Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba5383e6-ea95-3586-ab25-2ba523d21d63.roa
File:                     ba5383e6-ea95-3586-ab25-2ba523d21d63.roa (raw, json)
Hash identifier:          CMTMT0YhD2dBqTMNTlrlNU+lzeROcEUBwpnDFTa0FIY=
Subject key identifier:   B0:61:B8:F5:D3:41:8F:E4:5F:92:ED:A3:8F:D1:6C:7A:2C:48:A1:B4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F55B43E38E51A00B28D40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba5383e6-ea95-3586-ab25-2ba523d21d63.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:55:b4:3e:38:e5:1a:00:b2:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=8a883f88-1566-490e-abf0-fdfbfe1b471e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d2:02:b5:c5:08:16:56:5d:3f:77:1c:b3:5f:
                    d4:62:59:af:a6:0e:29:a5:ff:4d:5b:15:44:78:67:
                    dc:02:1b:d2:e5:05:68:63:30:0c:98:83:bf:92:00:
                    d7:26:86:9a:47:88:ff:b3:dd:75:6d:23:e8:ad:e5:
                    4f:9b:c5:a3:89:6f:79:d8:e1:db:b2:5b:3f:d4:c0:
                    7f:32:71:65:7a:f9:9d:dd:b9:ca:c4:b4:39:18:7a:
                    0a:4a:e8:99:97:20:f5:8e:86:83:e9:59:93:d3:c7:
                    82:5f:06:d3:73:f5:03:7a:7f:06:f7:b4:b9:da:66:
                    4e:42:d0:eb:43:dc:ba:cf:d4:42:d1:6a:95:45:27:
                    8e:85:25:1e:f9:99:ea:ef:5b:bf:18:03:e9:68:98:
                    5a:92:1c:43:c2:11:16:e1:d6:a4:f8:54:e7:5b:5c:
                    5e:73:d7:6c:59:bd:eb:8a:93:66:15:b2:14:a2:7a:
                    32:4e:08:7b:f8:03:81:4a:6c:d1:69:f5:41:e9:34:
                    3c:99:81:31:62:d9:15:90:3e:b9:fb:5d:0f:c6:73:
                    d7:1a:9f:eb:c1:a1:37:46:42:f8:b0:3f:2d:73:42:
                    08:75:ef:18:ca:68:93:72:19:39:1e:ac:d1:d5:36:
                    3c:c2:d3:3b:80:de:ab:75:53:74:43:81:01:e4:09:
                    79:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:61:B8:F5:D3:41:8F:E4:5F:92:ED:A3:8F:D1:6C:7A:2C:48:A1:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba5383e6-ea95-3586-ab25-2ba523d21d63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:f2:cc:ba:19:fd:3f:51:d9:f4:aa:f2:60:ad:cd:0b:7a:e6:
         48:da:63:b2:49:f2:a8:ae:5a:38:80:12:1b:2a:6a:9f:0f:6c:
         47:7d:2c:09:63:12:b4:7c:66:33:1a:95:f6:b5:ea:62:e7:92:
         8c:b1:dc:fc:ca:22:90:e3:a4:6d:6a:9e:0a:15:b9:44:74:14:
         18:e2:62:d5:04:cc:66:78:33:7c:da:a3:79:27:9a:7a:f7:d9:
         56:08:62:12:b4:fe:38:02:2e:39:76:25:0a:79:f9:0d:4b:29:
         60:99:39:32:a6:01:f0:ef:41:63:18:77:97:74:c4:69:f3:71:
         2c:5e:2a:4d:a4:d9:da:3c:62:fa:dd:ec:9a:67:1d:3e:d7:8e:
         a1:da:8a:d4:59:39:26:18:89:6c:f1:8b:e4:53:8a:1a:9d:b4:
         da:5a:0f:fd:68:da:93:9a:7b:9f:c1:7b:7d:67:56:dd:9f:2d:
         45:9e:30:9a:50:6f:72:fc:f3:c3:61:a9:cc:2a:1a:15:ac:ec:
         b7:3c:c9:33:db:97:44:a0:08:75:05:b3:b3:2c:64:af:51:a4:
         83:e7:0f:30:21:1f:63:9a:90:6e:61:22:42:7d:47:d3:cd:45:
         c0:05:98:5f:08:52:cd:69:f2:85:74:92:e6:fa:20:99:0f:b9:
         0d:ea:82:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 20:05:40 2025 by rpki-client