Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/140876a2-38f5-3c76-923f-6349cba8f747.roa
File:                     140876a2-38f5-3c76-923f-6349cba8f747.roa (raw, json)
Hash identifier:          3zB3ySocEXGS3w7/9xg0mNf6E+3qlDDrRVdxV2je9Qk=
Subject key identifier:   30:9D:9F:85:80:C5:71:6F:3D:C1:1E:D7:BD:57:92:C0:CA:E8:33:06
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0FD7BD9D6D264CFB49980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/140876a2-38f5-3c76-923f-6349cba8f747.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     41264
IP address blocks:        104.133.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:fd:7b:d9:d6:d2:64:cf:b4:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=bee1763a-77cf-45df-8f1e-13d790065e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f3:e0:74:46:cc:23:9e:97:7f:1d:54:91:ac:
                    06:46:99:f4:80:1f:89:85:4a:c6:9c:23:98:b5:39:
                    39:a4:15:f2:5c:96:a6:b3:85:bb:f8:bb:fe:64:75:
                    23:3e:df:ef:77:ce:d7:20:19:de:8e:2f:f0:e3:76:
                    b6:c1:da:8a:20:55:26:75:45:85:25:0f:95:8a:31:
                    30:be:a6:1b:a7:9b:37:5c:3c:d5:22:15:6e:a2:a1:
                    35:f7:a6:1c:f5:1b:b1:70:4d:62:4f:7d:93:6d:a3:
                    11:36:a9:92:d4:85:bb:3a:43:04:8c:8f:c0:ab:31:
                    bc:ff:68:f4:29:1d:a0:32:d5:e7:c8:29:c0:aa:56:
                    41:49:03:4c:a4:e2:72:58:30:55:a5:30:92:1b:05:
                    4f:67:89:da:b5:0e:bf:8d:32:f9:bb:c3:3a:49:1d:
                    b6:78:eb:b1:5b:13:88:c1:f3:5d:8b:a9:4c:1a:3a:
                    9e:0f:d8:77:fe:3f:5f:25:fc:da:4b:76:31:ac:e8:
                    aa:70:c6:b0:9a:1d:be:8e:d7:13:89:23:ac:e8:b6:
                    bd:45:27:5c:74:7d:8c:0f:24:bf:de:c0:8e:95:4e:
                    17:75:4b:fd:5d:b8:ef:cd:01:ae:53:2b:14:e4:8c:
                    63:21:97:31:f2:a9:9b:bf:e9:e3:f8:7b:24:fc:0c:
                    91:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9D:9F:85:80:C5:71:6F:3D:C1:1E:D7:BD:57:92:C0:CA:E8:33:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/140876a2-38f5-3c76-923f-6349cba8f747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:0b:d2:25:6a:51:ed:09:d7:66:d3:8c:00:9d:75:ea:64:21:
         dc:e0:77:d7:b4:1e:1e:71:80:00:be:4a:3c:16:b4:52:ab:1e:
         a7:18:27:d2:60:7b:1f:4f:0f:1e:20:8a:41:d5:1a:c3:0f:20:
         6d:e2:a0:25:af:bc:31:48:f7:17:68:0c:58:8d:4e:8f:d8:15:
         81:af:6b:e8:5b:87:52:2f:67:6c:21:c3:0e:d7:7f:6b:9f:d4:
         a1:b6:1e:20:e7:7b:72:10:e4:2f:8e:4c:64:18:07:bb:c4:79:
         92:cc:f7:3a:ac:9f:78:ce:b2:0c:be:58:87:2e:7e:fa:9d:77:
         21:da:1a:17:54:74:1b:a9:7f:3b:32:fd:37:5e:ba:df:df:53:
         96:00:af:b3:c1:8e:17:64:85:14:4c:ee:60:43:cb:8f:79:ce:
         0a:31:ba:ce:f8:e1:40:91:b8:7d:eb:fb:47:db:03:94:9e:9b:
         d5:28:dc:33:cf:5d:a0:e9:63:02:1b:d7:4e:56:3b:78:be:d6:
         dc:9a:71:4f:ee:42:32:60:a4:f4:4b:4d:88:d3:fd:86:a2:6e:
         5d:c6:2c:fe:fd:56:d5:11:5a:95:01:a8:e8:d4:f7:c1:01:92:
         90:d2:4e:75:f8:97:31:52:52:56:d8:98:32:d0:3d:00:fc:1c:
         ee:c5:d8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:37 2025 by rpki-client