Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/513dd637-c4d3-3c86-be2c-f75d0cc1dbdc.roa
File:                     513dd637-c4d3-3c86-be2c-f75d0cc1dbdc.roa (raw, json)
Hash identifier:          tj/nzBpmftmQdvp6Z/eT8vZnJx+/NWHvRqHu4iTzMdg=
Subject key identifier:   B1:AE:15:A6:4E:93:43:C4:5E:9C:91:8A:AA:44:C2:C9:32:D1:DF:6F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993FA085D0FD3D886D8D55300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/513dd637-c4d3-3c86-be2c-f75d0cc1dbdc.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     41264
IP address blocks:        104.133.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:fa:08:5d:0f:d3:d8:86:d8:d5:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=e2a172e7-c496-47b7-9519-faadabdb0cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:fa:6a:fc:7e:33:1b:f0:db:69:7a:88:83:
                    26:05:1f:9b:b7:78:a0:4c:9c:71:94:8d:2e:d5:9e:
                    a5:5b:4f:5b:d0:88:99:19:39:33:a5:b4:55:37:af:
                    d7:f1:4d:91:76:27:2b:fc:d8:7f:e7:a5:f2:ac:98:
                    f4:a6:98:21:63:1d:c3:de:33:1e:2c:6b:86:d0:7b:
                    08:e3:ff:db:98:9d:32:26:e3:9a:08:42:06:17:e9:
                    d1:6e:9d:17:ec:9c:4f:02:f4:a8:77:f9:e6:5b:20:
                    0c:d3:28:fc:40:ae:71:6f:b7:e0:21:57:e3:1e:66:
                    79:40:81:d1:31:d8:be:d3:ed:f8:1e:d6:60:bd:4c:
                    03:e5:f4:40:42:1a:13:c1:d4:63:df:c4:fa:73:52:
                    be:ae:1b:52:d9:68:8c:58:1e:f7:e2:e1:a4:68:0a:
                    a8:23:24:e6:a6:f2:7b:87:00:56:c3:ba:a0:29:ac:
                    13:69:af:27:69:3d:3e:3c:9d:8b:12:f1:fe:eb:65:
                    80:9c:71:8b:19:8d:52:e6:e6:b9:23:9c:be:68:6e:
                    7b:3d:26:6b:da:18:49:be:d8:3a:f8:32:4b:df:58:
                    0c:69:39:c6:ef:a6:77:8e:ae:59:18:34:03:5b:e4:
                    bc:27:bf:e3:67:d1:3d:4b:d9:f2:aa:70:4a:ca:e7:
                    66:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AE:15:A6:4E:93:43:C4:5E:9C:91:8A:AA:44:C2:C9:32:D1:DF:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/513dd637-c4d3-3c86-be2c-f75d0cc1dbdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c7:47:98:70:41:99:14:02:ad:d0:b9:70:94:81:4c:b4:c5:
         18:c7:74:ea:64:6a:33:ef:13:ea:11:ff:ea:af:fc:ca:a0:0e:
         89:bd:c2:34:42:f7:69:74:29:a1:c4:cf:5b:c9:39:ca:48:28:
         0f:94:e1:12:4e:72:4b:de:ff:be:3c:8c:f2:5d:37:99:eb:8e:
         ee:b2:97:a7:83:f8:a8:0b:9e:ec:c6:59:45:84:db:46:4b:fb:
         36:14:2c:a2:b9:5c:73:ae:99:d8:b4:f5:10:03:18:09:3a:89:
         63:df:69:b7:9c:20:06:82:e6:76:f6:68:8f:d5:16:47:2c:8b:
         75:86:37:8d:a5:e6:72:49:35:69:00:53:1d:da:39:e5:6f:4d:
         44:4c:18:5f:25:a9:22:09:47:19:4e:bb:3b:06:68:82:04:9e:
         23:0b:03:02:5d:dc:e7:75:3b:02:cf:2f:73:89:47:00:25:9a:
         a4:88:9b:16:cd:0f:41:2f:03:08:9f:13:6c:5b:1a:84:01:c9:
         4c:c7:4e:06:68:f9:33:67:ac:1d:1b:00:e9:c4:ee:1b:a7:47:
         6c:f0:d3:45:5f:a5:30:c4:13:fc:ee:9c:f7:6b:f5:10:fa:02:
         ae:be:46:23:f9:4f:88:a7:01:36:32:a1:7f:5e:05:99:3d:6d:
         bf:3c:58:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:29:45 2025 by rpki-client