Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1cb5f5d8-d606-33f0-b188-2dbf1da6ccb1.roa
File:                     1cb5f5d8-d606-33f0-b188-2dbf1da6ccb1.roa (raw, json)
Hash identifier:          6/wewciXWlyCH6BufGT83EyD2efj9ahr5hkOFz95R2I=
Subject key identifier:   E5:A2:5D:E2:CD:6E:B7:4C:BC:C4:F0:88:42:B2:2E:44:6E:44:A2:68
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849914E4A02C5F43B0E9401A300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1cb5f5d8-d606-33f0-b188-2dbf1da6ccb1.roa
Signing time:             Fri 18 Apr 2025 14:03:47 +0000
ROA not before:           Fri 18 Apr 2025 14:03:47 +0000
ROA not after:            Thu 17 Jul 2025 14:03:47 +0000
asID:                     13335
IP address blocks:        104.29.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:4e:4a:02:c5:f4:3b:0e:94:01:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Apr 18 14:03:47 2025 GMT
            Not After : Jul 17 14:03:47 2025 GMT
        Subject: CN=6b3260f6-5ce7-482c-b1dc-4f970131f9d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:de:d9:78:cf:0e:32:cc:96:d8:bf:88:50:
                    c6:c9:69:71:bb:5b:3d:13:c4:c8:ba:d8:73:e1:2e:
                    a8:b3:a6:81:11:64:27:f8:07:0e:c8:c7:cc:94:4d:
                    d1:f2:c3:f2:67:83:08:99:15:7d:80:a0:30:a4:1d:
                    7a:af:ef:8d:0d:8e:01:5b:8c:8a:db:1b:5f:44:ea:
                    e9:af:d1:65:6c:5c:a2:d3:ab:c4:80:ae:b7:27:48:
                    7b:b4:3d:fd:67:a1:f9:e6:a8:46:83:15:19:bc:57:
                    ee:b1:2d:8e:0d:ec:0d:98:a6:78:70:44:0c:b0:30:
                    dc:d6:77:83:b2:67:94:10:e4:3e:04:7a:66:85:28:
                    4b:35:94:cb:50:4c:1f:2e:77:8c:a6:76:5d:b7:0c:
                    84:fe:69:ec:c3:c7:c0:85:7f:1f:ba:7f:49:6b:6f:
                    c2:ca:90:4e:5d:da:d6:39:e2:f0:8a:58:bd:fd:4c:
                    63:94:8e:80:5b:94:15:79:fc:82:10:7d:07:f5:dd:
                    f2:11:6f:db:5f:9f:a6:f6:01:73:93:8b:ad:fc:df:
                    f7:a4:f7:31:ab:6c:26:53:53:80:bc:e1:6a:65:96:
                    dd:b9:38:41:ba:19:ac:58:8b:fb:b0:8e:77:34:df:
                    2c:f0:2e:84:17:99:b5:b4:b8:e3:cb:5e:d0:3e:81:
                    d6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A2:5D:E2:CD:6E:B7:4C:BC:C4:F0:88:42:B2:2E:44:6E:44:A2:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/1cb5f5d8-d606-33f0-b188-2dbf1da6ccb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.29.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:a8:89:35:37:ba:47:dc:c4:4e:19:42:9b:ae:18:3a:f5:a0:
         d3:61:f4:fb:34:78:4d:f1:dc:df:91:fe:5a:9c:d4:d7:50:6c:
         24:62:83:3b:ed:fc:46:01:d1:0b:53:c3:4b:fa:6c:61:15:65:
         de:5a:18:ae:f7:dc:77:89:eb:2b:a7:92:69:be:54:c5:bb:fb:
         77:b4:53:28:e8:33:58:f8:40:c5:28:70:fb:11:65:24:f7:f5:
         c7:63:ef:50:a3:52:0a:4c:78:b6:67:10:48:8c:d2:bc:3d:bc:
         b2:65:dd:68:59:fd:6a:c7:78:b0:a8:d7:d0:4e:77:ab:5a:0b:
         cc:c3:58:fa:8a:f9:a3:09:bf:49:0d:12:e9:84:8e:99:12:f6:
         7b:bb:83:9e:3e:16:8d:e1:a3:ef:3f:e0:69:be:46:46:f3:30:
         7c:55:7b:20:59:f1:56:6d:10:4f:ae:d6:f5:66:ab:d5:38:f0:
         ec:4c:1b:c8:5e:24:34:28:b3:9a:67:01:5f:d1:5b:22:32:0c:
         5f:f5:90:2a:07:4d:cb:7b:a3:df:2d:5c:67:d5:a0:f9:3c:8f:
         be:c9:fe:ee:d1:aa:bb:ad:3d:a6:57:b9:71:4a:f2:a0:50:89:
         80:b8:2f:96:be:e3:7f:21:dd:59:e0:7d:95:18:6f:06:f7:88:
         80:a8:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:26:49 2025 by rpki-client