Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa
File:                     2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa (raw, json)
Hash identifier:          P/JyKLlnCpub2IzBgvc94SSzNZi5QWr5ej+LlHmV5yg=
Subject key identifier:   A0:49:18:99:57:83:21:98:63:85:F0:B2:E8:13:D9:2C:C0:62:C9:B3
Certificate issuer:       /CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b
Certificate serial:       010D0C9F432858484C1023DC64565C01BA5B4300
Authority key identifier: B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     1299
IP address blocks:        104.247.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:23:dc:64:56:5c:01:ba:5b:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=59f622e2-63bc-46b3-b0d8-9ea564936523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a0:d9:e9:ab:34:13:2c:57:8e:34:46:20:07:
                    fa:4c:bd:fd:00:ce:09:09:49:b9:70:0d:1e:da:4a:
                    f7:aa:72:f0:66:2c:c0:22:81:81:e2:99:65:dc:f1:
                    31:e5:51:ad:92:6f:b8:eb:78:08:6c:c3:e0:fa:a6:
                    73:bf:c9:ae:d7:23:28:0a:4b:74:ee:e2:c2:1f:2b:
                    cd:7f:89:d5:88:60:c1:7e:fa:e0:8e:55:c4:b3:0f:
                    cd:17:6d:61:86:ea:7c:02:f2:49:e0:13:0a:4f:6a:
                    0c:cc:17:04:3b:6a:57:c2:ae:6d:a0:cf:d2:24:0c:
                    77:32:ae:95:4e:8e:60:21:d4:89:98:58:4c:48:05:
                    82:63:c9:53:56:14:c6:66:f7:5e:33:6d:3d:c2:8c:
                    3c:27:60:b7:1c:0b:34:e0:6a:44:aa:d8:5a:82:b2:
                    8e:c4:a0:3d:6b:8c:84:ea:59:b9:66:eb:37:92:38:
                    e3:0f:b8:5a:ef:f7:9f:5c:02:a2:fb:90:da:85:10:
                    c9:f9:a2:fc:d5:ce:59:bb:ae:3c:81:b9:20:ff:37:
                    e5:f5:2f:d2:de:0e:45:01:17:15:25:52:26:15:e0:
                    36:90:53:2b:23:b2:65:6c:74:3a:2e:21:7b:a3:44:
                    91:b4:85:40:a0:da:73:01:f8:82:83:e0:30:80:8e:
                    a5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:49:18:99:57:83:21:98:63:85:F0:B2:E8:13:D9:2C:C0:62:C9:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl

            X509v3 Authority Key Identifier:
                keyid:B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b1:2b:31:9f:92:5a:87:20:dd:c4:a3:6d:eb:45:00:83:82:
         d5:f1:32:7e:e6:ff:4c:a6:09:fa:3b:cc:9f:35:e9:ed:4c:cc:
         22:4f:e8:89:1f:29:6e:f3:2c:8e:40:bf:dd:df:f2:8f:9f:3f:
         7c:1a:db:cb:8d:5a:42:57:f0:7e:ef:07:d9:03:4a:88:78:fa:
         2e:41:54:7f:47:d7:76:75:cd:9c:43:c2:bf:a4:c8:55:99:6a:
         ec:72:42:40:f5:e2:f4:cb:a9:38:95:73:ba:1d:f3:cc:e1:ca:
         63:29:3b:92:24:a5:e1:1f:f8:7f:d5:2b:4a:27:a8:95:57:b0:
         a6:0d:90:fb:f6:88:c9:62:b6:08:d7:41:9d:07:1b:1d:3d:c0:
         03:89:19:1e:2c:35:da:6b:aa:a8:d6:8d:31:2b:2c:ca:47:cd:
         71:4e:8a:d9:25:04:9f:51:8d:b6:5b:52:d1:3d:ba:01:1d:bf:
         87:e2:b1:cc:e3:34:a2:84:bf:96:2c:55:bc:34:bc:8d:fb:6b:
         ab:fa:32:b1:7e:0d:11:ae:f5:63:b7:58:c8:32:22:0a:4d:b4:
         9f:6e:3d:ba:b0:ae:81:df:df:e8:a8:3d:c6:2e:42:41:25:af:
         ec:ec:74:81:13:46:29:36:3e:c1:d8:48:c2:96:ff:95:68:5b:
         c5:f3:ef:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:01 2025 by rpki-client