Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/22845f8f-6fc6-3252-bc9e-0a6cadaeaf0a.roa
File:                     22845f8f-6fc6-3252-bc9e-0a6cadaeaf0a.roa (raw, json)
Hash identifier:          kFs2Jkc4oaXTn+rZamEtq6cDXR1W3QVjAKs+y0717SQ=
Subject key identifier:   4A:13:D4:06:66:27:25:BC:AE:84:C1:C0:06:FB:24:84:5A:42:92:82
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B1F648D710812E1750D16E30
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/22845f8f-6fc6-3252-bc9e-0a6cadaeaf0a.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     41264
IP address blocks:        104.132.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:48:d7:10:81:2e:17:50:d1:6e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=738a2978-c52d-4160-8b8c-01a216cb4b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:29:c9:05:4e:6f:3e:7d:89:a6:ce:76:b7:45:
                    8e:eb:c9:ed:bf:20:35:5e:14:cd:71:4b:8c:3c:79:
                    cd:47:2c:29:6a:46:b9:43:fd:70:32:36:96:61:cb:
                    6b:01:62:23:b7:98:d7:27:97:0a:2a:b1:88:f1:a1:
                    63:35:49:39:66:4e:8d:60:10:8b:8e:b6:35:33:31:
                    23:3f:e0:22:7d:ab:8a:17:94:5f:fa:fe:30:4b:cc:
                    0e:ac:65:c9:9e:b6:f6:62:2e:75:76:55:d4:24:6a:
                    78:be:b9:5c:80:fe:d3:1f:81:2b:23:71:30:24:ff:
                    55:21:e1:92:1e:a9:df:29:2c:3a:61:78:12:0a:b8:
                    8d:66:35:0a:0e:1e:ea:5e:cb:a8:c9:ff:cb:f3:da:
                    97:8d:3b:01:2d:99:5b:76:7a:5c:9b:0a:4c:ff:b6:
                    89:58:73:9b:da:6d:6b:00:22:f1:a2:3c:e7:8a:bd:
                    9f:82:11:ac:4b:4a:fd:07:2b:cb:7c:b2:57:8b:7c:
                    ce:8f:b8:ba:a5:ca:3e:34:67:39:bd:f5:44:3c:9b:
                    b1:c3:e9:a0:1c:a1:36:82:c5:38:6d:04:05:2e:32:
                    3e:df:a0:60:df:c6:ed:be:8b:97:46:9a:ef:cb:62:
                    b7:a0:8e:6f:69:60:13:65:c7:a9:8d:18:65:bb:c2:
                    13:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:13:D4:06:66:27:25:BC:AE:84:C1:C0:06:FB:24:84:5A:42:92:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/22845f8f-6fc6-3252-bc9e-0a6cadaeaf0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:30:5d:c6:6c:98:76:e6:18:0b:0f:14:df:e0:3f:e8:ee:60:
         0d:75:a9:e0:be:96:a4:0f:f2:49:5f:32:14:33:19:9a:c3:b2:
         bb:7a:45:1e:43:5e:12:75:16:00:23:29:e3:ca:e5:9a:12:93:
         7e:b3:3d:39:7a:85:28:fd:1b:e7:19:fd:83:ab:0f:50:5b:a8:
         63:b2:9a:5b:8d:a7:5f:3c:42:90:a7:f7:bb:87:27:c4:53:0a:
         bb:52:2c:e7:cf:20:33:7c:29:aa:08:ed:58:f0:37:a9:3a:bb:
         2a:be:0b:62:68:dd:56:6e:ac:5f:6f:be:48:0b:7d:61:a9:8e:
         63:af:9d:ef:fc:6f:a2:d2:08:6c:b7:50:fd:c3:f6:9b:31:e7:
         b7:cc:b2:c6:2b:84:5b:1b:50:f9:ff:1d:1d:1b:68:d0:65:30:
         aa:f1:e8:1d:83:6c:fa:fa:43:b3:f9:d2:64:00:6c:3e:f7:a8:
         9f:13:65:77:7a:fc:62:ad:9f:73:ea:d9:18:e1:18:ea:c9:4e:
         8b:6f:2a:19:51:93:51:55:93:a0:3c:c1:57:39:68:0f:41:da:
         01:c9:02:e5:e3:6a:72:70:0d:4a:e3:e4:0b:8f:fe:00:8e:1f:
         9a:1a:93:7f:d3:22:23:dd:5d:62:d4:4a:75:a6:8d:91:75:16:
         d3:d8:50:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:52 2025 by rpki-client