Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/e3575818-b1e3-3e57-8108-2f31f7c58d52.roa
File:                     e3575818-b1e3-3e57-8108-2f31f7c58d52.roa (raw, json)
Hash identifier:          ZvdaZhqaXhvSUBvaceyxF3XiXCQdwiBKWSBDUcVNUAc=
Subject key identifier:   6C:74:88:62:4E:0D:AA:96:C5:CF:5D:03:3B:99:E2:4E:51:00:8D:79
Certificate issuer:       /CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580
Certificate serial:       010D0C9F432858486AC59877557355E44DEACC80
Authority key identifier: 93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/e3575818-b1e3-3e57-8108-2f31f7c58d52.roa
Signing time:             Fri 03 Jan 2025 02:00:40 +0000
ROA not before:           Fri 03 Jan 2025 02:00:40 +0000
ROA not after:            Thu 03 Apr 2025 01:00:40 +0000
asID:                     46749
IP address blocks:        104.232.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6a:c5:98:77:55:73:55:e4:4d:ea:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d69c2a7-f7d7-48bb-a177-7c0b67654580
        Validity
            Not Before: Jan  3 02:00:40 2025 GMT
            Not After : Apr  3 01:00:40 2025 GMT
        Subject: CN=b1361d3e-2fd4-4a90-9734-66fe8c873095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:10:3a:47:e7:ea:cf:71:49:ba:41:fd:6c:5d:
                    34:47:b8:50:ab:77:46:a0:2f:8e:ec:28:25:79:f4:
                    2f:bf:97:ee:0a:e9:c6:c1:c9:40:6c:5c:ab:78:12:
                    ca:09:17:95:63:b9:57:78:69:6a:e2:2c:b4:da:90:
                    d4:41:6f:36:b3:f9:77:b2:07:72:26:51:40:a5:e4:
                    db:ee:68:2d:80:99:3e:19:98:79:8c:34:2e:0e:db:
                    53:0c:16:e7:4d:72:ee:a4:06:9d:79:34:d4:fa:99:
                    ae:e0:de:f1:b6:50:e1:2d:d2:3d:ca:a9:50:11:8c:
                    6a:03:d8:65:47:fe:9c:c4:ce:e7:9e:ae:25:77:e1:
                    79:ec:28:1c:7b:35:e1:e9:25:30:3e:7a:cb:7a:db:
                    2b:12:4d:1d:c5:98:44:2f:d5:07:ee:bb:0d:69:d6:
                    58:b4:0b:42:fa:77:36:dd:87:2e:a8:cd:4f:84:c7:
                    61:a2:a3:af:ce:81:73:35:ba:c6:dc:cd:91:3c:64:
                    0a:22:01:94:ff:62:d9:e2:76:a3:af:af:1c:5f:89:
                    3e:c4:57:45:07:28:2f:25:22:59:75:95:9f:fb:10:
                    65:23:d8:c9:6e:7f:22:18:32:83:b8:95:28:c5:9e:
                    46:4f:97:4f:ae:a7:64:65:ff:ab:3d:83:e0:bc:22:
                    83:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:74:88:62:4E:0D:AA:96:C5:CF:5D:03:3B:99:E2:4E:51:00:8D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/e3575818-b1e3-3e57-8108-2f31f7c58d52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580/5d69c2a7-f7d7-48bb-a177-7c0b67654580.crl

            X509v3 Authority Key Identifier:
                keyid:93:D1:0F:40:82:93:2B:AF:BF:B2:20:7D:C6:3C:B3:00:03:5F:00:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5d69c2a7-f7d7-48bb-a177-7c0b67654580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.232.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:9a:0d:d9:3f:d4:e0:14:94:e8:af:64:95:a9:84:f7:b9:8d:
         6f:19:01:c5:b2:03:68:fa:79:2b:bf:0f:ea:c5:25:cc:0f:e7:
         e9:35:51:b5:c7:0f:f4:7d:3b:ee:81:66:2b:d1:69:08:68:15:
         d7:87:93:3f:3e:22:b2:9c:be:ee:7b:5e:00:e2:99:a1:57:b1:
         21:b8:75:b7:f7:25:01:3b:12:26:64:47:3b:d9:9d:2d:b0:ae:
         ce:6d:4d:09:27:a2:62:09:f6:fb:4f:dd:db:29:71:0e:7d:ed:
         92:0c:fc:50:23:cc:50:6e:7b:f8:0c:c7:54:c5:75:44:24:1f:
         9e:e1:29:37:85:80:7b:60:ef:25:5f:6a:69:02:1e:6f:ba:93:
         76:07:f6:57:81:a8:95:a3:27:e4:30:ce:a8:6f:97:39:de:b2:
         35:82:05:71:ca:bd:4a:66:d5:5d:19:70:91:ee:f9:39:02:7a:
         8d:ea:b1:13:e9:a5:e2:d5:61:98:3e:4f:09:13:f1:b0:c1:31:
         d6:1d:06:02:d2:52:bd:24:ac:49:53:71:e0:7a:65:98:21:39:
         0d:d0:1a:3b:b6:83:cd:69:56:de:1a:2a:ac:87:32:04:1a:56:
         a3:3b:d6:77:01:8d:a3:9c:ed:d5:b0:72:e1:94:b2:fb:be:e3:
         71:26:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:16 2025 by rpki-client