Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e2b4887c-e7b9-3380-80da-0297ac7dfded.roa
File:                     e2b4887c-e7b9-3380-80da-0297ac7dfded.roa (raw, json)
Hash identifier:          kPWspYjq5bcCaPGmLn0sTD6XzrJ7jXEmnB0brI+kfQg=
Subject key identifier:   05:C7:B1:64:9D:F0:6D:24:0D:A8:E1:9E:17:30:23:88:73:2A:6B:16
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584905B6C53DC1FD5DB58EFCBD40
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e2b4887c-e7b9-3380-80da-0297ac7dfded.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     13335
IP address blocks:        104.21.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:c5:3d:c1:fd:5d:b5:8e:fc:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=b918fe38-db30-40a4-81bd-054095fcd530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:17:9c:d8:af:60:18:58:98:4d:f7:8c:bc:2c:
                    7f:0c:c8:da:ad:04:e5:0e:64:10:3c:92:04:88:9f:
                    57:04:27:8f:e3:bd:90:8c:bf:72:a1:2e:21:ca:ca:
                    2b:67:06:9f:96:fe:05:c7:08:39:23:4a:dc:eb:ee:
                    da:1d:08:70:04:54:e0:b9:50:24:a5:2d:80:24:80:
                    fc:cd:7c:52:d2:dd:cf:06:2f:05:56:db:41:b2:29:
                    18:45:95:d1:7c:46:2b:81:8d:30:20:fb:c4:3a:40:
                    42:5f:95:be:c6:12:8f:fb:6a:a7:77:28:6b:c5:ec:
                    be:96:f9:7d:c5:21:fa:c4:28:0e:e8:40:af:c4:97:
                    61:fc:95:7f:c6:59:19:82:50:6c:c0:08:0f:0f:db:
                    dd:16:90:86:28:b4:f7:71:f5:86:64:9f:02:77:5c:
                    cb:00:4c:9d:4a:69:1e:72:28:75:60:bb:ab:5c:80:
                    dc:a8:e8:4c:85:4b:be:75:ed:b7:34:26:92:55:2b:
                    59:49:5a:84:cb:53:14:38:17:4d:76:1d:44:81:e9:
                    81:0e:c2:87:b5:f3:d9:c8:d2:50:cc:e9:6f:0d:58:
                    66:e4:44:18:de:b5:b4:3a:b1:fd:40:be:17:ed:67:
                    4b:94:88:c3:6b:61:de:ac:56:ee:15:de:f4:1f:6a:
                    8f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C7:B1:64:9D:F0:6D:24:0D:A8:E1:9E:17:30:23:88:73:2A:6B:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/e2b4887c-e7b9-3380-80da-0297ac7dfded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.21.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:4f:5d:39:70:41:dd:ce:53:8d:47:fd:e9:5d:ce:cc:44:54:
         5d:1c:dd:3e:ec:34:c5:53:76:19:be:a9:7b:41:9e:49:8e:66:
         26:86:25:7f:ad:9e:11:c1:43:18:2d:79:5a:74:1d:48:9e:4e:
         24:ca:f9:3b:e6:99:b6:24:41:98:0d:07:70:54:b3:b3:b1:83:
         e8:b7:2d:a1:a3:85:ff:6f:52:1c:d2:eb:05:06:3a:c5:b9:e3:
         a8:97:fb:ec:4e:11:5b:6a:86:c9:21:50:f3:ec:9c:dc:83:1c:
         23:37:89:9f:78:5a:75:2a:bc:60:19:75:6c:c0:83:df:fa:ca:
         da:dc:dc:2f:6e:43:d4:73:e7:49:eb:6b:37:e8:1b:94:9f:ef:
         20:fd:10:22:e3:3c:be:72:2a:c9:b9:41:14:cd:17:47:cb:e3:
         25:c6:1c:f4:a4:71:bd:cc:fe:62:7a:6c:69:bf:80:ae:f6:e2:
         b2:60:15:61:fa:ed:69:96:39:3c:ae:9e:d7:22:2d:91:b4:ee:
         04:d0:0e:8a:79:e2:08:78:04:75:d3:3d:7e:79:17:65:da:ef:
         62:7b:c4:b4:0b:07:40:4f:dd:2b:26:82:a6:d9:45:5c:05:40:
         41:85:98:59:fe:d0:f9:6d:5b:78:f0:97:98:3a:a0:5b:ad:87:
         03:a0:c8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:51 2025 by rpki-client