Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d86df785-e825-3240-8d91-4c2f62c824b0.roa
File:                     d86df785-e825-3240-8d91-4c2f62c824b0.roa (raw, json)
Hash identifier:          xJgb05vp/jfCfld6rmv7g00yf6yBPjOecPl+fxOsF7A=
Subject key identifier:   CB:64:C5:1F:C6:54:27:6F:2B:48:73:95:95:FC:C3:24:74:29:75:DD
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B1F6584ACFFAF9BF9A1D8180
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d86df785-e825-3240-8d91-4c2f62c824b0.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     41264
IP address blocks:        104.132.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:58:4a:cf:fa:f9:bf:9a:1d:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=377ca1cf-c73f-4004-a1ac-7ab5bf09f11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:da:38:c4:ec:65:8d:40:a3:a4:b1:34:1b:3f:
                    91:5e:15:0f:6e:81:23:11:bc:71:e7:18:3d:93:2f:
                    79:cf:3c:46:d5:8c:5a:45:01:f8:80:6f:2f:2b:b3:
                    a8:e7:b1:2a:7b:f1:1d:6a:e8:0e:22:73:9b:cc:7a:
                    56:38:32:30:49:e8:ca:be:82:ea:66:bc:f8:ee:df:
                    84:b3:a7:87:26:7f:b6:22:c1:2b:aa:f3:b1:21:f2:
                    cb:0b:92:86:bf:d8:ea:c6:02:2c:a2:35:2c:12:eb:
                    52:23:09:a3:de:15:38:0b:01:80:7a:3e:2c:d8:62:
                    69:61:76:40:c7:21:7f:2d:53:9c:be:71:4f:18:17:
                    a8:23:83:c9:da:ab:be:a1:ca:66:9c:e6:a2:49:b7:
                    34:c6:5d:03:7c:06:a7:84:5d:df:dc:3c:a3:aa:24:
                    cc:04:73:46:e9:eb:af:c1:ec:c7:90:4c:f9:34:af:
                    64:b7:2c:19:63:e2:99:97:c1:d9:dc:c0:51:fa:b9:
                    eb:bd:c8:51:f7:af:a0:b7:a2:1b:57:b7:e3:9b:a8:
                    db:61:61:36:8a:3e:ce:85:e9:99:c9:c5:20:2d:3b:
                    75:e7:de:08:73:59:44:e5:5f:2f:7e:4d:a1:96:5e:
                    1b:d5:01:81:1a:23:57:a8:03:de:dd:db:27:ea:a0:
                    c1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:64:C5:1F:C6:54:27:6F:2B:48:73:95:95:FC:C3:24:74:29:75:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d86df785-e825-3240-8d91-4c2f62c824b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:9b:be:75:04:51:84:2f:46:6a:5b:85:e1:83:74:97:7e:b5:
         cf:05:92:a4:6c:50:99:27:1c:2d:49:c1:8c:53:42:e0:e1:14:
         85:a4:7c:1f:72:5e:1c:7f:f8:9d:85:39:72:c4:ab:c7:38:f6:
         d0:25:01:f2:30:4d:42:d5:60:0e:59:d6:e9:76:1b:d2:fb:cb:
         cb:05:de:10:31:4b:06:44:9e:4a:a2:86:3c:13:81:a4:8c:d0:
         f2:1a:76:8c:9c:6b:3d:6d:61:23:60:ff:dc:e0:49:07:67:26:
         1b:7d:ef:5d:9f:6a:8b:76:20:c8:47:92:4e:3d:35:dc:68:c2:
         a9:30:e4:c3:81:52:2c:12:a1:27:23:e4:41:94:6f:c9:14:65:
         32:00:03:ef:2d:44:35:7f:4f:d5:08:f2:15:0c:d3:54:04:49:
         4d:28:54:98:18:fe:d6:9b:c5:fb:4a:26:e1:ac:d1:ff:25:ab:
         9b:8e:1c:4e:73:b4:4f:db:7b:0f:02:7d:59:22:2a:49:d2:33:
         47:3c:06:ac:1d:63:a8:c5:df:f2:c6:7c:85:3b:bf:b7:1d:81:
         f9:75:a8:20:7e:8e:d4:be:c9:bb:f1:a8:07:31:69:94:25:0a:
         e8:0d:a3:e3:f0:12:f0:a8:44:f2:af:7b:18:c5:46:e8:49:42:
         9c:f4:09:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:17:34 2025 by rpki-client