Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad4793b8-609e-3c49-8478-ac20772c4176.roa
File:                     ad4793b8-609e-3c49-8478-ac20772c4176.roa (raw, json)
Hash identifier:          PfjcJ+/Kqvb7tUPC5Z0qN50zCTpO8Mq/aWVpqPdAMk4=
Subject key identifier:   27:5F:0D:0D:B3:73:E9:9A:97:62:1A:23:85:C4:A5:62:25:86:43:F7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848AF2BBA6809DA0D61AE5FC900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad4793b8-609e-3c49-8478-ac20772c4176.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     41264
IP address blocks:        104.132.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:ba:68:09:da:0d:61:ae:5f:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=dc8f94b8-bade-4d77-bf6e-57d9de49355b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:36:5f:d5:54:50:67:6f:f9:9f:a2:e1:ee:
                    44:f7:4a:fb:cc:58:99:de:b1:13:8d:1e:ce:7a:f9:
                    7c:22:7d:3c:19:53:54:c1:fa:e9:fd:ad:7a:22:ae:
                    2e:3b:ec:89:d6:85:49:20:ae:69:40:20:81:ef:fa:
                    cb:1b:fc:42:9f:c9:6a:4e:58:25:95:31:d1:3f:ac:
                    5c:66:95:5c:58:3a:ab:49:b1:d8:d5:7d:f5:04:a1:
                    4f:9a:2c:f8:42:dd:33:bb:46:45:65:e7:17:22:21:
                    eb:64:dc:99:ea:bf:d4:57:c0:9c:ea:f8:e4:3d:70:
                    6d:ec:53:68:51:1a:a3:6a:15:6b:13:94:bb:59:fd:
                    e9:b1:ea:9e:c1:23:ef:ee:d3:0a:44:55:1f:1a:77:
                    e3:25:3e:92:1f:19:1f:1d:9f:0b:3b:b7:5a:5e:eb:
                    da:47:51:3f:6a:76:8d:cd:75:61:7f:41:6b:a8:2a:
                    80:12:8f:68:1d:65:67:32:e7:ac:f8:6a:b2:c2:79:
                    50:cd:af:f4:c8:e1:42:57:83:c8:ee:de:3d:e3:14:
                    02:fa:81:6c:74:70:37:4d:35:ac:b6:c6:02:2b:f9:
                    fb:f2:be:74:66:64:a3:19:4b:1e:5a:cc:b5:73:0d:
                    7b:d2:04:89:33:b3:bc:08:27:3f:ea:bc:e5:ed:9c:
                    bb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5F:0D:0D:B3:73:E9:9A:97:62:1A:23:85:C4:A5:62:25:86:43:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ad4793b8-609e-3c49-8478-ac20772c4176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:fe:b1:0e:b0:fa:1f:54:42:e8:0e:02:f5:73:7c:84:f4:6c:
         73:a4:36:09:95:63:58:f6:97:b0:94:5b:ef:8e:e6:be:b0:08:
         c5:05:33:5d:7f:68:95:6c:9e:10:56:7f:cc:ce:3c:1e:df:f3:
         96:e9:4e:6f:ed:da:b1:0e:1a:76:88:c0:f6:86:17:3e:db:4b:
         5b:54:b9:11:38:ee:f1:eb:29:cc:63:c5:ff:28:b3:1d:4e:2f:
         8d:6e:8c:52:9d:2a:ad:b2:fb:83:2f:c2:6f:7e:50:16:92:ee:
         d0:e1:66:85:51:e7:4d:2f:d0:f5:f3:60:e5:69:c5:31:bc:0b:
         60:0d:d6:5a:c9:f2:13:db:4f:de:4c:66:8e:41:67:37:13:94:
         3d:4e:8d:59:2c:a3:2c:8c:35:1e:07:46:c9:67:cd:fc:0d:2c:
         58:61:c4:cb:d9:67:98:5e:d5:04:8a:7b:02:24:b2:08:ae:32:
         25:2a:76:8a:40:a8:ed:af:d1:04:ba:c0:63:83:ac:f6:f9:63:
         34:a0:e0:14:30:98:06:eb:b2:65:ad:71:f2:44:c0:a4:5d:13:
         2f:6e:4c:97:9c:ee:eb:f1:03:48:cc:eb:15:a4:7e:df:15:67:
         0e:10:0b:8e:c7:14:a9:e2:e1:c1:b1:88:b3:11:27:1d:34:b6:
         f5:75:aa:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:42:40 2025 by rpki-client