Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/672a3d03-abc2-3f66-8052-26ed409619a3.roa
File:                     672a3d03-abc2-3f66-8052-26ed409619a3.roa (raw, json)
Hash identifier:          +qUQPVEFj/F/gkupitpVa36aRJZ2iJ6ZQObdX9j7yno=
Subject key identifier:   43:20:AF:AE:65:01:59:A2:58:E3:F7:6A:1A:82:6D:6E:F5:11:7E:A0
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F432858491ED6E04847A4395F5CF2F3E0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/672a3d03-abc2-3f66-8052-26ed409619a3.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     13414
IP address blocks:        104.244.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:e0:48:47:a4:39:5f:5c:f2:f3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=09d07863-d379-43ee-8e09-f9a97472a4bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e3:69:ef:15:f4:55:d2:32:14:be:4c:90:8f:
                    ea:36:3a:d5:59:c4:e3:f3:64:a7:bf:df:7a:1b:3d:
                    dd:99:20:ca:42:b6:31:b8:a6:d3:8a:51:e4:84:e5:
                    4a:5f:3a:8a:41:4d:27:20:ba:9a:73:da:12:60:6c:
                    8a:04:3e:4d:5c:a3:0d:9e:ed:59:38:be:d4:20:18:
                    73:99:a1:d8:49:d3:7d:26:01:b2:43:e6:d1:2d:e7:
                    45:d6:02:c3:83:3c:39:78:24:92:b6:97:72:c6:15:
                    de:89:c9:01:37:94:aa:1c:0c:16:79:0a:a4:bb:d7:
                    6b:8e:ef:31:73:96:2a:96:e6:14:3e:5b:47:f0:10:
                    e1:23:78:7e:84:f7:a0:a5:09:90:92:62:f2:ef:5e:
                    32:f0:f7:9e:69:c4:80:be:34:6c:c3:35:50:fd:96:
                    25:6b:c3:e7:aa:2f:c2:78:7a:85:51:e2:65:79:df:
                    5c:ce:0f:9e:81:30:c7:c3:0d:c0:5c:c8:d1:76:89:
                    a3:01:7b:3c:3b:7e:cd:31:0a:08:bc:a1:fe:79:07:
                    e0:1f:7d:59:b7:01:26:3b:30:20:e3:65:0d:33:61:
                    20:ac:3f:b7:22:46:95:b4:41:af:e6:3a:64:c1:32:
                    0e:99:94:24:6d:6d:46:dd:cd:de:ca:7d:51:12:d2:
                    ac:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:20:AF:AE:65:01:59:A2:58:E3:F7:6A:1A:82:6D:6E:F5:11:7E:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/672a3d03-abc2-3f66-8052-26ed409619a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.244.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d0:22:d1:69:e5:43:46:0c:25:d5:cf:36:3d:7c:76:e2:92:
         d8:5a:f9:43:bc:20:6e:8a:a8:a3:8b:1a:97:a0:76:53:3f:2d:
         32:bd:62:cb:53:cd:b0:5d:e7:57:9f:4b:f5:f8:e1:b1:35:f4:
         ea:4f:d2:8d:36:20:67:b5:ca:be:0d:15:7a:bf:49:56:d0:34:
         45:df:84:8f:17:a2:69:0c:a6:00:c0:2a:f0:d5:11:fa:e4:83:
         df:9a:09:64:5a:e6:e6:45:81:71:67:b3:0c:a2:a7:ff:75:90:
         db:e3:54:77:e6:8c:37:b9:e0:75:d2:4d:1e:fd:b8:3d:1b:27:
         2c:1b:d2:27:1f:c5:b9:03:c5:99:4f:0c:45:19:35:52:ea:39:
         b2:67:4d:60:a5:34:5c:62:0b:1f:98:30:c7:6a:49:82:6c:54:
         85:70:91:df:b2:d3:de:58:eb:c2:cf:c1:d1:62:8b:a8:9d:2f:
         0e:8f:4f:a5:db:5d:df:37:a4:22:c2:e4:a8:1d:f4:a8:ff:72:
         d1:b6:d1:43:8a:a9:43:a1:c0:14:8a:f3:03:24:ce:f6:c8:57:
         3e:c7:bb:03:5a:b0:49:c1:9e:84:6c:fc:25:e8:7c:1c:e4:77:
         fa:9e:92:e9:08:b9:18:62:91:ab:34:b7:23:7a:df:1d:77:94:
         22:a3:a0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:19:47 2025 by rpki-client