Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1c8b4be-2c5a-38a3-b56c-e63ed642f8f5.roa
File:                     d1c8b4be-2c5a-38a3-b56c-e63ed642f8f5.roa (raw, json)
Hash identifier:          MsgyFyFvCqcMwV0AXg0/2lx43et1HkBi9fmiFF245IY=
Subject key identifier:   F3:D8:4F:5A:CF:87:23:91:68:C3:45:55:48:B4:4A:54:8B:41:AC:3F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0E876EBF8A856AD920000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1c8b4be-2c5a-38a3-b56c-e63ed642f8f5.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     41264
IP address blocks:        104.133.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:e8:76:eb:f8:a8:56:ad:92:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=393d5501-573f-4b1e-8786-ac31b9391d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ce:90:07:2b:e0:d3:14:b4:fb:e0:e2:75:0b:
                    f8:52:b5:d6:32:27:03:fa:c4:f3:bf:55:04:5f:2d:
                    84:56:f2:e0:c5:37:38:13:53:c6:2a:75:c0:e1:e1:
                    8f:ca:03:fa:1b:26:4f:01:25:17:d3:01:de:71:be:
                    66:ac:4f:fd:f3:70:8d:18:58:ed:9a:32:67:55:97:
                    72:3c:fc:81:72:c2:ca:43:5c:d2:03:f6:93:51:48:
                    00:1a:df:c7:1e:ca:a2:42:db:b3:f1:99:f8:09:29:
                    27:a3:3e:aa:02:89:2b:9b:4a:55:ed:e1:d0:48:f3:
                    bb:bc:a6:10:ad:ea:9b:e5:af:7e:85:d6:dc:b4:cd:
                    4d:54:b2:83:cb:0a:21:b5:57:ab:7f:81:f9:b5:f2:
                    b4:fb:b8:7b:50:a5:ba:0b:d6:8a:6a:61:38:4a:ac:
                    f4:ab:6b:d4:ac:4c:45:d2:8a:7c:ab:a4:a0:80:9f:
                    6d:41:1b:59:26:ec:57:5c:55:e0:d0:ae:ee:f6:dc:
                    b4:bc:89:ae:cd:44:8b:73:cf:0a:89:eb:7b:b1:cb:
                    64:93:78:ce:7c:02:36:e6:2f:7e:27:94:b2:6d:7f:
                    40:54:d2:13:a4:72:3f:08:45:7a:2c:03:d9:7c:db:
                    0b:1f:04:53:f1:cc:fe:96:7c:7c:a2:25:1a:00:6a:
                    10:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D8:4F:5A:CF:87:23:91:68:C3:45:55:48:B4:4A:54:8B:41:AC:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1c8b4be-2c5a-38a3-b56c-e63ed642f8f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:3c:88:f5:1f:a6:84:d9:d7:26:92:76:0e:e2:5e:21:bc:00:
         86:b7:08:19:6d:b8:55:2a:f8:a0:20:4e:34:2a:bc:ec:0a:67:
         24:ed:c9:75:fe:bd:15:71:a7:51:d3:a9:14:84:7a:07:f9:4b:
         84:06:ec:99:be:23:af:79:1b:be:b6:af:80:6b:48:79:25:ba:
         30:24:cd:8a:f7:f8:2b:8b:8f:ee:95:5a:34:f8:ae:2e:83:45:
         92:44:c4:63:a7:20:5c:a2:a4:eb:ef:18:4f:1e:7b:aa:51:b2:
         bc:e9:b8:4d:89:72:f5:dc:e4:20:c0:7f:01:52:54:e2:17:6f:
         25:a0:cf:a7:24:6d:0a:6c:a0:98:9f:92:bd:dc:30:e5:63:da:
         1a:6d:6c:00:95:49:5a:1b:21:d1:e2:89:4d:66:87:90:40:57:
         7e:35:24:2d:1d:bd:cb:f1:7a:53:64:c7:0b:3a:a6:b1:62:82:
         6f:2a:21:1f:d0:96:0f:dc:17:2c:98:af:99:ac:ec:de:ad:c2:
         9d:73:a6:ee:2f:39:b3:ec:19:fe:d1:f8:b3:2a:3d:85:fd:a6:
         37:43:a7:46:d9:c4:c8:ad:20:f9:61:cd:35:c7:24:aa:8f:e6:
         c0:fd:c2:5c:73:20:2f:58:ae:30:99:8e:2d:f3:4c:3f:ec:94:
         75:0f:68:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:46 2025 by rpki-client