Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b666c2f2-ac32-3f55-83e0-109befd67db5.roa
File:                     b666c2f2-ac32-3f55-83e0-109befd67db5.roa (raw, json)
Hash identifier:          FdujxevyNHrQ9lfF5+hHe+r8sSugFy+0H7c+WX4e3rg=
Subject key identifier:   61:65:11:FA:6B:76:12:FF:73:BA:BD:DB:A0:17:FA:D9:ED:B8:6F:B8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F4826CC67D3F93EFF8380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b666c2f2-ac32-3f55-83e0-109befd67db5.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:48:26:cc:67:d3:f9:3e:ff:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=6c250955-1f6e-42db-8969-b67c01735193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:fc:13:52:e3:57:bd:ef:20:7d:64:76:52:
                    53:57:5e:e8:f8:8a:b1:9c:7c:89:3c:34:59:a3:f0:
                    28:26:ab:b3:5f:80:4c:1b:aa:5f:fe:cf:7a:f4:ee:
                    6a:d4:2d:43:59:69:0c:92:88:2d:c5:d8:82:93:4c:
                    b6:92:ac:74:e1:3f:cf:bb:74:13:e7:dd:7c:64:cb:
                    aa:37:40:33:07:07:ae:78:0d:ed:34:12:88:ab:67:
                    40:82:54:5a:c3:1b:f0:11:54:6e:69:fe:5f:f6:33:
                    bf:b7:23:50:d8:3e:9a:55:2c:eb:11:df:64:d3:b9:
                    8c:5b:ec:2b:0d:4d:36:b2:92:41:1a:7a:00:8e:e4:
                    70:e5:c2:cd:63:e4:5c:75:38:e1:15:0f:1a:89:fa:
                    a6:d9:38:da:2e:78:37:06:ce:c1:82:ce:08:6c:78:
                    5b:8c:ab:27:cc:0a:98:d5:3a:e9:95:5d:94:67:5d:
                    41:d6:2e:07:81:8c:9d:5b:0d:0e:d0:3b:a9:c7:d4:
                    f6:9e:f4:79:96:49:43:1a:e8:fd:e9:70:7b:18:d4:
                    76:c7:6c:27:22:a8:66:de:4c:b0:2f:46:9d:ec:97:
                    64:46:a4:ca:16:87:31:44:e0:ef:3d:7f:5d:6c:53:
                    52:0a:88:ba:95:bd:c8:a5:d3:3b:24:67:1b:85:21:
                    1f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:65:11:FA:6B:76:12:FF:73:BA:BD:DB:A0:17:FA:D9:ED:B8:6F:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b666c2f2-ac32-3f55-83e0-109befd67db5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ad:bc:f8:ec:27:f2:ed:5e:5a:ed:20:6c:6f:87:f2:9f:38:
         01:a2:2d:2b:ac:a9:cc:33:df:64:f0:7e:5d:34:7c:78:0b:73:
         03:58:95:52:4a:e4:42:96:c1:6e:85:35:b4:56:74:20:0f:06:
         55:f3:54:c9:f5:a8:fb:4e:a6:e7:0a:70:4d:a1:40:1e:67:39:
         11:33:db:ae:33:55:63:60:b9:15:15:06:27:6e:31:8e:b7:8d:
         6f:4b:99:72:21:5f:7c:2c:29:35:8c:06:1a:4c:ee:59:b4:e3:
         b8:40:e5:8b:d1:ef:59:1b:23:01:9e:70:0a:a6:79:c8:35:7e:
         d8:6a:a7:3e:9f:79:6c:3c:44:b6:ca:1c:88:95:ea:2e:14:88:
         40:ce:53:02:f7:2c:fa:01:7a:d6:3c:d4:10:42:0c:59:69:af:
         4e:06:da:3b:ab:90:cc:ae:ec:41:41:f7:d6:79:3e:a8:2f:53:
         87:9f:9c:3a:94:87:41:0e:e2:94:8d:13:eb:26:87:7b:59:5b:
         41:52:b4:bd:9f:81:72:9c:32:0b:02:5b:5a:79:4b:18:a8:1c:
         3a:14:2a:2d:3a:f0:30:df:e1:48:5c:3d:30:65:ab:ba:9a:33:
         a2:08:e6:52:a0:87:57:96:c7:67:74:d1:cc:54:b9:a6:97:d2:
         6c:cd:cc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:52:02 2025 by rpki-client