Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/626bce91-cbad-34b1-9426-b60acb9b4ab1.roa
File:                     626bce91-cbad-34b1-9426-b60acb9b4ab1.roa (raw, json)
Hash identifier:          MYAigMMUIYUbaIhGOifbL3RnPP6gLO7sF/UOH+jxxQA=
Subject key identifier:   57:3B:3C:45:38:62:FB:B0:90:81:1C:CF:AD:3B:14:67:6A:31:82:35
Certificate issuer:       /CN=265b0641-047d-4787-a12d-159370bfcdb1
Certificate serial:       010D0C9F432858480EA5116BE7C30154D2D30080
Authority key identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/626bce91-cbad-34b1-9426-b60acb9b4ab1.roa
Signing time:             Sun 01 Dec 2024 02:00:39 +0000
ROA not before:           Sun 01 Dec 2024 02:00:39 +0000
ROA not after:            Sat 01 Mar 2025 02:00:39 +0000
asID:                     7029
IP address blocks:        104.171.22.0/24 maxlen: 24
                          104.171.23.0/24 maxlen: 24
                          104.171.24.0/21 maxlen: 21
                          104.171.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0e:a5:11:6b:e7:c3:01:54:d2:d3:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=265b0641-047d-4787-a12d-159370bfcdb1
        Validity
            Not Before: Dec  1 02:00:39 2024 GMT
            Not After : Mar  1 02:00:39 2025 GMT
        Subject: CN=b200a033-c1c4-4fda-87e5-f632cc4c92d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:39:26:6f:ea:35:fc:f4:d8:4a:d7:d7:67:
                    f3:ca:a8:0a:52:71:fa:a8:60:d6:73:45:bb:d2:2d:
                    0e:2a:e2:c4:70:8a:a9:00:97:fe:59:45:3b:8c:b6:
                    b3:c2:f9:37:63:8c:8c:1a:e1:48:8a:47:7b:a7:38:
                    38:9d:8e:74:b1:9c:b9:91:5b:78:0c:49:1d:ec:da:
                    c8:c0:7e:79:01:66:86:dc:c5:c7:0f:88:f6:0d:62:
                    2a:f8:2f:91:9f:35:65:1d:e0:3d:19:bc:5d:51:85:
                    39:a5:33:c1:ad:08:0e:18:3e:3a:78:78:94:ab:c7:
                    61:53:da:d7:a9:c3:48:f9:33:65:f6:49:14:cd:ab:
                    d5:e3:ec:c4:d8:3d:99:04:2a:06:25:f2:ed:e4:31:
                    d6:3f:0d:15:ad:0b:bf:e1:31:ad:08:82:79:a3:7a:
                    de:35:14:d6:dc:60:7c:57:cf:20:2a:36:16:ee:ed:
                    fb:aa:a7:0b:62:d4:5b:93:78:cc:0d:6b:40:e4:44:
                    9e:9b:8f:18:e0:c4:21:8e:7c:8f:13:17:74:02:c0:
                    d9:52:3e:33:a8:de:3f:7f:b2:14:60:df:3c:e5:be:
                    f0:c2:ed:df:4d:63:0c:27:7b:bc:8f:9d:a5:18:2c:
                    8e:d5:88:e7:ae:db:dd:50:24:50:c3:15:4d:1d:bd:
                    3b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3B:3C:45:38:62:FB:B0:90:81:1C:CF:AD:3B:14:67:6A:31:82:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/626bce91-cbad-34b1-9426-b60acb9b4ab1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.crl

            X509v3 Authority Key Identifier:
                keyid:26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.22.0-104.171.31.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:3b:89:11:cd:c1:dd:db:9b:d2:f1:29:53:8c:a4:f8:e7:22:
         e2:35:ca:2e:73:b3:fa:55:cc:47:a8:b0:3a:3f:be:b1:8c:f6:
         f8:9f:ba:66:b3:85:b5:d5:da:8b:a6:39:f6:3e:25:06:1b:96:
         f7:ff:e9:c5:4d:1f:e3:11:f5:f7:b4:99:6b:c7:90:78:db:11:
         c1:1d:d2:b3:10:db:bd:72:b2:0e:45:07:81:d8:fe:33:f7:4b:
         58:52:cf:cd:4f:d1:d8:18:e7:a8:84:5d:db:f8:15:62:7d:b2:
         04:0e:37:a6:46:90:3d:fb:d1:3d:f3:0c:fa:41:94:9e:d8:d7:
         0f:0b:96:ba:72:cc:86:71:da:f5:22:34:7f:d3:9c:9c:e6:46:
         55:8c:07:b5:dd:b1:08:96:34:d0:33:80:6d:b7:2f:95:85:1a:
         4f:1f:57:16:2e:03:d3:5a:c6:d3:cc:ce:60:f0:fa:20:e8:49:
         57:53:f9:bd:e8:d3:43:cb:46:1b:72:ba:ee:c9:61:28:14:1d:
         57:6e:d1:cb:77:fc:25:4e:9e:d2:a1:a8:84:49:12:1a:42:86:
         c1:64:15:52:54:9c:6f:ce:9b:f8:0e:07:f4:cf:97:51:a5:fe:
         cb:84:b1:fc:3b:c6:f8:82:65:50:bc:b6:d1:3e:1c:dd:02:62:
         1b:0f:5c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:31 2025 by rpki-client