Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/17485216-db65-3359-a000-1e97d1f730bc.roa
File:                     17485216-db65-3359-a000-1e97d1f730bc.roa (raw, json)
Hash identifier:          aO6IHS7nZblX9Zw2i0oec9oSDYB+wx1kxM0Bm3W09XU=
Subject key identifier:   B7:47:08:A6:F2:F7:DF:08:CF:90:C0:F6:DB:D1:68:A7:88:41:B2:57
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F466BECA296C397947900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/17485216-db65-3359-a000-1e97d1f730bc.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:46:6b:ec:a2:96:c3:97:94:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=7933ccfe-66bd-49f8-a260-49ded305b424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0c:57:40:e0:47:b3:3b:45:ef:a1:94:fb:2a:
                    d1:b6:9b:94:51:78:8e:ff:e7:c4:cf:89:96:2b:d8:
                    48:4a:9d:90:c0:58:74:2c:fe:5a:1b:05:fd:e5:aa:
                    5e:2a:0a:de:84:1a:a6:b3:28:4f:f2:a1:75:9d:ee:
                    c8:e0:60:87:4d:8c:0f:1c:4e:ad:f2:f1:0f:9f:d0:
                    b1:d0:54:75:32:94:e5:6d:27:b6:5d:2a:ad:48:c7:
                    c4:b0:8a:3b:2e:96:f6:f6:09:eb:ca:44:19:23:55:
                    d7:d7:d8:3f:93:5b:52:66:52:c0:6c:7d:d2:51:9a:
                    85:0f:e3:6b:a8:95:ca:52:85:71:fe:7b:9d:45:44:
                    f9:a3:b4:8a:77:36:c6:e6:09:64:e8:10:b5:f6:ff:
                    f6:92:50:f6:75:0b:ca:27:91:ec:33:da:1b:84:a2:
                    ad:6d:52:52:01:3a:7e:4e:11:cf:fa:22:68:9b:fa:
                    af:9f:bf:d7:2b:84:71:cf:e7:c3:a5:01:4e:fd:c8:
                    74:99:9e:91:36:89:49:06:f7:26:8e:5f:95:f6:7b:
                    5e:65:e4:3f:f9:1e:23:c8:f9:cc:bc:d9:e7:1f:31:
                    2d:df:f1:2b:ea:8c:c4:00:c1:9b:a1:44:40:2d:e6:
                    71:f5:97:02:ac:d0:3c:e8:dc:c5:62:ab:17:73:0c:
                    5b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:47:08:A6:F2:F7:DF:08:CF:90:C0:F6:DB:D1:68:A7:88:41:B2:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/17485216-db65-3359-a000-1e97d1f730bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:7f:9e:68:43:79:e9:71:6b:d1:08:2e:92:ee:a2:5c:51:07:
         b0:09:16:2c:31:64:55:89:f2:3b:15:8e:42:b1:34:6c:8f:b9:
         cd:98:49:6c:c3:17:a8:7b:5e:17:93:a6:b1:a8:a7:45:80:f5:
         82:6a:b6:a1:aa:9a:82:dd:53:7a:fb:d5:7c:09:7d:85:22:6a:
         9f:be:39:53:26:6f:35:01:52:bb:06:32:15:a0:76:fc:67:ca:
         fe:2b:34:a9:5f:7b:c1:cb:37:22:bd:f8:ca:a8:0c:b7:4b:6f:
         ce:34:36:d5:b9:65:c0:3f:bf:53:32:e3:c3:b6:13:bc:41:67:
         2b:fa:15:2b:91:6d:4f:03:ba:5f:1c:cc:65:39:c0:b0:c3:d5:
         1a:49:a7:7e:49:62:fa:c0:76:26:ce:49:07:fc:52:50:8f:dd:
         5b:52:e2:70:dc:06:7d:10:a6:eb:2b:52:df:02:45:f9:ba:6c:
         cc:0b:48:c9:91:60:08:f6:cd:5d:04:7a:36:6c:09:37:e8:a6:
         1c:57:11:f4:5c:ec:05:ac:fb:26:cc:12:4b:f4:0b:03:8f:d1:
         8e:d4:ac:b4:1c:2d:7c:df:6f:35:d1:2e:6e:44:00:1b:b9:51:
         8b:05:c8:50:1f:ea:1b:b0:51:71:9f:be:46:a7:43:47:76:78:
         ff:6f:b7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:28:34 2025 by rpki-client