Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/6f2d980e-2549-3044-9c73-9be4d2448eb4.roa
File:                     6f2d980e-2549-3044-9c73-9be4d2448eb4.roa (raw, json)
Hash identifier:          j5l4DBG7FY/5AJ15hxS/T6I7d8BMt45hcnKr+etfb0w=
Subject key identifier:   43:89:9C:5E:8A:27:D8:D0:B0:AB:A4:4C:13:6C:75:0A:B6:FE:C7:B9
Certificate issuer:       /CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b
Certificate serial:       010D0C9F432858492CAE853E0ECCB536D066DE80
Authority key identifier: B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/6f2d980e-2549-3044-9c73-9be4d2448eb4.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     399560
IP address blocks:        104.247.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:85:3e:0e:cc:b5:36:d0:66:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=e5ae4c16-f634-45df-9cb8-f0af6043ce09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6f:8e:54:a8:c0:d1:fe:e6:ba:c6:80:fa:ca:
                    48:f5:90:79:cb:47:cf:b6:84:e4:5f:55:a8:57:23:
                    4a:69:d9:9e:e7:de:8f:cd:08:f7:7f:13:e8:35:27:
                    ae:c3:4e:bd:b0:f1:63:93:02:08:31:89:50:e6:f5:
                    3d:81:61:fb:c3:da:2f:ed:27:44:75:49:97:36:dd:
                    c2:01:9f:22:83:17:43:58:12:9f:7d:ef:49:9c:d4:
                    d5:89:18:ae:98:21:71:ab:53:89:20:6c:6f:12:d4:
                    d0:26:e5:d5:0e:6b:a7:10:e5:e2:af:d6:5e:a6:4e:
                    ea:da:44:16:23:53:29:fc:cc:79:08:33:38:3a:c5:
                    f7:35:e3:e4:81:dc:f6:ff:52:4c:21:42:ef:36:8f:
                    79:fd:30:84:fb:d4:04:7c:d6:0a:91:50:99:3e:a7:
                    c9:59:aa:72:f4:b1:d8:b2:f4:d1:4d:d4:54:9e:a3:
                    96:43:b5:0f:0e:81:29:31:96:79:61:18:e8:dc:79:
                    bd:91:89:28:94:1b:21:b2:76:88:db:f9:a3:17:5f:
                    15:f8:df:57:79:e0:36:72:c7:b0:cb:a6:b4:83:6c:
                    b4:fc:b4:de:f1:b7:17:43:8c:cf:c8:fe:74:e4:31:
                    cf:be:c5:02:29:3b:f8:44:02:e3:02:17:2c:03:e5:
                    f1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:89:9C:5E:8A:27:D8:D0:B0:AB:A4:4C:13:6C:75:0A:B6:FE:C7:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/6f2d980e-2549-3044-9c73-9be4d2448eb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl

            X509v3 Authority Key Identifier:
                keyid:B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:2f:51:19:34:c5:2c:84:10:ed:26:d7:fd:75:bc:2d:c1:4c:
         c5:f8:47:f8:e2:29:6a:00:8a:c3:ee:43:b1:e3:a0:86:04:92:
         be:68:37:c3:64:59:e9:7d:ed:42:76:39:6a:fe:ba:86:46:a7:
         39:ad:2c:30:a0:f1:27:7c:88:ac:5b:0a:15:bc:1b:17:62:98:
         ff:86:04:55:b9:44:31:f6:70:67:84:a3:7e:b5:da:7b:90:6a:
         80:40:ed:1e:c6:fb:97:dd:9a:41:5e:56:31:31:62:8d:b1:80:
         95:3a:0b:9b:dd:8a:db:e9:a6:ee:9e:79:50:80:55:6a:1a:86:
         04:5f:b4:0b:7f:e2:78:6f:95:6b:19:9e:d4:09:f0:fe:56:41:
         3d:2a:ba:34:4d:09:89:b1:b2:c0:ee:61:18:d0:04:d2:22:92:
         ee:0e:01:32:c6:8c:52:71:00:61:87:9c:b4:fb:92:3e:6b:20:
         ef:e4:5e:f8:f0:dc:de:ff:73:5b:21:9e:b4:e2:fe:8e:d3:ce:
         99:90:14:d6:e2:b1:bc:1c:13:46:93:54:51:af:8a:3a:22:c2:
         a8:7b:fa:21:c3:6e:f3:bc:9c:53:3f:5d:35:5b:05:c5:47:0f:
         83:96:6f:25:7b:4e:77:db:65:ba:59:ad:b8:42:ff:a8:9a:73:
         4d:cd:70:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:34:00 2025 by rpki-client