Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6a49a591-62c4-32da-b51e-eebb670137c2.roa
File:                     6a49a591-62c4-32da-b51e-eebb670137c2.roa (raw, json)
Hash identifier:          u18X/5QDMKEwOb248waPwzJPrNbjVg47nVVF3HNY0dU=
Subject key identifier:   FE:C4:2B:70:CB:2B:58:CB:E3:7F:B3:F3:5D:1D:0D:B2:4B:69:9D:A7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848AF2B9BE33E2ED89EC0C3A2C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6a49a591-62c4-32da-b51e-eebb670137c2.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     41264
IP address blocks:        104.132.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:9b:e3:3e:2e:d8:9e:c0:c3:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=1faf226f-c488-47a4-90aa-b5c00eeaabd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5b:d4:35:69:f6:9c:e1:96:08:fc:40:be:b4:
                    93:9c:76:e3:c7:ce:66:2f:5c:54:0e:fa:08:b6:13:
                    67:d8:7f:e0:86:47:dc:a5:53:cf:06:19:46:24:8f:
                    e6:62:08:75:75:a3:48:37:2e:88:cf:9c:43:04:8a:
                    7f:28:14:ca:2b:f2:50:e8:d3:3d:ea:2f:4b:64:52:
                    d6:6c:2b:4a:cd:4e:fe:18:c1:18:62:80:b4:87:1e:
                    cb:72:6b:9e:4f:20:0a:e4:9d:3b:85:3d:18:42:dd:
                    d3:1b:81:47:88:ab:a7:83:f2:47:54:bc:1a:7d:c3:
                    72:83:06:af:85:df:10:8b:fe:e5:9b:00:40:53:19:
                    c0:f9:91:b9:bd:92:3f:47:7e:f6:a5:5e:6c:3f:a6:
                    39:4c:8f:9f:09:55:06:4e:bb:21:22:9d:4e:23:1b:
                    8a:02:39:5e:c0:53:1c:45:70:5c:14:94:3c:b2:49:
                    47:d2:56:ee:4f:a4:e1:ca:1c:13:05:7a:ed:f9:f0:
                    a2:94:06:24:6c:9a:58:01:1b:f8:75:d3:2c:dd:72:
                    29:b3:d6:0c:3b:1f:a6:96:c3:db:2a:ed:10:1b:87:
                    52:3c:34:2f:6d:c2:82:7a:fc:d5:78:ce:c7:00:f5:
                    a5:dd:d6:65:0e:45:ac:1a:1a:53:41:8e:20:ba:c2:
                    61:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C4:2B:70:CB:2B:58:CB:E3:7F:B3:F3:5D:1D:0D:B2:4B:69:9D:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6a49a591-62c4-32da-b51e-eebb670137c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:9a:5a:2c:f5:c9:1c:48:b2:65:5b:4f:8a:bc:31:86:c4:0f:
         35:e9:a5:7b:a1:dd:b5:cb:03:5d:31:80:d2:9e:87:32:aa:db:
         af:0d:b8:88:f8:8a:09:8f:7c:b2:fa:9a:c7:bb:1c:97:7c:3d:
         61:b2:b9:68:fd:01:5d:fd:c4:b0:89:08:6b:cb:7f:8d:9c:1f:
         55:fc:71:d6:f8:39:00:96:bc:4b:91:42:ae:a3:57:68:c2:53:
         83:9e:40:23:cf:04:91:d9:11:3d:a6:cb:71:18:e7:95:cd:9e:
         03:c2:da:03:db:da:ff:51:69:3d:72:7d:0a:68:7a:16:e5:ff:
         cb:65:a5:cb:35:01:99:c8:87:e8:d8:19:c7:49:b0:eb:49:e0:
         53:7d:97:cd:c1:f1:82:e1:b2:7b:ec:f5:ab:95:d1:d1:dc:d9:
         12:af:10:1e:f4:49:0d:05:75:b9:4c:b1:6d:7a:48:da:f3:f8:
         01:28:a9:ba:f0:03:a8:a2:fd:53:70:9a:3f:42:c3:47:09:0a:
         20:45:c6:5d:3e:e3:8f:dc:99:ec:c5:84:c1:f9:4d:48:38:37:
         f9:4c:01:10:50:ba:4e:1e:e3:a7:47:4c:c6:b9:f9:05:43:12:
         e1:d5:fb:d6:fc:b4:53:0c:60:7d:c7:5d:a9:0e:cb:d8:22:2a:
         fc:46:5e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:16 2025 by rpki-client