Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b5b9f4fe-abfa-3840-8692-0ba96e48412f.roa
File:                     b5b9f4fe-abfa-3840-8692-0ba96e48412f.roa (raw, json)
Hash identifier:          kHO0gJ5sDofWj9kISXFXOOUk8rj1TT7fL3PSGiXsCco=
Subject key identifier:   FF:74:30:7E:E9:50:FC:36:60:66:67:8B:39:A1:19:3E:2E:F2:D5:3A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0DEA27DDC250B58E9A900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b5b9f4fe-abfa-3840-8692-0ba96e48412f.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     41264
IP address blocks:        104.133.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:de:a2:7d:dc:25:0b:58:e9:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=baaf8389-4b65-4893-b150-131d29c722dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fb:6d:14:fb:e2:99:5f:3d:43:3f:cd:73:d1:
                    6c:85:23:f9:d1:64:b1:fd:43:a2:16:21:e9:97:18:
                    8c:f7:5c:43:93:b6:dc:22:97:c9:3f:77:b1:52:3f:
                    fa:3f:a9:5b:c5:5d:4e:81:33:77:6d:74:a2:75:93:
                    2c:eb:88:18:fb:14:48:b6:2c:5e:fe:3f:53:9e:2a:
                    f8:b0:77:00:62:c7:8d:e1:a5:bb:bc:b4:a5:55:4b:
                    18:c1:82:9a:67:34:e0:4e:e3:88:8e:8b:1b:77:31:
                    69:70:9f:f3:10:64:1f:25:fa:c0:12:76:14:69:69:
                    c1:77:eb:79:a8:96:2e:6f:32:44:a7:f3:b5:e3:48:
                    d6:6d:86:a8:56:1f:e4:90:cf:a8:f3:97:1e:91:d1:
                    b9:a1:b5:f7:aa:02:68:83:21:50:9f:6e:fb:0c:42:
                    17:0c:21:a7:22:57:43:6b:28:9e:e7:12:f5:3c:44:
                    81:27:f2:d0:46:3a:08:97:16:5c:4b:db:23:e6:a9:
                    d4:9a:5e:7d:b8:f4:71:93:20:c0:10:17:89:6b:ac:
                    c7:91:f2:86:78:be:f0:89:c6:10:ae:3d:e0:e1:3b:
                    a6:12:51:a5:8e:85:93:da:c8:93:52:93:bf:08:1d:
                    57:9a:78:30:6e:03:30:dc:d0:6d:a3:be:f0:dc:be:
                    6e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:74:30:7E:E9:50:FC:36:60:66:67:8B:39:A1:19:3E:2E:F2:D5:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b5b9f4fe-abfa-3840-8692-0ba96e48412f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:39:16:39:3b:36:0a:f3:56:9e:fe:f5:30:73:48:62:d0:3d:
         84:f6:7b:3d:ee:ba:60:0f:c7:93:31:ee:d1:3a:c3:a1:86:30:
         17:49:12:e9:f9:1a:2c:fe:6e:22:e8:e6:77:c0:06:7f:1f:a4:
         c6:6c:7b:fa:6c:50:0e:84:bf:75:df:7c:3b:7f:49:6e:76:c9:
         2f:16:ea:c8:0b:ec:89:bb:6f:76:2c:50:a5:3b:2b:40:1e:ca:
         c2:37:3a:50:d0:a8:01:16:90:5c:31:de:38:2f:38:2b:d7:11:
         0b:7d:0d:2c:02:3a:86:c9:39:5b:27:9f:1e:26:e5:ce:0d:fc:
         df:7c:2f:f3:4b:a2:ac:1a:c6:d2:91:49:43:37:91:1e:f8:a8:
         9b:63:76:18:9d:af:fa:4a:ab:fd:9f:a9:7a:31:a4:c2:49:d5:
         fe:bb:2a:4a:68:ab:10:65:eb:2d:0b:ec:20:8f:60:a9:19:57:
         91:a1:20:ce:fc:3d:49:c0:aa:7a:cd:fb:db:da:bc:1a:72:88:
         c1:ce:4f:31:b9:7d:03:2e:ff:13:a9:ec:1a:94:ea:54:55:e3:
         d7:5f:06:08:d8:4b:28:db:c4:da:b6:56:b1:12:09:60:c2:0a:
         81:d0:e4:c7:2b:1f:55:05:18:35:c3:3e:f1:ff:a7:05:93:6f:
         58:73:82:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:02 2025 by rpki-client