Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0d33388-0abe-3da8-882b-60603c2cc44d.roa
File:                     e0d33388-0abe-3da8-882b-60603c2cc44d.roa (raw, json)
Hash identifier:          TbHozGLcB7XH/JOYsSQXEcHz/QeuAzeRd2Atqy8gDJ8=
Subject key identifier:   98:8E:07:FA:37:6A:E4:9E:EC:CD:80:DD:1C:1E:5C:87:F9:AB:45:75
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F439B797FAE99D40D1700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0d33388-0abe-3da8-882b-60603c2cc44d.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:43:9b:79:7f:ae:99:d4:0d:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=cbe6ead0-9245-4b44-97a2-99240a9d9453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:af:bb:a9:a8:4c:11:23:a6:04:72:e6:f8:27:
                    dc:fd:e0:be:73:89:26:9a:eb:4a:31:84:ab:30:f3:
                    1b:47:5a:25:91:c4:b3:4b:90:5b:dd:19:82:9a:17:
                    ee:b9:49:ea:06:4c:60:d6:e6:e6:bf:c8:95:10:e5:
                    ac:83:c6:56:15:03:35:09:b2:5b:b9:21:fa:39:df:
                    01:4a:7a:16:5e:e7:d4:a8:ce:de:28:a0:97:93:4c:
                    74:8a:a7:63:38:4a:30:b2:d2:66:9e:b3:aa:00:da:
                    b3:2d:64:6d:fd:1c:94:55:fd:6a:99:88:35:36:35:
                    62:fd:c1:44:48:fc:de:b7:1e:cb:36:d7:ac:e6:3f:
                    9c:37:10:8b:a8:38:12:56:20:32:44:37:37:30:e0:
                    ac:20:ad:93:f4:a5:e1:2c:b1:13:f2:42:ea:48:04:
                    21:87:da:2e:91:43:56:a6:fb:34:1a:0b:b1:09:5f:
                    8f:6a:0e:bb:81:82:1a:26:f3:bb:a9:f6:df:20:72:
                    33:f7:a1:21:3a:83:82:58:c2:f4:32:f4:b6:8d:1d:
                    11:d9:81:6b:3e:42:ad:1e:a1:11:35:ea:b0:db:b9:
                    74:59:fc:85:8a:89:af:71:3d:26:34:58:b5:a5:dd:
                    91:a5:d2:84:a6:35:77:bc:c3:c7:40:31:7a:0a:00:
                    52:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8E:07:FA:37:6A:E4:9E:EC:CD:80:DD:1C:1E:5C:87:F9:AB:45:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0d33388-0abe-3da8-882b-60603c2cc44d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:22:3c:a7:56:53:5c:d9:9f:52:e7:1f:dd:e7:35:24:da:0d:
         a3:3d:62:5c:6b:64:ab:b6:ef:48:0a:89:e7:b1:41:13:4c:5c:
         f1:a0:58:c8:1f:f8:b0:c1:fc:3e:94:3a:77:7d:b6:23:d2:19:
         43:be:7e:70:cf:0c:af:7a:68:37:b9:95:92:1b:cc:66:98:cd:
         88:5e:61:2b:4d:40:3c:b3:cb:09:9d:d9:e2:cd:33:21:9f:d1:
         bc:ad:22:9d:53:9d:22:e2:a8:18:c0:a6:d2:86:2a:19:7a:a9:
         dc:52:64:8d:b4:fd:c9:fc:df:2c:12:0c:f0:d9:29:ed:45:74:
         88:7c:7c:9e:f7:73:03:18:e3:2f:3a:2f:5a:10:0b:a0:44:36:
         6f:27:96:de:29:00:ef:36:0f:ba:2c:a9:3d:02:46:38:17:e2:
         43:cf:65:bc:29:f3:db:3e:76:4d:eb:4f:d6:29:23:4a:f1:75:
         30:00:c1:5f:73:99:d3:31:a6:7e:ac:51:80:0d:51:d3:87:64:
         2d:4a:58:f5:85:42:d5:8f:4f:47:8b:11:f6:c3:83:1c:e2:5d:
         6b:c9:c8:b0:98:f4:e9:9e:fd:6b:02:82:3d:a2:1a:a7:0e:a3:
         1e:c6:f9:10:ff:3e:93:ab:96:60:dc:c4:2d:53:10:30:ea:42:
         e5:a3:f7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:48:50 2025 by rpki-client