Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ee78d578-cb00-360f-80f3-173b2465e141.roa
File:                     ee78d578-cb00-360f-80f3-173b2465e141.roa (raw, json)
Hash identifier:          y0W4koS01ERiX+Equf1Bd/27FhHDWDdWlDd1rXZQPQI=
Subject key identifier:   26:F2:9C:09:4E:26:2B:CB:15:9D:0B:8F:6C:22:EC:96:78:EC:C0:27
Certificate issuer:       /CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
Certificate serial:       010D0C9F432858498E647D5DD570FFB90D20F4C8
Authority key identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ee78d578-cb00-360f-80f3-173b2465e141.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        104.249.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:7d:5d:d5:70:ff:b9:0d:20:f4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=b59313f2-9d1c-42c1-9d75-d24977854f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b9:31:da:2d:ca:a0:78:eb:ba:f9:35:02:da:
                    39:0b:bd:c4:aa:14:e3:2c:1c:12:2d:e1:e4:8d:87:
                    e2:79:ab:c9:70:78:7d:cb:b6:a0:3b:b1:f1:c8:ff:
                    ca:a3:10:a1:af:cf:c1:01:bc:a4:8d:a1:9f:17:44:
                    78:81:a0:bf:5e:cb:e4:74:30:ae:9b:38:62:1a:26:
                    79:0d:c5:8f:d3:39:0d:74:da:05:1b:b9:9b:27:20:
                    01:e1:e2:33:97:57:99:a6:a6:7f:53:23:6a:25:f2:
                    71:da:8e:cc:7c:5a:3c:5d:ad:f0:a5:7d:77:83:c3:
                    96:cc:83:df:c9:81:e3:8c:50:34:58:65:f9:da:c8:
                    f3:45:f1:c6:40:eb:7f:53:74:84:05:02:fd:86:8c:
                    14:86:cf:24:e5:1b:da:23:8a:0b:b7:72:db:9b:05:
                    c2:1e:4a:7f:6d:15:0b:0a:eb:76:d5:28:b9:d2:f9:
                    06:67:c8:09:5f:9f:13:ba:23:35:30:81:43:db:1e:
                    b9:41:1b:ba:b0:35:1c:d1:b4:58:6e:08:c7:f2:60:
                    96:98:aa:68:ad:45:2b:5e:53:84:1b:ab:2f:8d:4c:
                    cb:06:49:f2:70:c3:fe:6d:60:34:1c:76:b3:eb:f9:
                    81:5e:6a:6d:c4:2e:82:1e:bf:ef:0f:39:cd:a9:51:
                    17:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F2:9C:09:4E:26:2B:CB:15:9D:0B:8F:6C:22:EC:96:78:EC:C0:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ee78d578-cb00-360f-80f3-173b2465e141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl

            X509v3 Authority Key Identifier:
                keyid:19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.249.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:10:32:16:a1:18:c8:78:51:e0:77:be:95:33:57:dc:f8:c7:
         9d:ee:88:4f:e1:04:8c:2a:a7:99:23:db:d7:89:3b:7c:cb:6a:
         73:64:6c:17:17:1e:bf:ba:0b:ec:92:6a:f2:5d:ad:01:b3:5d:
         b7:35:cd:50:28:f2:5c:51:da:05:47:28:89:f1:e7:18:c5:45:
         75:55:8e:e9:05:11:0f:25:c2:34:b1:50:af:bc:dd:87:38:cf:
         6c:c8:85:f8:19:70:7e:4a:da:5b:b9:6a:91:b9:9e:3d:0a:c3:
         cc:5e:be:ec:ce:2c:83:18:86:1f:13:03:e9:32:f8:37:7b:9f:
         fa:67:05:2e:8d:0e:c4:29:51:7d:79:09:c6:40:8f:4b:42:0a:
         e0:8a:8d:34:f3:82:a0:22:95:a1:15:0f:89:ef:f2:b6:5a:92:
         f8:a4:45:e9:69:f9:b2:3d:5f:35:75:cf:6d:8c:ab:8d:09:e4:
         1b:21:b0:86:50:6e:1d:20:e3:d7:cd:88:f1:b0:7e:d6:7f:05:
         35:c6:05:29:34:36:74:e3:2c:a9:d3:c7:ba:c3:a4:ee:c9:fa:
         fe:fc:69:e6:6f:a4:be:4d:b3:b2:82:e8:1b:75:bd:cc:4e:fb:
         92:44:56:df:ed:fc:79:b7:66:5d:35:cd:28:03:03:5b:af:27:
         12:22:9b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:30:37 2025 by rpki-client