Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fad11328-b027-308e-9272-8c22e96864c9.roa
File:                     fad11328-b027-308e-9272-8c22e96864c9.roa (raw, json)
Hash identifier:          1XMpzZZwXn+Dvtp/wyvURCKjMBxbFMZ9XJvwBSgBPaM=
Subject key identifier:   BB:94:B0:DB:2F:55:FF:1E:C7:33:4A:E6:20:6E:1B:7F:C7:DC:D9:1F
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849071BFBC8CC57E76DA83E5700
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fad11328-b027-308e-9272-8c22e96864c9.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     13335
IP address blocks:        104.29.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:fb:c8:cc:57:e7:6d:a8:3e:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=b56d41d4-ee97-44a2-be2c-6e921fa48ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:0a:9e:01:a8:a1:50:6a:0f:8e:35:8d:a9:27:
                    79:07:74:3c:99:66:b6:b7:8e:dc:9c:1b:84:6c:b1:
                    47:fd:e2:57:20:62:94:e4:4a:22:7d:8c:af:29:cb:
                    13:76:fe:47:04:27:39:82:91:3b:04:ab:50:d2:9b:
                    ec:7e:ac:88:99:45:59:31:2a:c7:4c:3d:95:ee:6a:
                    69:ce:26:ff:34:9c:ac:e2:ff:f7:81:01:04:03:33:
                    09:ca:97:c6:64:33:72:c7:ae:17:a6:43:26:62:29:
                    36:bd:43:09:37:66:5a:e7:c6:24:58:ce:c4:60:68:
                    6e:43:3e:9d:f1:1f:d9:2b:4d:95:02:85:1d:af:1f:
                    f0:5a:36:b7:b1:7d:4f:0e:f7:c8:a3:27:13:53:af:
                    7d:fb:d9:07:af:af:64:80:74:83:92:7e:2d:d4:ee:
                    7c:3e:21:e6:34:d0:76:6f:2a:46:e1:59:6a:70:de:
                    fa:da:bc:c6:46:4d:03:d9:f8:55:5f:c0:73:55:19:
                    a0:ea:00:81:66:10:40:8e:5c:8e:22:45:a5:2d:11:
                    7a:fe:cd:a1:4f:a5:1b:6b:31:4f:7b:d6:4a:6e:3d:
                    60:af:dc:2d:f2:4e:dd:72:3d:30:ee:47:0e:bc:b1:
                    31:36:fd:9c:22:dd:df:1d:cc:f8:52:92:7b:ca:c5:
                    1f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:94:B0:DB:2F:55:FF:1E:C7:33:4A:E6:20:6E:1B:7F:C7:DC:D9:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/fad11328-b027-308e-9272-8c22e96864c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:5c:86:32:cb:17:4b:d5:3f:50:82:74:33:57:7f:39:7d:3c:
         ea:33:44:94:dd:bf:76:45:8e:b6:a9:da:f1:23:62:c7:22:a6:
         0e:13:81:e0:64:0f:98:ab:c7:b2:3e:14:c5:53:d6:c8:1e:ac:
         6c:3b:43:c1:eb:c9:38:0f:ee:2a:a7:b7:74:8d:a9:73:29:fe:
         b2:2a:eb:47:60:33:a1:c4:76:80:6c:40:4c:c1:b5:7b:26:f6:
         f9:f4:b8:9c:3c:67:a9:5f:9f:f9:e2:61:1b:bd:a4:e6:62:57:
         ab:27:1b:81:70:2b:f3:78:a9:26:44:f3:74:eb:03:31:52:9a:
         34:57:1a:d2:ad:0b:f7:48:aa:a9:97:dc:96:56:ba:ff:b3:e6:
         27:4b:b4:c4:9e:03:dc:bf:20:71:0e:03:04:02:3f:78:c4:f7:
         9b:cb:28:74:0f:1c:d7:c0:be:23:26:a3:f7:21:aa:45:b7:a2:
         ce:ed:89:47:4b:c8:fa:d9:3d:8d:f6:73:0c:3a:b3:07:19:9b:
         03:06:d8:aa:1e:22:f7:a0:46:f9:3a:aa:73:8d:56:3e:26:5b:
         73:23:ef:18:e6:3b:0b:be:60:b8:ca:20:03:62:b1:b1:c0:49:
         f1:de:64:c6:8f:17:9d:1e:71:57:e9:e2:36:09:e3:76:6f:23:
         5c:bf:53:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:28:04 2025 by rpki-client