Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/78431503-08b9-3795-858a-77eb8e36f376.roa
File:                     78431503-08b9-3795-858a-77eb8e36f376.roa (raw, json)
Hash identifier:          Fo5jk3t3z1mUYtKAYClk/2WOmCzLrbAxSDz+ZIeeYuk=
Subject key identifier:   66:7F:93:A0:46:E6:3A:BD:0E:19:AF:9A:05:F6:DE:61:AB:10:0F:5A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0E29612A6106ACFFB1100
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/78431503-08b9-3795-858a-77eb8e36f376.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     41264
IP address blocks:        104.133.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:e2:96:12:a6:10:6a:cf:fb:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=359aeac0-6c82-4ae3-991c-bcb2db76a189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3a:5a:ae:65:75:9f:ac:e1:65:5f:76:66:33:
                    65:b3:42:81:2b:0a:97:ce:46:7d:5d:51:15:5f:a3:
                    e2:52:c9:f2:37:3f:1d:ec:98:a6:e6:a9:42:bb:7c:
                    fa:71:67:ba:1a:b2:32:4d:2d:e4:db:f0:7a:79:69:
                    a1:23:da:46:11:77:41:2d:5f:14:56:3d:5a:bb:af:
                    6e:8c:c7:00:02:de:9d:d3:17:3c:f9:4f:fa:b0:c1:
                    b7:14:cb:52:ff:27:ea:35:35:f6:05:f6:6d:e0:ec:
                    06:ae:87:dc:80:8f:29:f0:09:3a:2b:88:b0:aa:1b:
                    1d:d4:b6:ef:85:6c:a7:db:be:d0:fe:4b:eb:76:f1:
                    d0:a7:52:51:a5:03:5b:7e:e9:c3:31:35:33:dc:c3:
                    2f:d4:e8:dd:77:6e:be:57:ee:c4:23:52:67:43:eb:
                    57:c2:57:ee:f4:b1:67:74:3c:0a:04:2c:75:7b:e4:
                    ba:46:76:1f:f7:ad:7e:04:b5:59:d5:08:b0:58:28:
                    2a:1a:ed:2e:9d:f7:6a:3b:9b:76:62:af:97:00:1c:
                    b7:d3:65:01:dc:cd:e9:d1:35:5d:1f:64:4d:24:45:
                    9f:4c:3c:be:88:90:e0:b8:00:08:9b:ad:3d:1c:02:
                    42:9e:8b:2d:f2:fb:be:b9:59:d4:89:a0:ae:10:aa:
                    30:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7F:93:A0:46:E6:3A:BD:0E:19:AF:9A:05:F6:DE:61:AB:10:0F:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/78431503-08b9-3795-858a-77eb8e36f376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:d9:b9:7b:25:7e:e3:92:39:d5:9f:b1:b3:68:c1:df:f0:f5:
         0e:d6:6f:05:0d:60:d6:08:6b:d8:21:57:76:69:0b:c8:a4:15:
         2c:01:e0:5b:c9:16:ce:9b:52:e3:df:92:df:61:3e:1d:59:7b:
         70:c2:f1:cf:c4:28:72:9c:d5:4f:ed:c5:08:b7:a1:5d:6f:4e:
         9a:48:c3:bc:34:56:34:9d:b2:09:33:15:d6:b8:ed:74:4f:7b:
         74:04:2b:91:4f:f3:a9:7f:43:41:51:b9:a1:98:33:41:68:b2:
         7d:de:08:ff:59:fb:16:c8:95:66:0f:90:62:d1:62:a6:fe:ab:
         35:86:cb:db:d7:01:6c:8b:00:c7:25:82:09:78:60:ab:a0:27:
         00:e5:84:26:50:7b:c3:0d:e9:1a:0a:b8:fe:3c:1c:9b:b8:29:
         14:bf:72:48:8d:c8:58:38:01:14:03:58:8f:b3:64:e1:ec:95:
         6d:94:c9:29:ce:88:a8:ae:ba:84:dc:ab:26:6a:e4:35:aa:0a:
         e4:38:15:01:d9:80:c2:9b:46:ab:46:59:ed:7f:15:64:1b:28:
         f6:e3:c6:e6:1b:1d:45:ea:f4:30:4b:35:1a:60:8c:f4:98:ef:
         38:a1:d4:53:c4:a0:33:0b:66:53:10:56:25:ad:7e:50:26:9f:
         5a:2f:56:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:46:30 2025 by rpki-client