Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7549fd74-b059-390e-9c3f-ead7ad43784f.roa
File:                     7549fd74-b059-390e-9c3f-ead7ad43784f.roa (raw, json)
Hash identifier:          9ap7OyEIevS75lA4OpKRUkekkixWZ5lUsykbB6Nw0Rc=
Subject key identifier:   C8:37:32:99:57:CC:5E:7E:12:D1:C4:D9:E2:98:6A:68:3E:20:BC:1A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B1F64BD96D5F755D19C7AB00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7549fd74-b059-390e-9c3f-ead7ad43784f.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     41264
IP address blocks:        104.132.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:4b:d9:6d:5f:75:5d:19:c7:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=d9a0ef7f-2582-4d60-9236-f9c50f277065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:64:7a:27:f4:35:02:21:66:16:2b:c1:9e:ad:
                    2d:56:d0:cd:19:34:5b:09:6c:66:10:45:a3:a1:03:
                    90:ae:3b:0f:03:ef:96:5f:1b:eb:b0:ae:45:d4:b4:
                    cf:66:72:71:b7:ba:03:a6:fd:34:ed:f4:09:37:fd:
                    af:90:dd:f9:a6:22:a5:86:7f:8a:84:a4:38:42:2b:
                    1f:7d:bb:c2:f7:8e:7f:db:f9:69:bd:84:84:6e:4c:
                    d3:93:64:06:9b:6d:fe:2d:48:d9:42:50:d8:a0:83:
                    84:ba:21:fd:da:75:dc:8b:7f:db:b4:c2:54:6f:39:
                    d9:ad:b6:4f:5a:9f:69:17:ba:16:27:fd:99:d1:1f:
                    cf:78:dd:49:b4:a9:85:7e:50:3c:88:06:6a:53:96:
                    55:ff:71:9e:33:44:ed:71:0a:df:0f:be:ed:88:b2:
                    7f:22:4a:38:77:56:c6:fe:48:91:db:c7:71:cf:06:
                    49:b7:2f:32:bb:f2:a8:13:e1:2b:36:1e:08:de:e8:
                    12:ea:3a:40:61:07:b6:84:04:a1:0a:d9:82:0f:48:
                    cc:82:ad:be:4e:63:1b:44:47:91:8e:a9:1d:4d:d2:
                    72:49:61:85:f5:57:ba:fc:33:11:ba:b2:8d:de:77:
                    b9:de:df:16:82:74:d3:9d:28:ba:70:dd:f3:ac:dc:
                    43:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:37:32:99:57:CC:5E:7E:12:D1:C4:D9:E2:98:6A:68:3E:20:BC:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7549fd74-b059-390e-9c3f-ead7ad43784f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:04:81:4a:39:56:31:e0:09:d0:3b:bc:52:a1:d7:4c:ee:58:
         2a:d8:64:7b:ab:2c:12:2f:2c:59:ad:a5:16:d8:a5:b8:5d:8c:
         27:46:15:6c:d6:11:96:58:92:b5:8b:13:fd:ef:4c:41:25:16:
         14:dd:05:f4:70:d3:e5:b5:0b:cd:e1:f6:4b:35:4a:07:77:84:
         29:25:5e:fd:6c:85:ee:a2:92:fb:73:e4:c2:52:2e:c4:51:c9:
         29:cc:cc:59:a1:4b:5d:f0:61:33:cc:f3:87:bd:3d:b7:08:f8:
         07:ea:8c:d7:75:0f:0a:62:6a:89:a6:87:85:d9:e7:1b:81:6d:
         6c:37:c7:7e:c0:5e:8f:9c:8f:96:13:15:a1:9a:a0:2c:2a:39:
         46:cc:d1:5e:ef:56:fd:f8:eb:18:31:47:0a:a6:87:dc:23:1a:
         43:14:e6:bf:2a:e3:6b:dd:fd:3f:c4:8c:53:92:2b:4e:e5:5e:
         41:f5:49:bc:be:4b:80:b2:57:40:66:db:c7:39:34:c6:60:ea:
         7c:85:ff:89:43:4e:c8:d7:95:23:20:e2:76:ca:15:02:a3:52:
         a4:ed:29:94:a5:76:15:b2:dd:8b:01:f4:30:b8:ee:50:4d:8b:
         33:4a:67:0a:fc:5f:a8:07:24:ce:3d:1c:7d:1b:95:8c:60:6e:
         88:1a:e7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:24 2025 by rpki-client