Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b18ea521-cf27-3d69-aaa8-5efda5315904.roa
File:                     b18ea521-cf27-3d69-aaa8-5efda5315904.roa (raw, json)
Hash identifier:          0SVvqtHpvX2OSfb9DO2Y7mL2UHRmcLs8oIdt+/WlVjU=
Subject key identifier:   2B:FF:BE:E5:3B:AF:BE:90:56:FB:96:CE:39:2A:BD:32:69:3E:83:20
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848BFEBB86C5A2389FE59CA98E0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b18ea521-cf27-3d69-aaa8-5efda5315904.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     396982
IP address blocks:        104.155.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:b8:6c:5a:23:89:fe:59:ca:98:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=249475ea-2504-4964-a8f7-c3b723f91260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:52:ff:d9:50:d4:88:eb:e7:b6:8a:85:99:68:
                    d7:02:a9:4d:36:67:c8:87:59:13:70:57:af:ac:16:
                    55:63:c1:26:0e:1a:25:0c:3e:3e:3f:15:75:8a:3e:
                    94:89:81:4d:28:41:9b:76:6f:59:43:03:c8:fb:bd:
                    fb:06:80:bf:6c:0e:f4:83:a5:b6:fc:91:ed:87:1b:
                    78:0d:35:c4:cf:4a:2b:7b:7e:64:6d:47:5e:bc:f2:
                    58:a8:15:68:de:4d:b3:cf:51:2b:d2:bc:d3:eb:86:
                    a9:43:d8:b6:56:87:27:0f:ce:04:81:25:49:41:2a:
                    e7:35:52:de:7c:19:53:84:15:7a:25:d0:01:30:80:
                    2f:19:36:8c:f5:45:17:15:1a:32:14:34:7d:ee:60:
                    83:ee:32:5f:63:cf:98:dc:3c:69:53:a9:b0:04:02:
                    c5:6a:c6:81:81:c3:59:82:4f:dc:35:05:e0:04:b8:
                    06:cc:cb:b6:7a:c3:d0:98:2c:54:6c:c6:c2:cb:a2:
                    7f:44:61:db:9d:5c:31:1a:58:ff:05:c3:39:47:a2:
                    a5:96:62:43:48:55:24:cc:34:8f:89:c9:c0:ab:16:
                    07:be:bf:bb:dd:ef:c1:bd:1d:ae:80:14:a2:e7:a2:
                    2b:e3:dc:4d:5f:3c:1b:f3:11:bb:0c:75:86:69:8c:
                    e0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FF:BE:E5:3B:AF:BE:90:56:FB:96:CE:39:2A:BD:32:69:3E:83:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/b18ea521-cf27-3d69-aaa8-5efda5315904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.155.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:e0:50:28:14:7a:d6:82:be:cf:b0:39:bf:8f:c1:6c:fb:5f:
         1d:93:13:a1:4b:d3:97:f0:a7:46:49:6d:91:77:a7:f8:b2:1c:
         93:f8:a3:f0:aa:cc:28:e2:77:aa:d0:7b:ef:f5:d4:5b:6f:22:
         dc:79:ae:ea:48:f8:52:7f:a9:b8:e7:ad:50:55:e8:e6:cd:bd:
         fc:06:97:b6:5b:5b:da:46:60:83:43:13:7d:ba:c6:8c:80:79:
         b4:45:73:fb:1f:ac:52:ae:7e:8f:b7:41:b6:db:90:b7:83:4c:
         f8:40:07:93:e3:a9:98:b9:83:af:a0:ae:5f:67:a9:ef:2b:21:
         6c:5e:d7:45:72:6d:14:60:3a:86:05:a3:38:53:6d:53:a8:7d:
         42:6e:d3:d2:f3:5b:a3:f9:ef:75:96:89:27:65:ac:d8:47:3b:
         c2:99:38:4c:a8:29:c1:8f:0b:37:ee:bd:09:7e:99:43:7d:a9:
         8a:73:0b:84:45:4c:1e:74:11:40:e2:bb:7a:e2:45:81:96:53:
         b4:a9:37:bb:94:2f:58:a6:86:c2:ce:b8:ab:03:82:51:ac:48:
         9b:0f:76:6f:84:2d:eb:82:d2:6e:e0:d7:ca:ab:bd:94:68:8e:
         f4:63:f1:f3:ac:cd:fa:54:6d:82:ae:16:91:8d:b0:16:6d:bb:
         da:1d:94:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:28:27 2025 by rpki-client