Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa
File:                     295e6495-4792-3797-a2bf-51461c90e961.roa (raw, json)
Hash identifier:          kOOilB9KgyBnlXgKkVhORIrQ9IHowYALg0M8QgKEG/U=
Subject key identifier:   08:DA:4D:5A:31:6C:C0:90:7B:E5:A2:A8:AC:17:6B:34:6C:7C:EA:02
Certificate issuer:       /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial:       010D0C9F432858498769B5A88A18C8FD94914280
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     40342
IP address blocks:        104.200.216.0/24 maxlen: 24
                          104.200.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:b5:a8:8a:18:c8:fd:94:91:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=85e1e9dd-ed51-4b01-9001-2a9134fc83ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b7:6e:a8:8c:5c:ec:98:59:95:47:13:47:ab:
                    ef:9f:44:30:50:53:8c:e6:cd:cf:86:4c:82:94:f3:
                    70:b4:d6:a8:ea:ca:b7:25:14:15:75:bb:80:a9:1e:
                    55:54:bb:f2:7f:30:c2:29:b2:b1:0c:80:d3:8c:1b:
                    da:13:8b:8e:74:e6:c2:a5:54:ad:d3:e9:74:72:4c:
                    de:cc:92:fb:25:99:08:4d:c1:11:7a:a5:b9:50:0e:
                    c1:b7:a4:f8:83:a4:11:d2:2f:c9:08:24:e5:5f:62:
                    43:2d:93:58:44:aa:94:e9:f6:bb:fd:de:1c:1e:a7:
                    c3:7b:5f:17:84:ff:30:bb:38:6c:4b:ff:bd:6a:69:
                    5e:b6:2b:c6:13:28:6a:5d:5c:a6:f8:7f:2f:65:68:
                    ea:5d:23:ba:39:b4:8a:b3:2b:ae:da:0b:05:1b:61:
                    22:22:d6:cf:19:c6:69:f1:14:14:a4:56:8e:ce:5f:
                    d6:82:bc:c7:61:09:ad:91:13:dd:f9:bf:da:41:77:
                    5f:ae:32:f2:94:a7:9e:07:57:d9:14:14:df:c8:80:
                    f3:f8:71:f5:eb:73:67:55:5d:89:fe:1d:48:6a:e9:
                    c4:da:9e:bc:be:2b:56:91:43:b4:17:27:2e:53:4f:
                    a4:58:dc:7c:60:b5:43:8c:b9:12:5d:0d:e0:96:aa:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DA:4D:5A:31:6C:C0:90:7B:E5:A2:A8:AC:17:6B:34:6C:7C:EA:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/295e6495-4792-3797-a2bf-51461c90e961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.216.0/24
                  104.200.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:53:68:df:9d:bb:06:69:97:7b:6e:c4:c5:55:66:0a:ed:00:
         ed:5e:b2:ec:33:3e:e4:5c:84:53:8f:ed:bb:47:39:c8:df:4f:
         83:39:95:bb:81:58:f4:e1:06:e6:26:43:bf:dd:f5:79:47:50:
         35:a3:58:18:16:72:2d:9e:3b:99:24:87:e0:5e:6f:8c:d8:d6:
         5e:93:a5:c0:e1:7c:f0:35:13:1a:d8:d2:44:11:ff:32:2c:3e:
         f8:11:a4:47:6e:6a:ad:9c:3c:7f:07:32:9c:75:d6:52:f7:cb:
         e5:6a:7e:79:aa:1b:ce:29:96:3c:95:a9:04:7a:1c:81:d2:db:
         6e:16:40:24:16:0f:b5:cd:35:c8:1f:ed:f3:a8:3f:2a:4b:4a:
         af:24:34:fb:59:ef:50:29:91:70:ef:81:5b:24:96:ba:ea:75:
         c0:b6:91:74:af:1a:f5:1c:7a:59:d6:27:b6:72:59:e1:bb:ca:
         ac:ca:02:34:8a:ca:4a:58:0b:e1:b8:f5:11:7e:09:e1:a9:3c:
         e9:59:12:ad:22:b0:7d:b4:28:f8:fb:68:14:44:05:ae:bc:27:
         0e:85:dc:a7:c7:f3:ac:02:b0:96:9c:4d:9c:18:37:cd:98:b3:
         72:21:a9:5a:8f:65:b9:dc:63:73:e6:05:4a:03:8b:93:af:f2:
         8d:7a:87:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:11:08 2025 by rpki-client