Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/80338f3c-5bf6-3690-92b3-407b7ed7ee22.roa
File:                     80338f3c-5bf6-3690-92b3-407b7ed7ee22.roa (raw, json)
Hash identifier:          +aMCtRFbbvrI+ELdt0XziIM3+UGx4vCcVUmddaFpavg=
Subject key identifier:   47:EE:30:B3:63:86:8B:24:AF:37:47:36:A1:79:35:EE:BF:71:7C:9F
Certificate issuer:       /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial:       010D0C9F432858498769AF50646846049D678180
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/80338f3c-5bf6-3690-92b3-407b7ed7ee22.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        104.200.216.0/24 maxlen: 24
                          104.200.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:af:50:64:68:46:04:9d:67:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=f3a0804a-24d5-482e-b14e-00b5d270ed5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:25:5a:6d:fd:2a:b5:52:77:bd:05:80:3f:41:
                    d8:16:69:1a:1e:65:f0:09:be:0e:75:99:52:7c:1f:
                    36:2d:c9:84:97:d2:ca:01:61:7f:c2:11:17:f1:c2:
                    b4:62:38:5f:13:42:50:56:6b:b5:2c:34:ea:a4:3f:
                    90:c0:6c:5f:0d:17:08:34:aa:ce:b0:e1:c3:29:ad:
                    96:95:1e:49:b0:c4:c8:ef:cb:cd:ed:37:82:d9:0a:
                    30:38:95:59:d9:fc:c0:b7:af:57:80:0f:96:62:9b:
                    2f:a7:38:02:2d:1e:56:dc:af:16:44:1b:87:81:78:
                    22:ad:e1:15:5c:db:7e:33:2c:3e:e1:e9:76:5b:f8:
                    ac:c6:d4:23:05:79:e8:89:fa:a7:b2:d0:4c:08:14:
                    9b:41:14:37:73:f3:47:1b:dc:7c:37:24:4b:ec:d2:
                    13:1f:93:c3:48:db:9a:7b:80:8f:52:47:da:9d:50:
                    0a:4d:4d:a4:91:a4:76:25:a4:7a:65:ad:c1:b6:1e:
                    58:ab:c9:50:08:fa:c4:6a:3c:23:2b:89:37:3d:30:
                    85:97:a6:4d:44:00:bd:4b:dd:e7:f7:be:52:3a:b2:
                    39:59:19:6a:35:d0:25:85:a3:d2:fb:26:8f:b0:96:
                    df:fe:78:00:04:96:d2:91:96:88:64:52:de:b2:bd:
                    2a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EE:30:B3:63:86:8B:24:AF:37:47:36:A1:79:35:EE:BF:71:7C:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/80338f3c-5bf6-3690-92b3-407b7ed7ee22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.216.0/24
                  104.200.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f2:07:de:05:16:30:14:e0:94:13:ed:92:0f:c8:9b:c1:7c:
         cc:a1:fb:61:b9:cd:90:a7:32:5d:f7:bf:0a:54:72:dd:e9:7a:
         d5:d6:41:f4:56:b7:82:4e:1d:17:2d:df:55:86:21:33:5a:17:
         ff:66:75:a5:7e:1d:37:d1:fc:21:47:11:e4:c0:e3:e1:d4:6d:
         5a:2a:94:f7:87:a7:a8:6c:92:27:fb:c7:72:fc:23:15:93:5c:
         94:68:c5:b0:d8:bf:36:a3:af:3f:0e:b2:c0:81:fa:8f:2e:92:
         36:8b:b0:15:da:eb:33:91:00:6b:59:4c:c3:8c:60:e6:02:63:
         0b:fc:1a:41:bf:56:90:63:f6:36:28:e1:7f:2f:31:09:ce:a4:
         74:00:3f:67:f6:38:77:17:26:8d:30:31:7b:67:ad:2e:84:86:
         77:42:51:10:e6:05:fd:24:03:0c:86:ce:92:4a:6d:fa:30:89:
         fb:fa:be:9e:c9:f9:76:87:eb:c2:83:8c:0c:e2:d7:76:f3:6a:
         f0:1b:72:c2:c4:11:3a:46:c1:9a:fc:85:fa:08:20:2e:d1:c1:
         21:6c:40:e4:18:5a:5b:5c:3b:e1:74:d8:eb:9b:50:00:44:ec:
         8c:49:3d:a6:70:81:d1:43:d4:a6:9a:c3:be:a9:3e:6e:9e:f3:
         44:a1:47:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:08:43 2025 by rpki-client