Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/2e109f86-2794-3df1-8cd5-1d2075f9d3cd.roa
File:                     2e109f86-2794-3df1-8cd5-1d2075f9d3cd.roa (raw, json)
Hash identifier:          +pXCreQ4TQkTFNqzBczw1yyaTOSWDs5yfOwIzx3V3F0=
Subject key identifier:   05:D6:A1:EA:07:5F:B9:DA:A9:95:73:40:BD:48:29:08:7E:93:1A:13
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F43285848CC7B8D297967CEB9D43F5D80
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/2e109f86-2794-3df1-8cd5-1d2075f9d3cd.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     396998
IP address blocks:        104.152.140.0/24 maxlen: 24
                          134.195.42.0/24 maxlen: 24
                          172.111.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:8d:29:79:67:ce:b9:d4:3f:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=0466e78b-ddd9-4967-b2c4-5f8c9616289f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:10:ca:ce:b2:c8:67:6a:4e:33:62:7d:61:
                    de:1d:b3:a6:47:cf:70:a6:fe:5f:69:c0:fd:e2:97:
                    6e:11:d8:0a:68:fd:4a:b6:8b:9d:f2:14:f4:11:b0:
                    de:f5:f5:7e:93:e1:c1:5d:f3:9b:79:11:e7:5e:87:
                    3f:98:4e:47:0a:44:32:21:46:5e:b6:99:bb:68:02:
                    2b:f7:1e:eb:52:d3:49:97:00:40:34:48:da:07:0e:
                    a0:38:98:17:34:13:67:17:39:06:1b:b8:c7:a6:dd:
                    93:c4:6e:d7:d4:f2:91:9c:94:b5:00:09:ef:91:f1:
                    b8:1f:d7:09:28:4e:0e:0f:f2:16:ca:1a:97:be:38:
                    8e:27:63:45:bb:26:33:e4:6a:33:cc:b2:cc:fb:35:
                    79:15:c4:3d:bf:93:d5:18:88:49:aa:8d:6a:56:fb:
                    4e:02:27:75:ad:0f:36:87:72:2d:ad:a3:dc:ae:d6:
                    8b:81:c2:f1:79:41:06:b0:17:9a:50:01:62:ad:2a:
                    6b:70:43:9d:b6:ef:48:60:3d:ab:62:2c:2f:d8:71:
                    27:a7:d4:f9:77:3b:e7:b6:0f:90:fc:f2:9d:17:57:
                    c0:46:5a:03:1e:33:b4:aa:8b:a6:b0:89:a1:f9:0e:
                    4c:2b:5f:37:9e:29:03:59:78:5c:7a:a1:59:45:0b:
                    ef:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D6:A1:EA:07:5F:B9:DA:A9:95:73:40:BD:48:29:08:7E:93:1A:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/2e109f86-2794-3df1-8cd5-1d2075f9d3cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.140.0/24
                  134.195.42.0/24
                  172.111.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:6b:99:29:9a:a4:af:d0:5f:01:52:7d:e9:36:5b:ad:d7:d8:
         3d:8d:81:73:fb:df:39:77:aa:c1:9f:c3:e9:33:8e:3c:32:e4:
         69:3d:10:38:47:b4:5f:fa:0b:56:bf:74:f6:e7:c1:cb:ed:09:
         03:09:7f:2e:e4:de:24:38:ad:77:16:1e:36:0f:74:d2:8c:c2:
         76:ea:65:d3:66:3f:34:a8:27:06:82:db:ca:7b:ec:0c:8b:97:
         8c:e5:20:da:38:de:e2:93:e5:61:67:76:4d:88:4f:23:93:45:
         a5:0e:f8:07:51:3a:d4:e0:27:27:12:df:b9:8f:26:15:6d:ec:
         04:f9:be:19:69:e3:39:e4:38:8f:bf:c6:44:59:d0:a7:8a:9f:
         72:9f:7d:a0:44:ba:32:a2:10:53:1c:fe:c3:85:44:c4:8a:f0:
         77:77:47:d0:7b:08:9f:ec:7c:ea:d3:e2:bc:71:36:eb:7b:b4:
         83:bc:46:7b:42:4b:eb:ac:c0:26:8e:95:24:36:1a:7f:46:03:
         7e:1f:ae:42:83:04:2f:76:e0:4f:36:ea:bc:10:cf:b0:0c:a6:
         c8:cf:eb:2d:bd:e3:5d:45:35:8e:37:ef:16:8a:05:24:6b:a9:
         61:a5:32:13:3b:79:4f:e7:53:af:65:14:7e:c5:cd:00:88:8b:
         d8:75:07:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:51:45 2025 by rpki-client