Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbb538e1-5eed-3b8c-b1a5-75bbb96d0baf.roa
File:                     fbb538e1-5eed-3b8c-b1a5-75bbb96d0baf.roa (raw, json)
Hash identifier:          ayTzfNF83ISTgtAoUV2Lo+PIY5WqF2XORiw6k8xHx28=
Subject key identifier:   25:BF:93:90:80:6C:C4:3A:BB:56:CD:B7:9D:C0:64:6A:3F:6D:AB:DE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584902EC32B5BD343CFF0B082D00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbb538e1-5eed-3b8c-b1a5-75bbb96d0baf.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     701
IP address blocks:        209.220.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:32:b5:bd:34:3c:ff:0b:08:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=ce54b111-0edb-4842-9ab0-98023d6136b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:03:a0:61:97:ca:40:69:42:19:a1:6c:68:db:
                    02:37:af:28:b0:10:80:fd:eb:2a:62:20:20:e0:c2:
                    fc:59:d8:29:48:73:10:10:38:ec:0c:9b:18:da:2e:
                    e7:5e:0b:90:b5:0d:51:67:8b:38:ea:ca:08:35:41:
                    7d:1e:94:ea:91:2e:03:e0:8c:ce:3e:32:93:ad:e4:
                    43:42:c5:e0:af:23:e9:7c:e2:55:aa:7e:15:d2:26:
                    89:e2:40:cd:65:d5:5a:63:d9:a5:e9:be:2e:47:87:
                    8b:d7:a8:30:e0:d3:c2:35:bd:21:8b:eb:03:85:af:
                    78:9d:d1:78:21:7c:b3:9b:89:64:b4:ce:ca:ff:20:
                    ed:a2:f2:64:f7:84:36:6f:71:ee:37:53:07:ee:3e:
                    f2:85:ff:34:f0:2e:4d:ab:b9:cc:c0:77:81:dd:86:
                    cc:7e:97:13:4c:1c:d2:03:e8:6b:48:6a:26:33:e8:
                    fe:10:b4:8d:0b:99:ca:6c:16:43:e3:12:de:14:39:
                    c5:13:e3:5a:5a:d1:14:45:89:2e:bb:49:c2:ca:66:
                    23:95:a8:d5:b9:a2:3d:b2:d7:90:85:c3:a8:eb:3e:
                    62:6b:62:02:93:aa:00:66:2b:76:16:69:cf:ec:7a:
                    66:8b:3e:31:bf:1d:10:76:05:b8:88:8d:f7:12:71:
                    9f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BF:93:90:80:6C:C4:3A:BB:56:CD:B7:9D:C0:64:6A:3F:6D:AB:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fbb538e1-5eed-3b8c-b1a5-75bbb96d0baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.220.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:23:c5:dc:f8:4f:95:13:96:0e:2c:34:d4:4c:79:71:1b:a2:
         08:1b:d3:2d:8f:98:64:24:ba:13:f3:d6:61:50:de:96:40:de:
         58:b3:c7:e5:05:7f:cc:06:fe:c0:5b:e5:cc:b7:46:5d:b1:a9:
         41:18:d8:35:21:1c:03:6d:88:37:65:ba:d4:f8:8a:42:6d:c8:
         cd:c5:09:40:12:79:aa:27:2e:2e:5f:e9:91:bd:19:2d:98:54:
         65:ea:14:b7:11:45:e2:c7:05:59:7c:b8:70:3d:93:bc:70:e9:
         a1:3c:ea:01:bf:ed:fc:a4:47:9b:3f:a1:a4:85:4b:b8:00:8a:
         52:99:33:34:fd:51:a5:94:6b:31:a3:82:69:bf:3e:be:e9:8d:
         6b:99:55:25:01:75:60:df:7c:75:16:0a:dd:f8:ff:e1:0e:9a:
         1a:33:82:8d:16:f8:51:74:f5:20:56:15:a3:7d:64:39:dd:bc:
         9d:d3:03:dd:59:a2:da:44:c9:71:46:99:2d:c9:18:f5:c4:6a:
         ad:10:51:26:bf:99:4d:5a:d9:6a:dd:ff:a8:1c:fe:70:20:26:
         13:cd:9d:fb:86:6b:43:be:51:64:22:51:10:77:c8:66:9e:f2:
         16:23:ec:86:9b:9f:8d:19:c0:56:55:ad:45:62:0a:bc:c7:93:
         f6:ca:31:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:29 2025 by rpki-client