Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/71703ea0-4313-3b97-ab1e-b29a6f173349.roa
File:                     71703ea0-4313-3b97-ab1e-b29a6f173349.roa (raw, json)
Hash identifier:          xpJ7An8jinG1qlIeRTDxF7ZbW7rMqVe7Xks/ZdAnkz0=
Subject key identifier:   51:C9:76:DA:3D:3D:5C:29:6A:FD:19:61:AA:78:86:CD:22:D6:99:98
Certificate issuer:       /CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f
Certificate serial:       010D0C9F432858489A3B424C3E3E0E9A486AB000
Authority key identifier: 91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/71703ea0-4313-3b97-ab1e-b29a6f173349.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     399244
IP address blocks:        104.247.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:42:4c:3e:3e:0e:9a:48:6a:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd9ab029-fead-4e1c-b7cc-3aedf23a797f
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=80723379-9109-4397-8562-c32428a79dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a1:44:60:3a:87:35:ee:5e:74:5d:2f:e3:9c:
                    5d:d5:ba:31:d9:12:68:af:4b:4a:f1:fd:8f:41:ee:
                    ea:3f:07:d3:f5:a8:ba:03:3c:62:78:64:21:25:c3:
                    ed:0c:95:cc:e6:7d:b3:ce:68:bb:f7:87:27:2d:91:
                    88:f2:77:66:38:60:af:87:c4:c1:4f:64:75:4a:4f:
                    7b:f3:22:69:88:4c:51:50:01:d0:0b:0b:bb:93:91:
                    2b:0c:12:42:52:12:2d:75:b0:6b:60:18:2c:11:d3:
                    b5:5d:98:f6:d5:b6:f7:b9:87:70:e6:1e:38:f4:cc:
                    86:e9:6e:3e:75:95:bb:bb:58:2a:88:d1:18:29:6c:
                    80:c5:f2:7d:8f:e9:83:65:b9:36:f5:cf:99:04:38:
                    24:9f:53:87:a5:e8:64:a8:fe:e7:e8:d0:53:af:e1:
                    67:ce:6b:b8:30:a5:40:04:20:dd:2b:65:89:86:a4:
                    be:8a:ea:75:77:d2:3d:20:eb:97:04:4a:8a:db:c3:
                    79:52:08:44:70:e4:7c:55:4b:16:46:70:6e:57:de:
                    f7:e2:76:66:f2:15:5c:5f:fc:a6:09:0e:91:4b:3a:
                    b0:31:a5:50:49:45:40:c5:c7:af:5c:2f:56:ea:03:
                    5d:d3:b7:2b:64:08:c3:6c:8a:af:94:be:9a:dc:9e:
                    69:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C9:76:DA:3D:3D:5C:29:6A:FD:19:61:AA:78:86:CD:22:D6:99:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/71703ea0-4313-3b97-ab1e-b29a6f173349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.crl

            X509v3 Authority Key Identifier:
                keyid:91:C7:D6:BD:DC:41:CD:1D:2A:AE:C6:8E:26:AF:B6:FA:74:7E:B0:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd9ab029-fead-4e1c-b7cc-3aedf23a797f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:0b:78:08:4a:88:ea:ea:1d:3f:48:21:c4:75:3c:c6:da:12:
