Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b5ee8072-17e7-3d01-b6bb-380929517427.roa
File:                     b5ee8072-17e7-3d01-b6bb-380929517427.roa (raw, json)
Hash identifier:          726f/U08wCNNp9QcBc2YOIcuUpGrlxEZ7ZybaUMNgFs=
Subject key identifier:   C2:F9:A4:B3:C4:B6:3A:2F:5D:46:54:EF:6B:56:B5:4E:9E:7F:36:F9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B1F6565785D87B20E6286C40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b5ee8072-17e7-3d01-b6bb-380929517427.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     41264
IP address blocks:        104.132.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:56:57:85:d8:7b:20:e6:28:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=4044dd7c-5d22-4e29-8409-cfdc2d9c3266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:71:67:cf:32:08:5e:57:0a:2a:1a:49:db:6c:
                    c4:2b:46:87:25:bb:89:c8:09:f4:c1:39:61:d2:fc:
                    03:93:c8:67:fb:2a:52:34:e0:9e:ac:91:86:82:b3:
                    99:00:46:45:1b:71:13:b8:60:c3:81:49:2e:58:51:
                    eb:00:bd:52:bb:e8:2b:a1:d0:21:9a:e9:f8:70:1f:
                    70:2d:a6:cd:fc:de:5c:f3:57:88:d1:6f:8a:8a:b6:
                    02:ae:b1:34:3c:c8:e1:c0:17:90:84:5a:98:65:4b:
                    b1:6e:ad:80:f8:55:9b:0e:08:49:43:0e:35:8f:4f:
                    1e:a6:b4:61:b8:4e:35:62:2c:af:a8:73:78:1e:b7:
                    33:88:09:0a:c1:5e:c3:4f:a5:9b:5b:5c:1a:ec:54:
                    58:87:83:05:9d:37:41:ee:e4:17:45:50:77:17:4c:
                    bf:9f:dd:6f:20:6c:cc:73:84:fb:75:6c:03:00:cc:
                    2b:39:91:de:04:9f:ee:c3:82:c5:c8:18:98:ca:49:
                    96:44:fd:c3:9a:f4:0e:ee:09:fc:fe:e7:30:31:c6:
                    b8:d3:c8:8f:9b:43:99:29:11:f7:9a:08:b4:91:49:
                    f1:45:fe:1b:63:32:45:fe:4b:fe:f0:85:1c:c5:a0:
                    eb:ba:00:e5:29:0c:78:8a:7c:58:55:ae:4d:af:3b:
                    23:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F9:A4:B3:C4:B6:3A:2F:5D:46:54:EF:6B:56:B5:4E:9E:7F:36:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b5ee8072-17e7-3d01-b6bb-380929517427.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:32:ed:f1:f0:ec:0f:ed:d4:2e:07:06:06:7c:6b:b5:19:d4:
         fe:b0:85:a6:1b:f4:03:9f:31:30:ea:6e:1e:93:cd:b4:a7:ec:
         83:5b:16:de:42:55:2f:3b:14:5b:f6:b7:55:ef:3d:f4:b7:5b:
         0e:5d:0f:5e:a9:f7:83:10:03:02:86:06:be:a8:8b:27:5f:bc:
         23:88:25:61:3b:33:3f:d3:11:55:2a:3f:1b:ac:b0:5b:5e:ae:
         10:af:8d:74:fc:28:e2:f3:2e:01:66:2b:5b:f3:7d:9f:66:55:
         bc:b7:e6:25:f5:82:45:9a:93:db:cb:ec:56:3e:0b:24:49:77:
         5a:20:69:21:ce:8d:a7:8a:27:0d:60:4a:2b:31:34:9b:e6:cd:
         44:5d:a7:6a:f5:1f:a7:ae:15:c7:3c:41:24:e7:cf:24:db:00:
         14:1b:ba:56:94:b8:5d:31:82:a1:f7:99:eb:2f:2b:10:ce:79:
         76:95:f7:c2:97:6e:7b:95:cc:b4:f5:5b:98:92:49:de:ff:d2:
         29:82:52:35:9e:bc:df:82:41:92:58:04:de:6e:42:b0:fa:20:
         36:71:7d:09:ca:19:90:da:b0:f0:fe:44:15:df:81:9b:47:99:
         a9:73:b7:1f:06:d1:e8:c5:c6:cd:06:62:ab:b8:b5:30:e1:ce:
         39:3d:af:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:34:12 2025 by rpki-client