Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/847db46f-b960-3052-9906-bb6edb9e8446.roa
File:                     847db46f-b960-3052-9906-bb6edb9e8446.roa (raw, json)
Hash identifier:          4RBCgTFNuM4BM8TkpxsqCRuFNS2LVR8qxsCv0CM5Yxw=
Subject key identifier:   9B:EB:BC:4E:BF:CC:7A:7C:25:E0:12:3D:5A:A2:EA:73:B4:36:4D:E6
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584890F21CF610DE496BD03D0540
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/847db46f-b960-3052-9906-bb6edb9e8446.roa
Signing time:             Thu 16 Jan 2025 18:11:07 +0000
ROA not before:           Thu 16 Jan 2025 18:11:07 +0000
ROA not after:            Wed 16 Apr 2025 17:11:07 +0000
asID:                     23473
IP address blocks:        104.145.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:f2:1c:f6:10:de:49:6b:d0:3d:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jan 16 18:11:07 2025 GMT
            Not After : Apr 16 17:11:07 2025 GMT
        Subject: CN=e78b8188-449d-40a9-bb58-9580cf96cd8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:64:3a:f5:b5:b8:0d:29:0e:e7:23:17:14:bd:
                    42:d0:80:92:99:83:b6:ae:82:13:5d:e5:c1:f0:d5:
                    c3:fb:47:16:2f:1e:8c:81:79:b5:52:23:ee:4d:be:
                    b2:95:b7:7c:26:5f:8c:1e:73:01:58:fa:24:af:98:
                    95:13:09:3a:8f:4e:24:97:ba:0d:ce:61:0d:eb:23:
                    d5:c0:ae:7b:0a:ff:6c:5e:d7:12:58:86:bb:6c:6b:
                    d4:2c:59:d9:63:62:ad:cc:f0:ee:a8:12:07:d5:cb:
                    59:d8:72:c4:96:5f:53:e6:de:be:08:9f:25:cb:bc:
                    92:29:cb:6e:72:e7:2a:7b:4d:45:6a:15:c4:45:8a:
                    01:43:82:b8:23:4c:34:bb:af:79:a1:5f:7b:95:6e:
                    52:c9:05:a3:24:1f:4b:b3:c2:bf:e2:6b:73:10:63:
                    3a:98:12:ce:b0:73:c6:17:0e:c7:f8:6c:bd:ce:0b:
                    89:5e:03:9e:65:bb:d2:27:cc:18:b5:d8:04:16:fe:
                    51:f4:48:c8:c5:95:fe:a2:91:53:89:d2:46:30:2b:
                    4d:80:7e:7b:4c:7f:84:48:c7:b4:2d:46:a1:e8:08:
                    35:74:1a:99:c4:50:d6:ad:27:42:01:13:9c:bb:48:
                    81:90:6a:5c:37:67:cd:14:95:09:11:32:d0:71:b9:
                    a6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:EB:BC:4E:BF:CC:7A:7C:25:E0:12:3D:5A:A2:EA:73:B4:36:4D:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/847db46f-b960-3052-9906-bb6edb9e8446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:39:c6:6e:6b:c1:d3:77:ca:11:cb:b9:69:92:35:41:c5:c8:
         32:01:b6:4c:12:5d:6e:c4:71:08:7d:4a:05:97:9e:97:a5:de:
         16:7d:00:1e:0c:9e:3f:75:80:13:12:ed:a5:11:5d:66:40:57:
         37:6c:76:bb:39:e0:cc:fb:e0:4c:b2:4f:7a:86:07:f1:a1:61:
         41:25:02:04:09:b7:52:6b:4c:21:8c:1f:a1:63:ad:ef:d7:ca:
         2b:5a:3f:22:1f:06:64:ff:ee:66:2c:bf:c8:a6:ae:a5:d0:a3:
         d6:2b:59:3f:7e:4e:82:a9:cf:12:da:43:7e:a8:db:7d:39:dd:
         c4:da:a4:f6:f3:6c:7c:9e:0f:33:8a:49:dc:47:a1:4c:9e:81:
         70:21:c6:e1:65:19:28:15:e1:49:e6:2e:af:4e:ca:7b:65:1e:
         21:40:b3:64:a4:cf:03:dd:09:a1:cb:7f:50:6f:1a:bf:bd:1a:
         28:b5:c0:ff:b7:4b:6c:83:8b:e8:5f:fc:cb:b0:48:89:57:bf:
         ad:52:6a:95:0e:e1:85:bf:8b:8a:1e:a3:98:b7:47:38:f7:14:
         1e:d8:32:96:a8:f5:b4:d9:68:66:09:ea:7c:7f:38:7c:ac:90:
         8d:16:fc:1b:e5:a8:59:ad:e9:b2:b8:5b:e2:a6:05:df:ba:00:
         68:de:a5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:27 2025 by rpki-client