Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1bb58749-ba43-3679-b52d-df22c5320431.roa
File:                     1bb58749-ba43-3679-b52d-df22c5320431.roa (raw, json)
Hash identifier:          VbNsQxL2oz9JCCTC7ASnwIzbaZZhcZDBsdqLsCSvShg=
Subject key identifier:   D6:3E:EA:89:DF:A4:7C:67:C2:0F:8B:C0:CE:06:40:51:27:E4:CF:DC
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F47DC8DF62B2D4225C700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1bb58749-ba43-3679-b52d-df22c5320431.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:47:dc:8d:f6:2b:2d:42:25:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=637b60cf-edf8-42ec-a3f4-5772a1e24a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:16:70:4d:44:d8:f9:d3:00:84:23:6e:30:b5:
                    6e:68:a8:e7:da:8e:f7:88:f2:55:14:4d:a7:84:4d:
                    ad:8a:7e:29:c2:9b:a7:cf:5a:f6:0d:6d:8b:f6:61:
                    fd:07:6b:b7:53:75:7f:a4:ae:4c:b2:01:b9:91:ae:
                    b3:9c:74:a9:12:ab:f4:6d:2b:48:26:aa:1a:f3:13:
                    94:f9:5f:7e:39:11:24:14:18:a6:f4:4e:4b:46:cc:
                    d1:53:cb:d4:7a:99:5f:55:e1:3d:de:39:98:de:22:
                    91:e9:6b:ae:76:b3:25:d5:ef:c6:b0:24:5a:9f:db:
                    0e:ee:68:54:e5:14:76:53:cc:9a:a6:32:3e:5d:e9:
                    58:65:26:01:cd:7a:26:d1:74:87:ce:c7:f1:19:9a:
                    d0:b0:c2:87:8c:39:b4:df:3b:fd:80:ed:6d:c0:1e:
                    12:93:fb:cf:48:3f:e2:08:0e:07:df:7f:42:12:12:
                    b8:41:26:74:6c:c2:2c:5a:31:59:58:66:31:45:87:
                    f6:53:73:4e:4f:e4:c7:19:f7:fc:aa:23:99:e6:af:
                    62:97:c6:d5:6d:eb:ed:00:5c:2a:07:85:87:16:6f:
                    3d:38:06:b9:2b:8e:ab:c6:e6:92:a3:3d:39:93:ad:
                    70:a2:f1:03:bd:3e:ea:c4:5e:07:a1:7b:ee:b0:e8:
                    13:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3E:EA:89:DF:A4:7C:67:C2:0F:8B:C0:CE:06:40:51:27:E4:CF:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1bb58749-ba43-3679-b52d-df22c5320431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:98:1a:a7:fe:b8:dc:fa:65:dd:21:f5:82:0f:d8:fc:cf:ce:
         38:13:90:cd:02:c8:63:a5:08:dc:47:0f:55:fa:e7:c2:7c:4d:
         0e:32:42:a0:72:4f:d5:1e:ca:9d:b2:99:3a:a0:5e:e3:7a:5d:
         16:2f:c6:e6:56:02:0d:a4:c6:9d:48:3b:eb:a6:cf:9a:30:c6:
         5a:78:27:5f:66:f5:ad:eb:8b:c8:04:e5:af:8f:15:70:fc:ec:
         11:16:ac:ab:f3:18:4f:b0:4c:2d:e0:77:47:a9:b0:56:7c:90:
         70:f9:1a:3c:22:f7:dd:f3:08:f2:76:ad:9f:a1:49:5c:46:f8:
         45:a5:da:b8:65:29:b9:56:21:d1:ad:4c:95:80:f7:65:f3:85:
         30:40:30:58:7e:ad:56:d9:08:6d:7f:cb:23:27:39:f1:4a:63:
         e2:1b:a3:52:63:2d:c6:ec:38:a8:9c:60:16:3e:53:57:3b:e5:
         33:5b:14:2a:de:bf:63:cc:c7:72:2c:38:1d:b0:bd:dc:cb:16:
         25:d6:05:b1:61:e0:87:7b:71:65:f7:fe:48:26:aa:e3:72:76:
         e3:ce:57:24:66:8a:9f:37:f8:51:e1:29:24:3f:68:03:35:b2:
         74:1e:a3:99:1d:97:17:3d:9a:ed:38:0c:bb:ea:c2:77:f2:e7:
         d9:4e:f2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:43:25 2025 by rpki-client