Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41a42974-c911-39db-a56f-b1d69a819cf5.roa
File:                     41a42974-c911-39db-a56f-b1d69a819cf5.roa (raw, json)
Hash identifier:          9CnYtVxtk3ow9QR4HfeytcgkcdI4HLBWGo+rjd2gxMk=
Subject key identifier:   4E:A9:12:B4:26:35:A4:14:2B:7E:59:F6:D7:0C:BA:18:54:99:5F:D9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9F4F4B30F83E448FD8900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41a42974-c911-39db-a56f-b1d69a819cf5.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     41264
IP address blocks:        104.133.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:f4:f4:b3:0f:83:e4:48:fd:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=88716d4b-9669-4136-a8d2-f7e015fd8ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3b:7b:5b:30:1a:56:f2:bd:5e:e3:f9:1f:bf:
                    ba:11:ab:5d:14:1d:e9:b5:79:a3:07:9e:b8:2a:ae:
                    39:29:13:5e:86:d5:2f:15:ce:20:d6:15:43:72:c6:
                    ea:fa:1f:fb:aa:d5:25:d6:58:e9:b3:9f:d2:18:ef:
                    ba:f4:ca:81:0b:e8:6a:81:2f:25:e7:8c:90:f8:ed:
                    ee:7e:39:33:c0:e2:27:f7:86:17:28:f3:dc:fa:c7:
                    a4:d8:11:4c:d9:29:da:13:72:cb:97:10:a3:4c:6e:
                    5a:1b:93:ff:67:50:93:ab:da:83:3d:3d:05:5e:e1:
                    48:c6:bc:04:13:6b:37:45:7c:01:b1:6a:90:98:92:
                    79:7f:2b:bc:46:f7:ea:6d:30:02:47:c4:3f:9f:36:
                    36:19:45:87:60:c8:ce:4b:d6:8b:a4:73:6c:8c:11:
                    62:3b:c1:a5:bb:06:59:69:bd:9f:28:4c:e8:21:84:
                    45:fd:5a:83:b9:56:6b:b2:33:a7:4e:3d:3f:c1:c5:
                    7e:89:4b:e9:dc:c3:b4:91:d8:b4:9b:4f:37:80:99:
                    de:7a:cb:b0:0f:0e:d2:cf:d6:66:c4:3f:ec:78:18:
                    dd:1d:d1:4d:67:8a:dc:72:a0:58:09:5b:e4:f4:37:
                    57:da:97:69:70:1b:5e:c4:6e:1a:8a:e3:0c:d8:a6:
                    cc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A9:12:B4:26:35:A4:14:2B:7E:59:F6:D7:0C:BA:18:54:99:5F:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/41a42974-c911-39db-a56f-b1d69a819cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:09:f5:05:02:85:00:e0:8b:6a:18:b3:b9:71:77:0f:b5:0c:
         0f:7e:f1:d7:6c:83:01:16:c0:61:6c:a2:1c:4a:cf:af:07:35:
         3e:fa:29:5e:7f:63:b9:23:5c:19:17:41:89:ca:15:b2:1f:06:
         2c:85:3d:af:73:e2:4f:1e:ae:ef:53:36:c2:87:da:87:66:e8:
         9d:b6:3f:60:74:fb:0d:6f:a9:45:a2:e1:e2:13:35:2c:6e:58:
         4d:86:e9:98:0c:f4:7b:81:53:f0:56:d6:46:1f:eb:f1:1e:a2:
         f8:5f:ba:58:74:47:25:b7:48:b1:ff:34:b3:bb:d8:6c:68:5d:
         c8:26:2e:16:17:2e:f2:2d:fb:6c:b2:fd:f1:70:7b:49:2f:1a:
         f9:63:d2:c8:75:3e:e5:81:05:15:1d:7e:eb:16:91:2f:2a:80:
         a4:46:a8:26:c3:5a:fc:da:16:51:c4:06:6b:08:8b:4c:02:d7:
         68:da:ec:cd:d9:30:3d:85:d9:cb:06:e5:40:8b:11:82:22:35:
         0e:16:c3:ad:83:cc:dc:f5:64:78:0a:34:6a:9b:d8:dd:ef:ea:
         a3:71:1d:0c:54:07:8d:63:0e:1d:88:59:2c:5c:36:cb:5b:21:
         03:21:65:43:85:9c:bf:d3:c6:51:7b:a3:b6:bd:23:35:80:ff:
         9d:b2:3e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:20:26 2025 by rpki-client