Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/55f53266-8592-322d-85ed-6f75bea473d1.roa
File:                     55f53266-8592-322d-85ed-6f75bea473d1.roa (raw, json)
Hash identifier:          2mAqJiTSMYspNmpp/dHVJZQ/r9w8X1A4JSKH1XpybPc=
Subject key identifier:   DB:D4:6F:65:91:FE:32:45:8A:F5:D2:14:A6:B9:AC:6E:F0:3E:F8:D9
Certificate issuer:       /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial:       010D0C9F43285848EF613C29FA2649952E7A2240
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/55f53266-8592-322d-85ed-6f75bea473d1.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     5511
IP address blocks:        104.193.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:3c:29:fa:26:49:95:2e:7a:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=d4c9db96-0fe0-4cbb-a36d-aeaa092c9516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f0:a6:67:d6:d6:3b:8c:61:87:83:6f:5e:3f:
                    d2:b0:ad:a0:c8:f3:61:da:98:b5:61:fe:1b:9f:d8:
                    89:99:92:c5:c3:0b:37:0d:2f:a0:85:29:3f:f5:0a:
                    e0:c2:30:5a:1a:c2:30:01:af:ad:8b:65:83:de:17:
                    6c:e1:6b:fd:14:0b:e2:33:b9:88:2e:2f:cb:d3:8e:
                    7a:a4:aa:4c:29:db:a2:b0:d8:3f:83:f0:93:10:69:
                    69:61:7f:c5:9b:8f:9e:36:b9:21:01:0b:cb:85:a0:
                    e8:f2:6b:06:24:d2:dc:05:2c:0b:fd:4f:64:b5:7b:
                    32:22:bf:af:99:76:ef:a5:2d:df:94:98:6a:e0:fb:
                    d6:cb:5e:6e:dd:9f:1a:d4:47:bb:55:63:a3:97:01:
                    e6:19:2d:15:f1:82:0a:a7:34:01:aa:ed:d5:bf:54:
                    cf:92:38:20:27:a3:c2:35:08:cd:fd:6b:e2:14:fa:
                    a3:43:6c:b4:0c:60:13:b2:9a:8c:65:d9:cc:f5:55:
                    34:22:3f:b3:8e:bb:8d:fa:f5:7b:49:71:57:91:2d:
                    cb:0a:a5:ed:b8:39:18:0c:af:39:18:9b:05:47:c4:
                    21:ae:dd:29:4b:90:b4:10:6d:52:c0:78:ad:17:b7:
                    81:a6:dd:c6:26:38:b0:d2:c2:25:b6:7b:7e:3f:64:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D4:6F:65:91:FE:32:45:8A:F5:D2:14:A6:B9:AC:6E:F0:3E:F8:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/55f53266-8592-322d-85ed-6f75bea473d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl

            X509v3 Authority Key Identifier:
                keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:bc:0f:08:10:7e:6d:33:d4:0a:7a:1d:e0:ba:af:57:8c:b6:
         ee:4e:d1:14:2f:2e:e5:0e:fe:0b:f7:b2:f2:18:31:ff:49:ac:
         c6:8e:76:e3:0a:b1:15:69:43:10:f3:a6:b5:e7:38:89:b6:67:
         ab:b2:b1:78:2e:55:38:75:7f:7b:f9:ad:32:5e:37:f0:78:e0:
         8b:25:38:b0:ab:fc:5d:c3:9f:c3:f5:1b:85:73:75:3c:ea:b9:
         0c:c5:db:75:45:51:5d:37:fd:d7:bb:c0:c9:d7:08:00:11:fb:
         ba:7c:0a:4e:66:0e:d7:9a:a9:7b:49:21:47:bf:72:fd:ca:97:
         f3:ca:18:39:5f:a4:6e:c5:89:df:92:72:21:3a:ab:ca:81:ac:
         71:91:4c:4d:7f:0f:1c:dc:7f:23:a2:6b:2e:86:8c:d7:7a:9b:
         d8:d5:d3:7b:5e:42:a4:23:d2:32:5c:8a:bb:f6:79:a4:17:da:
         84:1e:c6:75:a5:fa:a8:73:30:0e:2e:e9:74:c4:24:e0:7e:bf:
         72:f7:f1:82:6b:56:45:61:32:02:ef:b5:a5:cd:cf:a3:cf:a0:
         1f:35:8f:e7:a6:2c:fe:0d:28:b4:df:d3:a1:73:f7:b5:9f:65:
         e0:31:b9:4f:80:6d:66:22:b8:bc:82:18:81:db:58:d2:ad:06:
         91:34:95:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:17:36 2025 by rpki-client