Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/7e78a36f-6ca2-389b-8ebf-ef4880929330.roa
File:                     7e78a36f-6ca2-389b-8ebf-ef4880929330.roa (raw, json)
Hash identifier:          QnPULqRmOEAR+TeX0GzydRCo5E7Aaplai/nNQDI7tPA=
Subject key identifier:   DE:9B:C4:33:FC:9B:C9:EE:A8:6B:87:E9:18:6B:ED:2D:5B:45:76:DD
Certificate issuer:       /CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
Certificate serial:       010D0C9F4328584851A57A8027FBF55FF872E700
Authority key identifier: 90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/7e78a36f-6ca2-389b-8ebf-ef4880929330.roa
Signing time:             Wed 25 Dec 2024 02:00:38 +0000
ROA not before:           Wed 25 Dec 2024 02:00:38 +0000
ROA not after:            Tue 25 Mar 2025 01:00:38 +0000
asID:                     393336
IP address blocks:        104.193.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:51:a5:7a:80:27:fb:f5:5f:f8:72:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b2ed8-1a2a-4bd1-b709-7479db7c4ea9
        Validity
            Not Before: Dec 25 02:00:38 2024 GMT
            Not After : Mar 25 01:00:38 2025 GMT
        Subject: CN=0a23274e-1522-4eab-8f63-7f32792a6001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7c:dc:29:4c:44:a8:95:d1:e5:fa:c3:b0:0f:
                    81:1c:66:26:7f:91:0c:ee:78:d8:e3:31:c2:51:1c:
                    e3:a3:8a:f2:a4:2e:39:59:68:9a:18:b5:18:1c:f9:
                    2c:2b:63:0b:72:de:69:2a:85:01:ba:06:6d:3b:45:
                    3b:aa:2b:06:ab:8c:26:d5:b8:fe:e6:d4:fd:90:e7:
                    82:26:56:31:78:da:c6:75:c3:14:5b:53:99:1a:e6:
                    c9:87:57:a9:d1:01:0f:cc:ac:83:37:e4:7d:4b:f4:
                    39:fe:00:b3:d1:4d:32:d9:70:32:ca:6d:f9:d8:27:
                    10:9e:dd:33:77:88:8f:25:02:dc:a7:27:07:bb:17:
                    15:e9:c8:6e:53:8a:1e:12:e7:ce:62:01:72:b9:be:
                    32:d0:89:6f:c5:25:7f:52:8e:20:73:27:9d:2a:5c:
                    f0:ec:57:05:aa:1a:ad:54:46:78:30:1a:8a:dc:1d:
                    72:44:5d:b4:c7:e2:27:ba:00:c4:ba:61:03:f6:cf:
                    c3:51:23:25:53:16:1f:86:ee:e5:a2:64:e4:3c:5c:
                    ae:6f:c7:c5:40:81:2b:9d:37:b9:f0:fb:fd:1c:e9:
                    5c:e7:b6:9d:c0:24:28:de:fe:54:fe:c7:ce:f7:75:
                    8e:2c:61:7a:6d:b4:16:f9:ce:82:7f:4c:80:2c:80:
                    4b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9B:C4:33:FC:9B:C9:EE:A8:6B:87:E9:18:6B:ED:2D:5B:45:76:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/7e78a36f-6ca2-389b-8ebf-ef4880929330.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.crl

            X509v3 Authority Key Identifier:
                keyid:90:7D:4E:BD:0C:A7:F5:DD:13:FF:42:95:1E:9A:F4:9B:33:E9:79:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/994b2ed8-1a2a-4bd1-b709-7479db7c4ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:69:70:a6:2e:36:15:ca:07:dc:c3:4e:10:17:b6:6a:98:66:
         7a:4b:ef:c8:5a:03:29:de:fa:62:c6:a8:30:95:b7:66:a6:ff:
         53:d3:a9:13:91:cc:3f:bb:de:70:b1:35:14:89:3d:2c:45:02:
         4d:21:4a:48:a1:9f:e3:95:6a:ce:de:7d:4e:0f:69:e2:01:e5:
         8e:fe:a0:6e:d2:17:41:50:d2:f8:96:dc:73:6c:f2:13:c3:ee:
         bd:63:20:ec:d1:88:c4:9f:31:c7:50:00:ae:13:87:f6:96:bb:
         00:08:32:76:45:1b:80:e8:07:5e:25:17:ba:e0:c2:1f:90:e2:
         74:0b:cd:ad:01:a6:2c:5d:d3:79:b2:cb:7c:37:e8:d3:7c:6b:
         9a:19:a3:d1:b2:5f:d6:f4:2d:60:2b:7a:dd:1f:04:3a:04:29:
         13:39:d0:b7:61:32:d0:22:f1:e1:35:02:1d:66:f7:42:06:31:
         ed:85:3b:76:4b:8b:02:84:60:f5:9b:21:04:f5:fe:11:80:bd:
         d1:1b:c7:35:de:93:24:9e:02:81:5d:f1:10:fc:3d:47:3d:46:
         d3:1f:54:93:e3:3a:f1:33:46:d5:e8:e3:5d:75:b8:b5:d7:8b:
         f0:09:cd:b8:85:2e:95:46:3f:92:d5:f1:7b:1b:ba:78:3d:2a:
         3d:76:86:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:33 2025 by rpki-client