Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1596f83a-d934-31e9-b521-764665d48c6e.roa
File:                     1596f83a-d934-31e9-b521-764665d48c6e.roa (raw, json)
Hash identifier:          FSotHs/J9Zz5GiHoWcFljnpY/A9x5rnpQ0Y1V3zq4fo=
Subject key identifier:   63:D7:55:06:21:90:E4:5A:6C:C8:E8:7A:C0:58:78:90:8E:FC:9A:66
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B1F6588072D786F2F55FE350
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1596f83a-d934-31e9-b521-764665d48c6e.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     41264
IP address blocks:        104.132.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:58:80:72:d7:86:f2:f5:5f:e3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=0162d776-7629-495c-ad33-346b573ea212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8f:5f:fa:aa:1c:c7:22:29:8b:18:63:e0:1f:
                    42:07:8c:c7:f6:1e:c3:de:a7:aa:9b:44:e8:cd:5b:
                    40:6c:35:89:c1:70:80:a1:5c:8a:37:e0:5f:b5:fc:
                    7f:04:ce:5a:fa:e5:f9:43:fe:80:df:04:b0:bf:72:
                    5a:6d:99:73:38:1b:a9:ab:1e:c7:18:a7:8b:10:26:
                    e1:75:eb:a8:d4:7f:b6:6e:fe:a2:83:75:71:4f:20:
                    fb:05:de:03:c4:cf:36:c4:44:ed:72:58:68:94:41:
                    c9:64:63:9c:3a:bc:66:dc:1e:c7:4c:87:1d:99:1e:
                    60:a8:73:c6:9c:9c:30:f9:78:5c:0c:40:cf:c2:85:
                    76:b3:b9:8d:22:c3:b6:cf:d9:7b:25:a0:cf:f8:41:
                    cd:6b:70:99:28:cc:39:2b:67:4b:4b:f5:cb:9f:2e:
                    c5:e2:95:16:dd:d4:25:be:8a:95:5b:86:fe:00:f1:
                    41:e0:00:89:79:de:86:21:0c:29:cc:63:49:78:6a:
                    e0:5c:66:33:a3:b8:09:ac:ab:a5:52:5a:b0:49:73:
                    19:9f:0f:9a:c3:a7:fd:b2:1d:fc:42:6a:d0:4a:0d:
                    ab:ca:cc:83:b6:18:62:ca:d0:6d:d9:b9:bc:1a:67:
                    ed:a8:f2:40:44:c9:cb:b8:15:08:9c:f1:f0:23:f4:
                    0a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D7:55:06:21:90:E4:5A:6C:C8:E8:7A:C0:58:78:90:8E:FC:9A:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1596f83a-d934-31e9-b521-764665d48c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:6c:4c:f1:e0:a2:aa:74:32:9b:1d:ea:b1:7f:6b:fa:b6:ed:
         0f:1f:ef:08:e8:ac:df:47:4a:0f:45:cc:77:37:90:0f:67:c6:
         42:d7:4f:cc:d1:8c:6d:96:2f:47:6c:77:4f:35:b9:d0:02:1a:
         9e:26:29:85:b1:9b:7f:06:eb:22:9a:96:aa:bf:80:ba:4d:70:
         66:e2:90:29:57:70:8b:21:1f:74:6b:9b:90:ea:b8:03:ac:1d:
         59:d5:eb:b0:cf:0b:ba:a1:ab:71:43:56:c9:cc:66:be:33:89:
         48:be:dd:06:0f:61:a1:e9:73:88:2e:4d:8f:62:29:c0:04:2d:
         41:3c:0f:86:19:e9:64:a4:9d:cd:4f:86:ad:1e:cf:a1:5f:4b:
         4c:2c:98:47:1e:3c:3a:3d:d3:d9:18:da:64:79:2f:d7:6e:3b:
         31:10:80:f1:87:54:2f:48:56:9c:c6:cf:51:33:87:e8:b3:ef:
         49:9d:e7:95:95:b0:65:9c:9c:80:ef:12:88:08:d5:4f:e2:bb:
         fe:c5:5b:f8:2a:2b:e5:b0:0d:48:88:4f:9e:72:85:57:8d:2e:
         3b:ad:72:79:b9:5f:0a:50:85:0e:ff:b8:e8:06:4b:cc:0f:cd:
         41:27:a3:b7:66:6d:a2:d4:50:a4:31:30:c2:05:f6:d7:bf:85:
         ab:ee:4b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:23 2025 by rpki-client