Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/529312e5-1edf-3c98-ace4-e52543a5adf3.roa
File:                     529312e5-1edf-3c98-ace4-e52543a5adf3.roa (raw, json)
Hash identifier:          AqamOj9lFd4BgA3Bq/CqPieo5/QVkHXrH8p4adf1t+g=
Subject key identifier:   6B:4C:84:D3:18:C6:2F:18:55:FD:EB:CE:F3:0D:9B:27:1D:A6:13:F8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849BDDA341686A46479BD9774E0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/529312e5-1edf-3c98-ace4-e52543a5adf3.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     41264
IP address blocks:        104.132.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:34:16:86:a4:64:79:bd:97:74:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=e6d10c4f-6874-4e9b-8d31-3eba527f7d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1b:c5:93:04:60:8d:76:f5:10:f1:10:37:c1:
                    0c:47:79:e6:4f:17:62:c3:f2:a5:91:a3:66:ad:79:
                    7a:06:42:0e:f8:97:75:7d:f2:35:25:c2:e8:6b:8d:
                    50:5c:b3:be:cc:f7:a0:ce:ec:a0:1b:1a:0e:53:4d:
                    58:0e:4b:f5:38:a3:38:ef:f7:ac:3d:9d:68:6c:0b:
                    28:ff:42:8a:fe:52:e8:b6:cd:ce:d8:82:70:3d:47:
                    c1:dd:cd:7a:52:a8:d8:60:d8:51:fa:bb:4a:df:9c:
                    78:df:65:e8:04:ea:f9:0f:76:16:74:c5:6d:2b:51:
                    72:51:31:33:85:92:e1:e4:77:91:b1:51:8d:07:80:
                    0d:a8:cb:41:1f:ab:5b:c4:71:81:eb:8b:8e:7b:e7:
                    ac:0c:a8:45:0b:ba:2e:86:61:e7:48:a4:be:5d:ce:
                    8d:45:99:7b:be:16:be:67:a6:c2:35:cf:89:1f:42:
                    01:b2:81:3a:0a:04:5e:9c:20:cf:87:42:56:6b:11:
                    03:08:6e:44:69:cd:fb:dd:e8:d2:be:e9:29:9a:58:
                    16:c3:87:4d:fa:b9:d0:be:49:59:59:a1:53:ac:32:
                    66:c8:01:a1:ea:64:f2:e4:85:b5:f5:b9:c7:c0:4e:
                    f6:0f:e8:39:d5:83:00:9a:b0:95:8d:be:79:bd:4a:
                    82:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4C:84:D3:18:C6:2F:18:55:FD:EB:CE:F3:0D:9B:27:1D:A6:13:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/529312e5-1edf-3c98-ace4-e52543a5adf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:08:81:ef:29:22:46:b0:12:35:19:f5:9b:db:ea:d6:d6:a5:
         6c:d3:75:66:f8:0e:75:22:f5:61:78:cc:e4:47:47:0d:15:85:
         37:15:b7:db:fd:de:e2:56:dd:fd:19:52:78:d1:9a:77:35:9e:
         2c:3c:52:2c:1e:34:1b:b5:82:4d:22:ac:a5:51:ae:0b:f4:d5:
         ca:a6:da:76:1e:01:07:2c:f4:3c:07:21:30:17:9a:24:cf:fb:
         07:46:ce:39:9a:7c:a0:72:b7:ce:d1:b8:6d:47:d1:2f:da:f7:
         b7:0e:72:a4:59:c1:fb:10:72:59:ea:24:90:a6:e8:94:c0:66:
         e2:49:84:f6:59:25:10:72:d8:22:66:63:29:f2:ea:74:37:04:
         b2:75:66:8b:e6:6f:50:fe:4a:f1:bc:96:b8:e2:13:f8:06:da:
         56:23:8c:2a:fb:11:14:c7:a9:5b:cb:07:2f:b0:b7:89:85:6b:
         2e:30:4a:61:1a:a0:48:bd:a1:15:63:f3:4c:03:fd:5b:ba:9d:
         20:62:60:b8:f0:c8:fe:24:9d:5d:a3:d7:61:78:cc:a9:9d:0a:
         a0:a7:26:0a:aa:f1:95:ee:85:ae:45:3c:64:29:35:1f:52:0f:
         c6:52:2f:db:15:68:4d:77:63:0a:e0:ad:f7:ee:4a:24:2c:74:
         93:46:bd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:56:46 2025 by rpki-client