Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/971c0aba-2882-33af-b5c2-5d49fdd45247.roa
File:                     971c0aba-2882-33af-b5c2-5d49fdd45247.roa (raw, json)
Hash identifier:          lnLKIGaKVTgj7Ip/eg9qSK4tuNmKug4bpgPcpl8hLt0=
Subject key identifier:   60:50:E6:95:01:D4:0F:54:07:D0:C0:03:F5:34:18:87:48:34:B1:07
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9F174907D3F92515FECE8
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/971c0aba-2882-33af-b5c2-5d49fdd45247.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     41264
IP address blocks:        104.133.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:f1:74:90:7d:3f:92:51:5f:ec:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=10bb9419-3d81-43a2-b985-c6abff3e662d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ee:74:f8:a8:e4:cd:0d:b1:d7:5b:57:90:d3:
                    8a:0e:99:6c:3d:13:8c:02:e2:4a:c2:ab:49:49:ee:
                    02:7b:4a:fa:66:ed:aa:d7:23:d6:63:18:b5:30:b3:
                    64:ee:81:88:31:4c:71:5c:22:97:ba:ad:02:6f:95:
                    ee:7a:c3:e7:16:fc:02:a1:68:be:e7:d0:c1:33:35:
                    95:e8:7a:7e:7c:e1:1b:a6:e6:1e:f3:e2:3d:4e:f7:
                    a9:a2:72:20:4c:ab:b3:a6:d1:dd:99:b6:32:81:d7:
                    c8:23:4f:c5:21:0d:ab:9f:e2:80:6a:83:56:fe:a8:
                    49:ab:6b:0f:42:2d:72:ae:51:1c:24:fa:8d:15:d2:
                    b5:a9:60:ef:bd:e8:16:7f:19:f4:4b:f4:90:a8:4c:
                    02:a0:f9:98:e3:ea:9b:f2:18:46:d8:77:a5:8a:a6:
                    90:90:4c:e1:cc:63:98:34:c2:86:ca:ae:5e:10:0d:
                    82:0c:a2:0e:95:5d:e1:7a:c3:1c:91:c6:7c:dd:ac:
                    e7:da:10:f4:51:4e:f0:78:97:55:3d:7f:84:99:74:
                    3d:0c:90:31:9c:2a:56:4a:89:b6:e5:c0:29:34:3d:
                    c0:18:c1:e1:9c:c0:ab:da:4e:f2:96:fe:2f:bf:8e:
                    55:cd:a1:26:a4:cb:f2:7b:78:d2:44:60:b4:72:55:
                    ba:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:50:E6:95:01:D4:0F:54:07:D0:C0:03:F5:34:18:87:48:34:B1:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/971c0aba-2882-33af-b5c2-5d49fdd45247.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:64:7b:bd:09:c5:d3:5d:dc:81:62:cb:4e:95:90:af:df:4d:
         98:68:62:75:fa:59:e5:b2:ab:01:48:60:31:67:41:a2:61:83:
         1d:52:f5:91:91:0c:d2:34:4a:e3:ac:57:28:0d:f3:96:28:50:
         a9:38:dc:5b:93:3b:77:28:4b:55:47:e4:86:46:30:ec:b4:bb:
         55:e3:f7:5c:4c:77:97:33:b7:14:52:c3:1f:ac:3f:04:1d:42:
         33:7a:de:b7:33:e2:e2:5e:b8:24:9b:e1:53:e4:d0:87:a3:43:
         0c:3d:d7:9f:59:ce:27:ac:d6:9f:ba:01:41:40:e6:7b:94:6a:
         95:77:72:83:86:72:90:9f:f4:cb:ff:f1:77:83:dc:bd:92:88:
         d1:ef:32:01:dd:13:61:b3:82:ee:69:55:8d:e1:7a:25:93:ed:
         42:5c:97:2b:23:12:88:f9:1d:33:f8:ce:08:a7:e5:d2:33:02:
         20:28:0f:e3:3a:aa:55:f2:01:0b:00:a7:b8:dc:4c:7c:0c:1f:
         9a:68:6f:8f:f9:54:b3:f9:3d:86:78:bb:1e:99:c4:98:f6:05:
         ff:42:c5:de:b4:c7:ec:8d:76:d1:33:c9:85:df:0f:4f:bd:01:
         f8:75:b4:99:72:b0:55:88:43:58:31:0b:96:3b:e4:68:43:ea:
         e7:d8:6b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 00:16:45 2025 by rpki-client