Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c7993b42-2efe-3500-9bc6-c824d32e804a.roa
File:                     c7993b42-2efe-3500-9bc6-c824d32e804a.roa (raw, json)
Hash identifier:          t+FKxuyowD+nd+i7fifFFcvRtFqasYn67g1qvS/cVAM=
Subject key identifier:   28:65:19:88:42:50:A9:B4:03:38:3D:EE:02:9F:B3:EF:8E:7E:45:C6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848AF2B9B0D22D871C033B335C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c7993b42-2efe-3500-9bc6-c824d32e804a.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     41264
IP address blocks:        104.132.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:9b:0d:22:d8:71:c0:33:b3:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=0575656c-5465-4ae7-8787-db28408d22e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fa:2e:fe:fe:33:05:6a:dc:27:ef:67:37:a3:
                    07:62:3b:25:94:25:d2:86:6e:ed:86:26:fc:04:6d:
                    53:88:bd:73:f5:ff:ee:fd:51:ac:f0:3a:2f:8e:33:
                    14:07:80:84:4f:63:0b:3e:bb:0f:e8:92:87:09:dc:
                    69:4b:b0:03:f1:58:23:f6:1b:c3:52:03:96:44:f5:
                    a5:e0:3e:f2:f2:6e:cb:ec:66:6f:5e:2e:33:61:11:
                    f8:10:cc:0b:24:bf:ba:6e:21:2b:42:65:3b:b8:7a:
                    39:6b:d8:13:ae:e0:de:d5:eb:6b:8e:df:d2:fc:3b:
                    35:a3:00:dd:d0:4a:ae:17:11:ae:51:e7:71:a2:1e:
                    d4:1d:bb:0f:4c:5e:af:07:a7:db:31:03:f8:cb:89:
                    cb:5a:42:e0:ae:13:ff:71:3b:91:f3:2d:a0:85:7e:
                    63:fd:d9:f0:ef:12:78:6a:0b:57:b8:45:7f:43:5b:
                    c0:53:e4:e5:fa:d0:e4:a3:60:a6:36:b7:35:5e:68:
                    83:25:9f:53:ee:ed:7c:b1:74:82:be:c8:c0:57:2f:
                    36:8d:48:b7:aa:a9:79:6f:6a:0a:cc:22:e3:ae:26:
                    9a:77:29:d9:90:ca:c8:9f:a9:b4:b4:42:88:d4:88:
                    07:04:46:d3:c7:b2:38:3f:6c:32:5a:de:60:ba:f2:
                    37:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:65:19:88:42:50:A9:B4:03:38:3D:EE:02:9F:B3:EF:8E:7E:45:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c7993b42-2efe-3500-9bc6-c824d32e804a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:04:43:98:75:47:3d:2a:91:4d:9a:cf:60:35:d8:c1:1f:99:
         31:99:e1:23:b7:ef:c9:80:6b:60:ef:cd:d8:b5:61:0d:21:c5:
         3b:47:f5:ad:ce:d7:22:8d:c8:ea:a3:f2:8c:40:b2:b2:5c:28:
         2f:cc:02:a6:65:ec:2a:f0:47:a0:64:e7:98:42:c0:77:61:e7:
         e6:37:88:ee:e7:45:b5:12:e8:41:0a:86:ae:16:a5:63:8a:66:
         ee:6e:7a:42:0a:b8:bf:49:45:72:cc:b4:c0:93:fe:54:42:5b:
         c8:cf:29:ec:d4:d3:7a:d0:3d:66:3f:b1:48:3a:c0:98:29:59:
         23:53:44:a9:c2:9d:73:a5:48:4e:ef:1c:09:af:2e:40:21:78:
         da:12:c6:3f:d1:cf:a8:3e:af:ca:4d:e1:7a:4c:f0:50:84:fe:
         ea:ec:45:17:a9:ef:3f:41:d0:ab:c4:68:02:b9:22:1d:91:b0:
         49:71:82:f0:b2:94:90:34:10:16:d9:4f:96:1d:f6:f9:f6:d5:
         f6:c1:7b:76:0a:7b:1a:ac:39:d6:6f:9f:9b:ee:bd:18:cb:e8:
         8f:4a:bf:55:4b:d5:5f:43:53:69:b2:3a:84:be:45:47:09:3b:
         f8:b6:af:ff:f0:d1:0f:ed:4c:0b:29:8f:e6:65:dc:d2:43:60:
         ae:41:c2:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK5sNIthxwDOzNcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
MDU3NTY1NmMtNTQ2NS00YWU3LTg3ODctZGIyODQwOGQyMmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/ou/v4zBWrcJ+9nN6MHYjsllCXShm7thib8
BG1TiL1z9f/u/VGs8DovjjMUB4CET2MLPrsP6JKHCdxpS7AD8Vgj9hvDUgOWRPWl
4D7y8m7L7GZvXi4zYRH4EMwLJL+6biErQmU7uHo5a9gTruDe1etrjt/S/Ds1owDd
0EquFxGuUedxoh7UHbsPTF6vB6fbMQP4y4nLWkLgrhP/cTuR8y2ghX5j/dnw7xJ4
agtXuEV/Q1vAU+Tl+tDko2CmNrc1XmiDJZ9T7u18sXSCvsjAVy82jUi3qql5b2oK
zCLjriaadynZkMrIn6m0tEKI1IgHBEbTx7I4P2wyWt5guvI3OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFChlGYhCUKm0Azg97gKfs++OfkXGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYzc5OTNiNDItMmVmZS0z
NTAwLTliYzYtYzgyNGQzMmU4MDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALoEQ5h1Rz0qkU2az2A12MEfmTGZ4SO378mAa2Dvzdi1YQ0hxTtH9a3O
1yKNyOqj8oxAsrJcKC/MAqZl7CrwR6Bk55hCwHdh5+Y3iO7nRbUS6EEKhq4WpWOK
Zu5uekIKuL9JRXLMtMCT/lRCW8jPKezU03rQPWY/sUg6wJgpWSNTRKnCnXOlSE7v
HAmvLkAheNoSxj/Rz6g+r8pN4XpM8FCE/ursRRep7z9B0KvEaAK5Ih2RsElxgvCy
lJA0EBbZT5Yd9vn21fbBe3YKexqsOdZvn5vuvRjL6I9Kv1VL1V9DU2myOoS+RUcJ
O/i2r//w0Q/tTAspj+Zl3NJDYK5Bwi8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:35:22 2025 by rpki-client