Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/6e86b93b-2a30-3a25-8c6e-210cf5593a9d.roa
File:                     6e86b93b-2a30-3a25-8c6e-210cf5593a9d.roa (raw, json)
Hash identifier:          Dh5ZXDsnlZKkzpzLw+lcymX/Jx5FMdDjxYbwzyfaRF0=
Subject key identifier:   0B:33:55:EF:91:48:DB:7A:89:13:95:7A:BA:37:DB:AE:E7:6E:9E:16
Certificate issuer:       /CN=8fe40320-74dc-4444-a6ef-bd88d604a876
Certificate serial:       010D0C9F43285848FD569AA53F288C8A2AD308C0
Authority key identifier: 06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/6e86b93b-2a30-3a25-8c6e-210cf5593a9d.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     18450
IP address blocks:        104.224.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:9a:a5:3f:28:8c:8a:2a:d3:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe40320-74dc-4444-a6ef-bd88d604a876
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=b5482396-d658-40f7-aef0-c686e12f5039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cd:99:d0:e8:4b:ab:9e:49:ab:68:0a:a5:7b:
                    b0:22:e2:0e:62:98:1e:40:1d:1f:fd:d5:32:2a:ca:
                    14:1d:68:e6:12:b9:6c:3c:21:d5:c7:c6:fe:e7:c6:
                    17:5d:04:41:02:33:62:2d:27:af:96:58:52:f2:eb:
                    63:c3:a2:db:e5:a1:67:67:22:ec:77:34:a8:ef:31:
                    5e:79:00:eb:34:40:ca:ea:7c:9c:1a:df:42:90:f5:
                    0a:94:93:a9:1e:1a:cd:1c:51:08:f3:37:6f:27:ef:
                    06:d6:ff:57:18:2e:d7:ba:e2:1e:30:d9:40:7f:67:
                    ce:ea:94:cb:e7:b8:58:7c:e6:71:f8:65:1e:c4:f8:
                    ff:15:e7:06:3b:57:3a:65:81:05:9d:00:5a:b2:50:
                    ed:5f:34:17:b9:22:ad:22:1f:a9:1a:6d:53:ff:ce:
                    13:00:20:4f:4a:61:b4:0c:fe:be:e0:60:c5:06:1f:
                    85:59:26:0a:9a:80:29:b4:dc:43:3b:e7:40:b4:f4:
                    9a:51:a5:3f:56:2c:9f:15:c6:c6:6a:1f:c5:c9:59:
                    7f:28:64:c8:9e:23:9e:95:38:6c:78:e5:b2:c0:10:
                    c2:d8:27:65:4e:8f:a8:b3:f2:2c:fa:b6:34:c7:e1:
                    25:9f:68:62:9b:f7:91:20:27:83:35:b0:01:81:41:
                    b3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:33:55:EF:91:48:DB:7A:89:13:95:7A:BA:37:DB:AE:E7:6E:9E:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/6e86b93b-2a30-3a25-8c6e-210cf5593a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876/8fe40320-74dc-4444-a6ef-bd88d604a876.crl

            X509v3 Authority Key Identifier:
                keyid:06:9B:29:99:88:7C:74:39:49:CB:2D:63:1C:4B:51:C1:4B:D7:32:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8fe40320-74dc-4444-a6ef-bd88d604a876.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:64:cd:d2:d8:43:b2:ae:8b:06:75:de:e2:b5:8d:70:30:f7:
         c5:8a:61:3d:2c:f3:00:1f:24:83:66:e9:3e:5e:75:a8:e6:86:
         a4:f0:1d:10:26:ab:b7:4f:54:7b:24:cb:e2:60:9f:fe:1c:cb:
         eb:ac:96:b7:3b:57:95:b8:3f:30:64:17:ab:2e:12:ad:29:57:
         6a:15:80:72:19:93:a1:9d:1d:21:18:10:8e:cb:6f:ae:4c:48:
         49:95:e6:c4:27:2d:45:2e:65:53:1e:35:4c:6c:cc:31:04:c1:
         ed:3f:69:86:fc:9b:18:ee:9b:8c:56:8e:db:8c:95:eb:ca:bc:
         6a:dd:36:88:05:85:61:bd:5f:44:e6:d4:5d:de:30:36:5d:6d:
         cd:93:4b:c0:79:97:05:51:eb:f7:63:38:70:73:25:fe:7e:20:
         10:ab:bb:3b:0e:91:70:d3:48:46:ea:40:21:86:80:00:a3:de:
         c3:d3:ac:92:44:fd:2d:bb:aa:99:f5:81:45:da:25:9e:c3:76:
         6d:3b:be:0b:6d:8b:a8:16:02:29:45:e0:89:ac:b8:b0:2f:1f:
         c7:09:17:ed:be:e7:cc:f4:28:1d:7b:9f:c0:40:ff:e3:8d:7b:
         01:63:9a:17:ff:82:3c:73:80:59:1c:9b:f9:d3:d7:bc:66:61:
         af:96:53:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:57:54 2025 by rpki-client