Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/5aeb51a5-899a-3a8e-8029-24aa1c814b35.roa
File:                     5aeb51a5-899a-3a8e-8029-24aa1c814b35.roa (raw, json)
Hash identifier:          Vd6HtPRcv/16ixxsM0q+UT6JMOhOnYmB9eRJmqyl9TU=
Subject key identifier:   59:8D:E7:53:E8:C2:EC:2C:0C:24:E0:AE:E1:4D:78:6E:4F:81:AE:8D
Certificate issuer:       /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
Certificate serial:       010D0C9F432858487325AACA4754D5BE2D2D9A80
Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/5aeb51a5-899a-3a8e-8029-24aa1c814b35.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     393653
IP address blocks:        104.128.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:aa:ca:47:54:d5:be:2d:2d:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=591ac21a-b8e3-4274-8591-8b9a72a6fc04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:81:23:97:62:a3:7d:7a:05:05:38:06:9c:1d:
                    2b:4c:b2:90:ae:3a:05:c1:b4:8c:d6:1b:fd:11:18:
                    e8:83:c6:d5:be:44:6b:37:fd:5f:4a:38:7f:71:44:
                    d3:0f:bf:d2:d8:2b:54:1e:94:86:cc:09:eb:62:4d:
                    e4:96:0d:9d:ae:16:c9:dd:11:41:88:5f:e4:b7:99:
                    d9:e2:a5:11:52:50:c5:19:5c:cb:83:de:63:c4:81:
                    34:e6:08:30:7c:d1:b4:ac:87:86:7f:e2:be:df:5b:
                    8a:56:26:f0:2d:f5:5a:cd:c9:a5:bb:d1:73:89:9c:
                    06:8e:fe:cf:dd:c5:f4:b9:a4:f7:64:4c:fc:a8:b0:
                    14:c5:f4:40:86:86:ea:7a:af:6a:f9:40:7c:28:77:
                    d8:71:f9:e1:21:bb:f3:86:50:42:16:54:d7:96:8f:
                    7a:7f:14:04:7c:13:54:45:6a:d1:4f:4e:d5:88:72:
                    03:9d:20:be:8d:17:27:37:77:b7:f8:6c:2e:ca:c1:
                    22:8f:ad:e3:39:a5:fe:d1:32:39:b0:df:5b:0e:c4:
                    2f:66:8e:d7:79:c0:ed:b6:11:ef:e1:5f:f3:b9:f6:
                    66:32:7a:96:45:0a:86:b4:a9:5c:07:0f:ac:2b:2d:
                    bc:5b:ce:5d:6e:6d:3f:c2:96:ff:f3:43:87:f4:3c:
                    a5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8D:E7:53:E8:C2:EC:2C:0C:24:E0:AE:E1:4D:78:6E:4F:81:AE:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/5aeb51a5-899a-3a8e-8029-24aa1c814b35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:cf:61:69:66:8b:e5:56:d0:9c:06:07:23:77:7e:8e:0f:01:
         32:15:42:76:0d:22:76:1e:51:04:a5:0f:af:bc:c5:e1:00:2c:
         a3:e6:93:96:f5:ba:62:25:9a:60:49:51:bc:94:7f:1d:f0:e4:
         23:31:aa:06:0e:7a:f2:ce:11:3b:09:ee:a9:5a:e5:85:5c:8c:
         91:c5:af:f2:ec:4c:20:9a:60:2b:db:ad:5b:3e:9e:ab:57:d1:
         41:3a:cd:68:ee:a5:15:53:ee:b9:02:f2:0a:3a:b9:bb:a8:09:
         c7:b8:78:c9:65:70:b8:85:ed:69:ea:3f:88:3f:80:ba:78:99:
         6b:f3:10:c5:89:75:6c:4e:aa:48:d0:a7:82:ae:90:41:b8:71:
         3a:4b:6b:12:8c:b2:28:13:95:b2:db:14:5d:54:4a:9b:5e:d0:
         d7:a2:1a:71:90:1d:cd:6e:d7:cb:e1:a6:5b:46:fb:a3:35:8e:
         8d:96:4b:0b:a7:07:09:c5:86:de:77:a6:2b:18:25:f5:fd:40:
         65:1c:40:ba:b3:83:f6:8c:08:ae:b1:ef:58:45:07:71:08:bc:
         bc:87:aa:6c:61:78:84:d6:0c:9b:04:2d:49:ed:ac:93:ed:b6:
         76:2f:9e:a9:e1:91:b8:11:cf:96:9b:2c:4e:fb:8a:a4:0a:c1:
         7d:a2:52:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:43:59 2025 by rpki-client