Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/bde291a5-b48d-38c2-a63a-b6759778eb7f.roa
File:                     bde291a5-b48d-38c2-a63a-b6759778eb7f.roa (raw, json)
Hash identifier:          ncA9lVKKOGOIwRoGBMPYlocNhfXiAkljvy0W0WaCc6U=
Subject key identifier:   F2:23:27:7A:1E:B4:9C:D3:D7:6A:A3:58:4C:3B:E0:28:1F:70:3A:49
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F432858498E647E32E0E348E358531F4F
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/bde291a5-b48d-38c2-a63a-b6759778eb7f.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     399883
IP address blocks:        104.247.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:7e:32:e0:e3:48:e3:58:53:1f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=f647d17a-fb5b-43ec-a1d6-fb69b67a38be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:61:45:3e:d5:31:bc:3b:77:20:ad:c5:e6:64:
                    bc:ce:53:fa:af:41:19:b0:a4:13:4e:ce:25:b5:ec:
                    e1:d0:b2:74:d4:12:1f:98:5c:ba:4b:b9:85:26:7f:
                    76:be:53:c4:0d:27:11:98:10:d9:29:69:0d:24:1a:
                    56:40:c2:2c:f8:9d:09:79:05:71:7d:0f:da:a5:ce:
                    98:ed:05:b0:3b:10:b9:e2:5b:fd:4d:71:91:26:24:
                    7d:05:47:fd:96:f8:d6:2e:fc:62:77:32:fd:4f:2d:
                    39:3f:69:58:bc:eb:8a:43:d2:1d:2c:25:c5:b1:15:
                    75:4c:35:2e:f9:64:0e:66:ab:f3:68:31:90:ba:f4:
                    42:40:b2:55:c4:a8:79:d2:49:95:f0:08:12:9a:84:
                    3d:33:6b:6a:dd:20:1d:02:d0:15:7d:37:c1:6c:d6:
                    a4:f6:1a:88:bb:60:a1:ac:ea:0b:0f:94:44:6a:34:
                    7e:64:19:c3:a2:10:ea:91:46:81:5e:a4:8b:83:68:
                    8a:34:18:63:0e:8d:5d:40:1c:ec:5d:5e:1b:32:ec:
                    ba:b8:ca:36:84:b3:1f:6b:95:27:9e:7c:07:e7:a5:
                    73:d4:69:7f:fd:ea:41:55:f8:29:ec:0e:8c:a2:3e:
                    4d:dd:0d:e3:85:40:72:45:01:cc:d5:08:a7:93:36:
                    bd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:23:27:7A:1E:B4:9C:D3:D7:6A:A3:58:4C:3B:E0:28:1F:70:3A:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/bde291a5-b48d-38c2-a63a-b6759778eb7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a6:da:7b:4c:0a:08:b9:ff:da:a7:ee:08:ed:b8:81:ac:46:
         35:ce:a5:46:3f:63:6c:61:6e:f8:62:82:1f:21:d4:c7:e2:7a:
         e9:e9:21:09:e7:6a:45:32:c7:62:27:81:50:2f:aa:64:55:18:
         cb:dd:20:af:ca:8f:45:e6:ef:a1:63:39:43:c6:9f:82:3f:49:
         0a:a1:ae:2c:cf:10:86:fb:02:ef:f3:f8:f7:4c:88:ac:c7:cb:
         b8:40:0a:f0:dc:4c:65:78:21:95:84:59:17:c9:ae:58:69:12:
         97:a6:44:2d:4f:bb:21:87:38:01:b1:a3:d2:11:e9:88:12:5e:
         c8:d8:0d:a2:19:43:12:92:1f:67:8f:0a:3e:4e:a7:42:57:68:
         a3:a4:ce:4f:9b:39:3f:e1:99:7d:28:14:4f:ec:7b:05:05:05:
         20:a1:29:0c:a9:3e:57:1b:43:d6:05:fa:91:b9:51:c6:36:c3:
         f7:e9:90:8d:9d:09:76:f6:b6:bc:8c:fb:16:67:07:31:56:9a:
         6a:88:35:e6:3f:65:36:18:dd:fb:61:80:a8:86:d0:0c:38:27:
         81:8d:93:48:3f:49:5b:7a:e3:14:56:5b:0a:d3:f5:ff:79:19:
         a7:a8:ff:e7:ca:bc:5e:57:21:c3:2e:86:ae:4c:d3:6e:a5:2c:
         27:48:6d:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZH4y4ONI41hTH08wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmUwOGUwZGUtYWI1ZS00ODgzLThmMDktN2Q5NTcwZjIw
MTg2MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk
ZjY0N2QxN2EtZmI1Yi00M2VjLWExZDYtZmI2OWI2N2EzOGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWFFPtUxvDt3IK3F5mS8zlP6r0EZsKQTTs4l
tezh0LJ01BIfmFy6S7mFJn92vlPEDScRmBDZKWkNJBpWQMIs+J0JeQVxfQ/apc6Y
7QWwOxC54lv9TXGRJiR9BUf9lvjWLvxidzL9Ty05P2lYvOuKQ9IdLCXFsRV1TDUu
+WQOZqvzaDGQuvRCQLJVxKh50kmV8AgSmoQ9M2tq3SAdAtAVfTfBbNak9hqIu2Ch
rOoLD5REajR+ZBnDohDqkUaBXqSLg2iKNBhjDo1dQBzsXV4bMuy6uMo2hLMfa5Un
nnwH56Vz1Gl//epBVfgp7A6Moj5N3Q3jhUByRQHM1Qinkza9iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPIjJ3oetJzT12qjWEw74CgfcDpJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZTA4
ZTBkZS1hYjVlLTQ4ODMtOGYwOS03ZDk1NzBmMjAxODYvYmRlMjkxYTUtYjQ4ZC0z
OGMyLWE2M2EtYjY3NTk3NzhlYjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmUwOGUwZGUtYWI1ZS00ODgzLThm
MDktN2Q5NTcwZjIwMTg2LzZlMDhlMGRlLWFiNWUtNDg4My04ZjA5LTdkOTU3MGYy
MDE4Ni5jcmwwHwYDVR0jBBgwFoAU62igpaUyYfOMs5A+D0fqSS+zhlkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZTA4ZTBkZS1hYjVlLTQ4ODMtOGYwOS03ZDk1
NzBmMjAxODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPdsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACWm2ntMCgi5/9qn7gjtuIGsRjXOpUY/Y2xhbvhigh8h1MfieunpIQnn
akUyx2IngVAvqmRVGMvdIK/Kj0Xm76FjOUPGn4I/SQqhrizPEIb7Au/z+PdMiKzH
y7hACvDcTGV4IZWEWRfJrlhpEpemRC1PuyGHOAGxo9IR6YgSXsjYDaIZQxKSH2eP
Cj5Op0JXaKOkzk+bOT/hmX0oFE/sewUFBSChKQypPlcbQ9YF+pG5UcY2w/fpkI2d
CXb2tryM+xZnBzFWmmqINeY/ZTYY3fthgKiG0Aw4J4GNk0g/SVt64xRWWwrT9f95
Gaeo/+fKvF5XIcMuhq5M026lLCdIbWA=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:10:04 2025 by rpki-client