Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7950ff86-7690-33fa-bde4-a5e2852ee979.roa
File:                     7950ff86-7690-33fa-bde4-a5e2852ee979.roa (raw, json)
Hash identifier:          LpgcP09DrV9diw8OfxEgB+sFpOT5/Xyi7tO3gnuU3Ts=
Subject key identifier:   CE:43:13:DD:AF:6A:C1:0D:F9:A9:E7:68:58:50:4E:61:9B:3C:CB:4B
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858486C2B27262F8BFE8D2604B1C0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7950ff86-7690-33fa-bde4-a5e2852ee979.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     54858
IP address blocks:        104.220.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:27:26:2f:8b:fe:8d:26:04:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=fe9d193a-0bf1-449c-affa-8efc06501fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ee:fb:ea:c6:54:81:09:ba:2b:19:0f:c1:e4:
                    19:58:e6:01:85:c0:fa:85:1c:64:c0:e7:6c:a8:63:
                    10:12:b8:3e:21:4d:cc:84:18:0e:2e:93:83:6c:69:
                    17:fb:a4:3c:ee:b7:e6:74:04:32:bd:90:ba:3d:25:
                    d4:71:06:7e:3c:39:6a:d5:b4:ae:17:e0:f3:ba:5f:
                    56:d0:e1:87:15:f9:8c:5a:a1:a3:7c:e0:a4:68:fb:
                    15:60:66:ac:23:1b:5b:6a:be:20:f9:fd:e1:06:11:
                    26:22:6f:3f:11:83:ea:52:ff:a0:12:4e:40:a6:56:
                    e9:eb:69:b0:9b:85:d4:82:2b:4d:47:c5:69:3d:53:
                    a2:5c:84:8c:15:43:f4:90:fc:d0:43:ca:f2:74:a7:
                    07:66:07:fe:7e:19:26:7e:0f:fa:b2:7a:bb:43:59:
                    b4:f9:9b:8b:92:d4:5b:86:4c:fc:25:ce:21:bb:d1:
                    73:f0:af:98:e4:69:78:7e:e3:ce:70:71:57:f5:36:
                    eb:4e:b9:46:1e:2e:3a:8e:69:98:15:d6:a2:f1:dd:
                    db:76:3e:0f:4f:3a:c1:b0:b4:76:50:0f:92:80:ee:
                    14:8e:a0:43:c8:86:7f:f5:0a:c5:c4:89:21:06:75:
                    2d:d3:52:8b:b1:5e:27:c0:e7:e1:5e:b9:20:3b:ed:
                    9e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:43:13:DD:AF:6A:C1:0D:F9:A9:E7:68:58:50:4E:61:9B:3C:CB:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7950ff86-7690-33fa-bde4-a5e2852ee979.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.220.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:e4:f9:be:6d:4b:2a:23:44:ba:13:17:6f:cf:53:8b:ea:8b:
         12:57:b2:bd:4f:ea:75:86:ad:d1:69:36:dd:e3:d2:1e:b1:09:
         b2:5a:e2:9f:df:b1:2c:24:43:49:28:be:dd:06:a4:6d:c5:f1:
         43:a8:8e:8e:3e:df:82:b2:16:3d:7d:18:4b:74:f5:f0:bc:3c:
         ec:e8:dc:d8:4e:08:80:65:29:1e:47:89:b0:ab:50:88:9b:a7:
         39:3d:32:e8:28:22:d7:a3:ab:cc:8a:9e:0f:7f:42:dd:0e:7c:
         e2:38:00:b2:03:0d:b8:01:32:f6:7b:44:fe:4c:40:74:95:1d:
         22:38:53:d5:29:24:62:bf:76:10:66:3c:07:11:73:cb:64:65:
         65:5c:ed:5f:b7:8b:a1:e6:9a:6b:63:5e:81:58:ad:3a:72:7f:
         50:99:1c:ed:05:43:2c:2c:6d:aa:a6:8b:46:e9:3b:63:c8:f3:
         27:8c:53:c2:41:88:c6:00:e2:a1:66:e4:f7:95:d1:0c:43:cb:
         cc:48:97:3f:08:ab:57:57:32:df:77:e7:98:4f:81:b3:cc:f1:
         97:c9:84:54:15:66:b5:5f:5c:97:6e:c2:ac:b2:2a:56:0a:f6:
         7f:e0:7d:b1:f2:34:0f:12:2b:3d:3e:26:af:e3:8c:65:2e:54:
         28:de:30:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:31 2025 by rpki-client