Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1c05a3d7-b19d-32ff-b490-0015a96a94ed.roa
File:                     1c05a3d7-b19d-32ff-b490-0015a96a94ed.roa (raw, json)
Hash identifier:          WNvFxK3XRhppafBgff92WCPvJNJU7KCV8DWvqOGULaA=
Subject key identifier:   2A:9B:BF:ED:7C:78:D1:C2:89:12:4E:D3:A5:48:B9:C7:4A:7E:5D:FA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0E2769EA04B2414476980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1c05a3d7-b19d-32ff-b490-0015a96a94ed.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     41264
IP address blocks:        104.133.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:e2:76:9e:a0:4b:24:14:47:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=53ad94fc-37f3-4421-ac0d-4195fbaac8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2a:ba:61:6e:19:14:eb:76:21:a2:c8:86:44:
                    b3:07:7f:c2:e0:d4:2f:4a:dd:71:af:e5:ec:c1:76:
                    cd:e8:b5:47:9d:f9:39:c8:4b:aa:2b:84:49:88:5f:
                    03:70:a0:37:29:18:a6:4b:4f:e3:b3:aa:14:0b:58:
                    fb:d1:37:55:40:55:ae:09:33:ef:15:4a:4e:b8:23:
                    35:05:85:a8:86:7c:17:84:0f:2e:5b:4a:6f:49:f1:
                    7a:37:d7:91:b2:b0:b9:23:55:1d:ab:08:59:08:0d:
                    31:97:88:21:cd:c9:ae:51:bd:16:e8:ef:1b:64:46:
                    0b:aa:54:0e:3c:2c:38:1b:83:3d:a0:64:09:bf:70:
                    06:f0:93:30:65:75:6e:bb:4c:00:e1:d3:9f:71:63:
                    13:92:da:26:b5:27:e6:18:5b:ac:4d:d8:7e:9f:da:
                    95:16:73:ca:23:2a:2c:8b:10:03:73:c3:93:2b:b7:
                    02:36:57:69:07:a0:e7:8d:90:6a:49:1a:75:aa:44:
                    f3:de:6e:c2:ed:f7:71:51:51:2a:e0:d8:36:49:b7:
                    3b:b7:18:75:b8:40:4f:db:ec:5e:3f:62:9c:98:eb:
                    c9:a5:54:14:ed:bf:0a:1d:90:d9:86:ff:4f:fe:22:
                    a5:71:2d:a5:1c:13:8a:9a:05:ec:74:84:63:b8:20:
                    89:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:9B:BF:ED:7C:78:D1:C2:89:12:4E:D3:A5:48:B9:C7:4A:7E:5D:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1c05a3d7-b19d-32ff-b490-0015a96a94ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:fa:e0:c0:b4:90:07:ff:8d:3b:b7:34:18:11:af:79:70:8b:
         5a:b2:d6:c5:dc:62:aa:d2:36:76:01:fa:45:1c:ee:b5:2c:6d:
         6c:db:cd:b7:b7:4e:21:e2:f4:d0:c1:5c:a8:91:6b:90:46:29:
         99:8f:56:de:06:bb:c8:38:26:0e:86:c1:7d:5e:e9:26:1f:c9:
         e3:34:95:20:90:2a:49:0e:4e:12:12:46:f3:f0:40:61:e5:37:
         6e:f0:fe:5c:e8:8d:c4:cd:e9:cc:e0:17:cf:1b:01:74:eb:83:
         ce:d4:58:d7:b4:8b:77:0b:7e:cb:20:ca:d9:9c:a0:3f:18:42:
         3c:02:94:1f:9c:da:aa:3a:b6:82:bb:e1:9f:5a:29:76:82:22:
         86:e1:a1:f9:62:8d:9a:26:2c:57:fc:e5:b1:a9:5c:6c:86:12:
         e4:7c:76:21:db:37:7c:d8:04:42:db:d1:89:c3:0b:98:eb:d3:
         e1:d1:2d:d1:8d:f2:bc:04:bd:59:c4:83:b2:9d:40:d1:d4:e0:
         ad:6d:0d:29:54:63:bf:f3:35:25:5f:fa:b2:01:19:51:99:e1:
         cc:ae:bc:1a:73:24:33:f8:82:f8:e8:0e:47:dd:15:d7:89:a2:
         ef:42:52:ac:92:22:2b:c6:38:8b:1d:57:9f:e1:0d:19:80:83:
         b5:ed:c4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:10 2025 by rpki-client