Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa
File:                     29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa (raw, json)
Hash identifier:          JpILjzL3FLLEH0MTe41bVElJ76D/2c4+96lwsmVaX+U=
Subject key identifier:   77:63:3D:05:3B:E9:76:1E:DA:FB:1D:43:EB:C5:B6:52:A9:B8:25:40
Certificate issuer:       /CN=7496889c-61af-4c61-8157-4b7f2fde690d
Certificate serial:       010D0C9F43285849002165FCC1DDA34AC4FCF1C0
Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     611
IP address blocks:        198.164.104.0/24 maxlen: 24
                          198.164.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:65:fc:c1:dd:a3:4a:c4:fc:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=88fa6189-d4a2-4a37-8b9f-36cf65bda3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b3:9d:01:ab:71:e1:bc:76:b8:14:46:b8:3b:
                    53:f3:61:5f:00:15:6c:2e:8c:6c:4d:32:62:33:89:
                    b7:83:28:bb:b3:0d:55:c6:62:93:62:37:65:63:0c:
                    5a:3a:27:b1:bb:eb:74:ec:bd:ef:69:06:7a:f8:2f:
                    41:8f:77:37:73:a9:5f:ca:1f:1c:e6:3a:3c:3f:5c:
                    2d:eb:d3:83:9e:63:6b:dd:2b:81:6f:ca:b4:f7:ef:
                    f6:ee:ed:87:39:63:30:70:d3:d6:9b:66:51:b9:c8:
                    0a:ad:2c:a9:c5:26:02:b8:60:b0:59:eb:00:cd:1d:
                    de:10:20:63:9d:2c:51:77:7b:ce:bf:f1:01:1e:9a:
                    61:15:cc:e9:93:c2:86:87:6a:7e:6a:f9:5a:7f:af:
                    f9:d6:a7:be:97:88:1a:53:4c:ee:c6:db:16:ec:d9:
                    b5:a0:99:d8:b1:1a:b1:e9:b8:78:73:35:17:91:f3:
                    34:d0:0b:70:17:8a:f7:2c:f6:9e:42:2b:aa:ac:49:
                    3e:06:91:f8:41:56:81:95:08:25:65:92:ae:03:35:
                    b5:18:5c:a9:cb:4d:e1:db:02:4d:42:68:15:b3:8f:
                    25:cc:59:ff:93:f8:f0:14:07:5d:2e:d4:6a:14:ba:
                    5b:9e:33:1f:72:67:dc:46:da:7b:33:61:42:f5:ff:
                    77:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:63:3D:05:3B:E9:76:1E:DA:FB:1D:43:EB:C5:B6:52:A9:B8:25:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/29308d46-f55d-36a4-88b5-cc2afdcc7cb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl

            X509v3 Authority Key Identifier:
                keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.164.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:85:6a:99:a0:ac:0c:74:a8:95:5f:f0:42:3d:81:8d:4a:3d:
         23:f3:b3:be:0a:7e:73:d2:fa:43:cd:21:ab:44:d1:14:0d:d5:
         c9:ec:11:d6:8d:52:84:4c:f1:7e:99:d1:94:b2:01:68:55:88:
         27:7b:4e:cf:80:64:e5:7e:bf:15:c3:09:69:f4:6b:13:33:d5:
         f8:ae:14:7c:2a:77:55:a3:42:56:49:15:a7:24:bf:bd:76:0a:
         f8:6d:5e:b7:38:67:4f:c6:a3:21:7a:fb:d1:2d:07:2c:f0:6e:
         73:55:52:35:a9:48:79:d3:dd:ca:73:e6:c4:94:99:bc:98:67:
         6f:5e:48:dd:ea:e3:4a:45:71:6d:ce:5e:67:40:08:9a:04:68:
         ad:dd:a6:aa:a9:04:55:06:3d:7e:9b:54:59:e0:02:94:ed:9b:
         7e:b0:fe:d2:b6:74:d9:3f:be:b6:9a:db:b1:19:2a:9d:ef:5d:
         cf:da:a1:a1:b6:8e:07:cd:51:3f:96:9f:cf:85:1c:db:ed:14:
         7d:c4:80:cc:c7:a1:f9:8f:4d:51:0a:b5:1a:60:21:aa:16:0a:
         55:fc:21:f6:ee:24:c9:1d:0e:71:45:3a:06:e8:d4:a4:29:b4:
         3f:9e:2a:04:3d:81:e6:7a:82:6e:82:04:44:c6:55:0e:fe:32:
         4b:35:81:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:10 2025 by rpki-client