Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/05ee1e0e-1f16-3433-8f90-d168fe5c24d8.roa
File:                     05ee1e0e-1f16-3433-8f90-d168fe5c24d8.roa (raw, json)
Hash identifier:          Rh4faOJtPTWLaMEvLPbHTAoYPBAgBhPblkKNlawWtA8=
Subject key identifier:   33:9C:57:2C:C9:30:F1:7A:BC:DB:EF:67:66:2E:B1:3D:72:9A:2D:85
Certificate issuer:       /CN=3e0f242a-aaee-4297-9937-b33329a8c34f
Certificate serial:       010D0C9F43285848F92696D111E3A08822956A00
Authority key identifier: 29:B7:9E:D5:E0:7F:C8:56:9A:81:DF:5C:2A:02:EF:A6:F5:E9:9D:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/05ee1e0e-1f16-3433-8f90-d168fe5c24d8.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        104.207.162.0/24 maxlen: 24
                          104.207.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/3e0f242a-aaee-4297-9937-b33329a8c34f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/3e0f242a-aaee-4297-9937-b33329a8c34f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:96:d1:11:e3:a0:88:22:95:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e0f242a-aaee-4297-9937-b33329a8c34f
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=627a57f0-b6be-4271-8ff5-794e97440fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:67:1d:94:0b:76:9b:cb:8c:f8:52:43:91:e5:
                    a8:27:78:52:c6:c0:d5:7d:7a:38:3d:2c:c7:11:85:
                    47:9c:9e:06:ca:95:4b:63:02:a0:40:67:05:65:27:
                    70:15:22:f2:ec:35:ad:1d:03:10:0b:33:b4:52:59:
                    2c:b6:84:ca:cd:21:30:a4:bc:92:33:93:d5:09:48:
                    9e:e4:e2:07:2f:24:e3:f3:4a:74:19:29:3e:a3:70:
                    da:4e:75:44:35:63:46:b7:48:21:12:20:8e:ec:e9:
                    72:bc:b8:71:b6:d9:fe:4b:93:de:fb:1e:4c:ca:71:
                    97:73:61:25:3f:e8:98:d0:d8:c1:f7:9e:0a:49:87:
                    8a:d5:ef:47:c1:4c:23:ab:a5:d8:39:7c:8c:e8:71:
                    02:22:e1:b7:2c:e5:58:49:ad:29:57:da:dc:11:c8:
                    50:bf:48:e6:4d:42:a6:55:01:9b:0b:ea:be:e4:1f:
                    1e:72:6d:99:53:e7:11:82:47:29:67:cf:32:7f:88:
                    04:61:21:5d:da:20:d9:94:5e:09:5f:62:0b:cd:c1:
                    1d:ee:d0:e7:95:c2:d0:15:9f:96:e3:83:38:c0:06:
                    1c:4b:e8:3c:b9:76:26:18:d7:1d:fe:3e:00:3f:bf:
                    f9:8f:29:30:a6:45:14:c2:d4:7a:39:1d:e0:af:47:
                    8e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9C:57:2C:C9:30:F1:7A:BC:DB:EF:67:66:2E:B1:3D:72:9A:2D:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/05ee1e0e-1f16-3433-8f90-d168fe5c24d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f/3e0f242a-aaee-4297-9937-b33329a8c34f.crl

            X509v3 Authority Key Identifier:
                keyid:29:B7:9E:D5:E0:7F:C8:56:9A:81:DF:5C:2A:02:EF:A6:F5:E9:9D:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3e0f242a-aaee-4297-9937-b33329a8c34f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.207.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:93:fb:a0:5d:73:0d:d9:49:63:0e:4c:2b:fb:82:af:80:ed:
         fa:2c:8a:4d:6d:6c:2b:98:e9:9f:a7:c9:be:67:3b:93:9f:55:
         fb:74:0c:42:2a:91:7c:7b:64:dd:ff:4a:76:0d:11:93:23:72:
         00:c5:20:03:1c:0b:2e:97:e8:58:73:5f:2d:c0:dc:c7:9e:f4:
         4e:2f:1c:35:77:ba:68:dd:57:a3:a6:39:67:5b:66:63:17:b3:
         c5:58:1f:17:15:30:fc:fd:58:27:4c:71:56:06:26:e2:13:f2:
         13:0f:ce:d7:c5:57:da:64:55:3b:7d:10:51:77:c6:44:a4:e4:
         18:00:08:2f:59:dd:58:fb:fa:56:5e:58:f6:79:67:e1:19:62:
         0c:70:28:8f:60:48:26:f8:10:0b:a1:28:4e:22:e4:86:ec:a8:
         ea:98:15:a5:3c:f2:74:78:42:4c:47:41:81:00:8b:54:9b:fa:
         2f:8b:f1:2f:48:7c:50:1c:10:e0:45:d0:72:3b:71:bd:f7:12:
         d5:d5:b6:b7:b2:4e:6c:d6:fc:a0:b6:a7:d4:c8:36:c8:d8:d8:
         1a:d4:ff:de:b8:8e:fd:8e:ec:d1:ce:d4:a7:a3:3f:62:ba:81:
         60:69:5d:fa:1b:72:7f:fe:e5:c8:e7:2c:7d:93:08:be:db:ff:
         c4:df:df:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:07:13 2025 by rpki-client