:20:f3:6b:36:84:37:
                    9b:0b:7f:24:6e:3a:27:13:c1:c2:6c:27:39:94:06:
                    e9:c2:9e:b4:7f:ad:b7:25:7a:42:ad:84:13:3b:89:
                    92:9c:4c:64:58:f8:ff:ec:d1:8a:83:54:0c:1e:3a:
                    4c:ff:64:1f:b3:c1:af:58:75:06:91:9c:ef:27:ca:
                    21:36:3e:b6:6e:50:3b:5b:18:14:bb:e7:84:cb:f2:
                    9d:5c:e9:95:6c:d2:ed:06:41:4d:2e:a5:a7:d6:64:
                    81:cd:d7:cc:e7:03:96:2f:2c:68:bd:87:af:bf:59:
                    cc:4c:b3:61:9d:c4:50:5c:ed:60:0d:54:d8:57:04:
                    90:9e:ff:99:fb:a9:ba:d4:12:48:b3:70:ab:ea:f9:
                    ef:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4E:7B:43:E7:E3:B3:B9:B8:32:D9:1C:E3:3D:78:EA:03:27:FA:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c1ee10b8-1ac5-30a8-a84b-0e74c6289e6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:9b:0a:e2:20:8b:ef:fa:01:20:a5:06:c9:7f:9a:4a:27:a7:
         16:6e:18:f5:43:e2:9e:1f:c1:e6:c8:37:d0:71:e2:6f:67:3d:
         0e:c1:0e:bf:18:05:14:df:a3:fe:a2:f9:46:29:af:01:32:f4:
         82:31:0e:73:cb:b5:83:dd:af:d5:c4:0b:1c:28:49:28:ad:17:
         39:e4:51:e3:72:87:a4:2c:80:7d:cb:d0:4b:06:58:60:13:d0:
         0f:23:6f:0c:c7:60:c5:2d:51:9f:d2:29:bc:f3:38:8c:43:8c:
         6f:8e:bc:5e:b2:73:82:d6:d7:01:0d:51:f6:e4:11:90:cd:d4:
         29:79:6b:4d:d6:11:90:cc:6a:73:70:f0:f5:0a:03:cb:0b:31:
         31:a2:b2:f0:35:f6:cf:a5:90:04:18:ce:81:e3:c0:96:b5:c7:
         3c:b4:27:04:c1:fd:0a:85:72:d1:c8:ab:f9:e4:ec:6d:ef:2c:
         dd:56:c0:22:d2:a4:b6:b3:6d:66:05:31:3d:9c:58:98:a4:f3:
         60:1a:d1:66:6d:57:c8:39:29:3b:5f:43:36:be:be:45:a5:a5:
         9c:87:7f:41:cc:2c:68:03:fb:1f:60:7f:0d:10:ae:0d:e1:de:
         04:6a:c3:51:e2:d3:82:4c:45:e1:80:0a:01:f4:b1:cd:15:88:
         81:d9:49:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:23 2025 by rpki-client