         ca:a7:a6:6b:92:ed:96:d1:6b:68:45:79:5e:78:a5:9c:85:f2:
         82:08:54:86:e0:4c:8f:38:0e:b7:8f:d7:0c:3e:a0:cb:69:ba:
         c8:d4:af:43:1f:5c:20:55:1e:d7:34:50:4f:24:26:20:07:f5:
         9d:7c:6c:3e:f3:15:24:9a:e4:f5:db:e0:10:76:3d:8d:a8:25:
         fb:0b:af:09:c5:25:f7:90:b5:a6:57:6f:ff:ee:77:64:17:64:
         d4:e2:57:be:c0:99:e2:d6:b7:0e:c0:4e:dd:7a:c9:4d:7f:89:
         62:c4:57:3f:8a:69:63:24:82:ec:c6:59:18:da:45:8d:86:54:
         24:2f:53:52:79:ec:ee:38:05:aa:52:1f:1e:bb:5e:a2:f4:47:
         53:a0:5f:41:58:23:06:2b:cc:15:90:65:03:b3:29:ac:5b:58:
         f0:a8:77:32:da:e9:06:2a:c3:ff:d1:3d:8c:32:8d:07:51:3c:
         ef:9c:26:25:6f:d0:bc:d1:fb:25:4e:ca:d1:2c:ce:f8:c1:d3:
         50:b8:dc:f4:48:1b:b2:81:d8:70:8c:8c:e7:44:d3:b5:f4:74:
         c7:11:24:33:9b:99:03:02:87:aa:d2:23:91:3c:d7:d7:76:3d:
         fb:35:9e:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiaO0JMPj4OmkhqsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ5YWIwMjktZmVhZC00ZTFjLWI3Y2MtM2FlZGYyM2E3
OTdmMB4XDTI1MDEyMDAyMDA0MFoXDTI1MDQyMDAxMDA0MFowLzEtMCsGA1UEAxMk
ODA3MjMzNzktOTEwOS00Mzk3LTg1NjItYzMyNDI4YTc5ZGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqFEYDqHNe5edF0v45xd1box2RJor0tK8f2P
Qe7qPwfT9ai6AzxieGQhJcPtDJXM5n2zzmi794cnLZGI8ndmOGCvh8TBT2R1Sk97
8yJpiExRUAHQCwu7k5ErDBJCUhItdbBrYBgsEdO1XZj21bb3uYdw5h449MyG6W4+
dZW7u1gqiNEYKWyAxfJ9j+mDZbk29c+ZBDgkn1OHpehkqP7n6NBTr+Fnzmu4MKVA
BCDdK2WJhqS+iup1d9I9IOuXBEqK28N5UghEcOR8VUsWRnBuV9734nZm8hVcX/ym
CQ6RSzqwMaVQSUVAxcevXC9W6gNd07crZAjDbIqvlL6a3J5pVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFHJdto9PVwpav0ZYap4hs0i1pmYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDlh
YjAyOS1mZWFkLTRlMWMtYjdjYy0zYWVkZjIzYTc5N2YvNzE3MDNlYTAtNDMxMy0z
Yjk3LWFiMWUtYjI5YTZmMTczMzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ5YWIwMjktZmVhZC00ZTFjLWI3
Y2MtM2FlZGYyM2E3OTdmL2ZkOWFiMDI5LWZlYWQtNGUxYy1iN2NjLTNhZWRmMjNh
Nzk3Zi5jcmwwHwYDVR0jBBgwFoAUkcfWvdxBzR0qrsaOJq+2+nR+sJIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDlhYjAyOS1mZWFkLTRlMWMtYjdjYy0zYWVk
ZjIzYTc5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPdwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4LeAhKiOrqHT9IIcR1PMbaEsqnpmuS7ZbRa2hFeV54pZyF8oIIVIbg
TI84DreP1ww+oMtpusjUr0MfXCBVHtc0UE8kJiAH9Z18bD7zFSSa5PXb4BB2PY2o
JfsLrwnFJfeQtaZXb//ud2QXZNTiV77AmeLWtw7ATt16yU1/iWLEVz+KaWMkguzG
WRjaRY2GVCQvU1J57O44BapSHx67XqL0R1OgX0FYIwYrzBWQZQOzKaxbWPCodzLa
6QYqw//RPYwyjQdRPO+cJiVv0LzR+yVOytEszvjB01C43PRIG7KB2HCMjOdE07X0
dMcRJDObmQMCh6rSI5E819d2Pfs1nsk=
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:36:31 2025 by rpki-client