Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d91c74e9-532b-34ca-a282-2ecc8f0bebed.roa
File:                     d91c74e9-532b-34ca-a282-2ecc8f0bebed.roa (raw, json)
Hash identifier:          dYh7QU778uhEr58taKJQklHww/FzKn1Vx2UxNf2JfMk=
Subject key identifier:   32:40:4F:7B:61:3A:F0:D7:2A:5F:D4:1C:CD:A3:A4:9D:3A:43:B0:F2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584905B6BCBB0FC146A81878C500
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d91c74e9-532b-34ca-a282-2ecc8f0bebed.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13335
IP address blocks:        104.17.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:bc:bb:0f:c1:46:a8:18:78:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=96b13992-52f1-4577-9b3d-57b865a68ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f7:33:84:3a:5b:7c:a9:fb:20:b5:59:30:f7:
                    2e:2d:c6:03:c0:fc:d9:ec:9d:74:20:0d:f4:d7:97:
                    0a:15:7a:f5:27:fa:c5:5d:47:8f:fa:79:56:a8:05:
                    6f:84:de:1c:04:ec:3d:d2:2b:e1:d4:09:0a:48:af:
                    4c:b4:43:7e:ad:5d:1f:d4:1c:7f:9e:8d:69:06:95:
                    cb:cb:59:ce:4f:80:50:b1:27:8e:93:fc:8e:28:3f:
                    79:58:d8:b9:70:4b:ee:8f:5e:30:7f:02:8d:60:32:
                    03:19:51:4e:ad:d4:95:bb:ca:77:3f:dc:ca:d1:65:
                    94:55:d8:bf:a7:29:68:bf:1c:cb:e7:66:8a:5e:3b:
                    f8:7c:06:20:01:8c:49:d4:d9:1b:fc:50:89:c4:32:
                    24:ae:34:7c:16:cb:5d:38:0f:82:f6:7f:9f:a0:d1:
                    2d:e8:f1:74:e9:bb:a9:37:e0:8b:0e:a9:53:60:64:
                    0a:5d:ff:95:7e:5d:88:3f:af:89:3c:b5:22:69:40:
                    79:55:8e:9b:2b:9e:2b:72:67:00:d9:fb:95:0a:63:
                    13:ee:11:24:0b:fa:d2:ae:4f:b4:f5:e9:eb:f6:6d:
                    42:fb:6e:ad:16:5b:d2:aa:d5:4b:4f:76:25:b5:57:
                    d3:0a:33:03:72:64:ce:53:9c:4c:4d:fc:4e:2a:22:
                    1a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:40:4F:7B:61:3A:F0:D7:2A:5F:D4:1C:CD:A3:A4:9D:3A:43:B0:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/d91c74e9-532b-34ca-a282-2ecc8f0bebed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.17.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:e8:b6:16:ea:b7:77:68:87:dd:0e:b1:c3:48:83:ab:c6:df:
         87:34:cd:bf:4b:39:24:6d:07:ef:77:06:43:42:f7:83:8e:5f:
         af:b4:5f:e9:f7:f4:97:77:4a:6d:55:c3:cf:ff:49:58:28:8c:
         10:4f:9a:85:7c:bd:15:85:70:e6:9a:54:61:55:18:5e:9c:91:
         ea:5f:6d:c6:2c:56:e3:64:0e:13:54:0b:4f:e6:34:9b:ab:07:
         ea:af:fb:da:71:85:6a:57:75:f7:08:49:07:46:42:1e:8f:4d:
         55:5e:e2:02:b9:fb:50:8e:e5:ab:c0:90:f8:71:48:cf:47:3f:
         fb:a6:2c:27:82:f5:b8:76:ed:1a:51:c9:0b:42:9a:09:a1:aa:
         b8:35:09:dd:03:54:ad:2f:2b:26:2a:32:39:cb:c8:be:af:bc:
         7e:7f:99:64:fd:0f:89:37:43:cb:2b:26:d6:75:23:ea:f6:4d:
         6a:d6:bc:20:1a:14:69:8d:d2:26:70:c2:83:b7:be:01:98:7e:
         f7:7f:30:f4:e8:cb:bf:8d:f0:8f:92:79:e9:32:44:f6:d9:50:
         3b:96:44:c3:8b:c8:11:3e:1a:5f:8e:2c:a1:91:1d:13:98:8b:
         6c:ba:85:01:2b:72:ea:04:c7:05:c3:b8:c1:09:d2:8e:97:76:
         52:ed:24:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtry7D8FGqBh4xQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
OTZiMTM5OTItNTJmMS00NTc3LTliM2QtNTdiODY1YTY4ZWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfczhDpbfKn7ILVZMPcuLcYDwPzZ7J10IA30
15cKFXr1J/rFXUeP+nlWqAVvhN4cBOw90ivh1AkKSK9MtEN+rV0f1Bx/no1pBpXL
y1nOT4BQsSeOk/yOKD95WNi5cEvuj14wfwKNYDIDGVFOrdSVu8p3P9zK0WWUVdi/
pylovxzL52aKXjv4fAYgAYxJ1Nkb/FCJxDIkrjR8FstdOA+C9n+foNEt6PF06bup
N+CLDqlTYGQKXf+Vfl2IP6+JPLUiaUB5VY6bK54rcmcA2fuVCmMT7hEkC/rSrk+0
9enr9m1C+26tFlvSqtVLT3YltVfTCjMDcmTOU5xMTfxOKiIaAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDJAT3thOvDXKl/UHM2jpJ06Q7DyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZDkxYzc0ZTktNTMyYi0z
NGNhLWEyODItMmVjYzhmMGJlYmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaBFwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTothbqt3doh90OscNIg6vG34c0zb9LOSRtB+93BkNC94OOX6+0X+n3
9Jd3Sm1Vw8//SVgojBBPmoV8vRWFcOaaVGFVGF6ckepfbcYsVuNkDhNUC0/mNJur
B+qv+9pxhWpXdfcISQdGQh6PTVVe4gK5+1CO5avAkPhxSM9HP/umLCeC9bh27RpR
yQtCmgmhqrg1Cd0DVK0vKyYqMjnLyL6vvH5/mWT9D4k3Q8srJtZ1I+r2TWrWvCAa
FGmN0iZwwoO3vgGYfvd/MPToy7+N8I+SeekyRPbZUDuWRMOLyBE+Gl+OLKGRHROY
i2y6hQErcuoExwXDuMEJ0o6XdlLtJBY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:44:54 2025 by rpki-client