Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3809ba70-f6e1-36f0-84b3-ecf17c49014d.roa
File:                     3809ba70-f6e1-36f0-84b3-ecf17c49014d.roa (raw, json)
Hash identifier:          JQdLZmAXk38hw9OqL4d6S3TV29U3Zt2KW3Sr4WGpZoM=
Subject key identifier:   53:72:9D:A8:E6:75:48:05:1C:C1:31:39:3F:7C:0D:CC:FE:0B:44:A4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993FA07BFD27EDD647F952E80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3809ba70-f6e1-36f0-84b3-ecf17c49014d.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     41264
IP address blocks:        104.133.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:fa:07:bf:d2:7e:dd:64:7f:95:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=352c80a2-978d-44ec-a6ab-d74ac4c931e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6f:14:9c:e6:e3:9f:9a:ed:f2:bd:5f:bb:0c:
                    99:e2:00:88:19:11:83:9d:fe:c7:0f:dc:20:a3:21:
                    b0:7e:9b:86:b7:16:a9:7a:54:ab:08:a9:4d:9d:e5:
                    77:9a:3b:24:aa:68:21:77:18:78:d4:90:55:87:a1:
                    26:b3:5c:a8:57:51:dd:d0:92:af:5d:2e:22:aa:be:
                    7f:c3:f9:4f:92:3e:05:ac:20:c0:9e:66:43:65:43:
                    2d:76:5f:f9:45:cd:50:86:10:d5:96:e1:6c:49:6c:
                    93:b3:cc:b4:3a:73:dd:de:7c:83:53:2d:8b:04:d3:
                    07:45:50:2b:49:0c:cf:26:45:a1:90:19:5b:db:c2:
                    47:8e:45:f8:22:ca:8a:1c:d6:ae:ad:38:78:5a:6f:
                    f2:69:93:a6:c9:d7:be:46:f7:02:8d:37:95:65:ba:
                    04:7c:b9:c1:85:75:f9:2f:98:9f:8b:0a:e3:01:77:
                    b6:86:4b:ba:5d:64:83:4f:81:55:be:1c:5b:c0:ee:
                    9e:64:4d:85:84:73:2f:01:87:e9:c7:c9:d6:32:6b:
                    6d:15:76:25:1a:90:2c:6d:fe:d3:7d:a8:40:42:7c:
                    63:a1:dd:8e:8b:b2:e1:79:d8:93:a0:d6:92:95:2a:
                    ca:18:21:ab:f3:d6:f1:51:07:85:3d:49:60:e3:87:
                    0f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:72:9D:A8:E6:75:48:05:1C:C1:31:39:3F:7C:0D:CC:FE:0B:44:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3809ba70-f6e1-36f0-84b3-ecf17c49014d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:fa:12:8d:b2:22:22:29:7e:1f:cf:41:83:d0:80:e7:d3:c3:
         f5:b2:37:17:8d:19:77:28:e4:b5:cd:86:da:d6:d7:69:57:1b:
         23:11:9c:53:de:8e:36:5b:58:15:6c:7a:9c:70:25:c8:48:46:
         9b:42:0a:33:eb:87:04:fe:33:cf:41:55:f2:72:14:36:4b:d1:
         aa:64:3b:c7:01:9a:ba:32:5b:14:f8:6c:0f:4f:f2:79:78:67:
         e3:ee:be:66:2f:9a:3f:91:73:e6:4d:e2:a4:03:95:6c:1f:24:
         f7:dd:2a:41:20:6e:21:df:37:e3:d3:7e:7c:b4:18:37:01:6d:
         07:a6:34:d8:64:4a:c9:63:e8:6c:f2:c0:d4:ae:d2:7c:58:3a:
         f1:ba:a1:36:82:e5:60:9a:eb:2d:72:5c:17:7a:d8:c0:af:fd:
         09:c7:fe:51:e2:54:38:b5:69:52:88:ca:cf:73:0a:59:e4:8a:
         3a:fa:74:24:0f:0d:56:7f:c4:3c:50:ea:66:0b:c1:91:89:c0:
         60:45:6f:f5:62:9f:1e:78:49:c8:be:64:19:aa:23:e1:58:dd:
         a0:d6:e8:48:95:10:4e:8b:bc:01:c9:ac:86:c4:8c:db:66:8f:
         f9:05:5d:24:1e:c0:5c:aa:02:64:86:c8:73:0c:eb:d0:f2:5a:
         8a:70:e3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:46:06 2025 by rpki-client