Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4268df17-96c8-3b1f-b764-7fdc745f282b.roa
File:                     4268df17-96c8-3b1f-b764-7fdc745f282b.roa (raw, json)
Hash identifier:          o26olHx1pB1zFQV0oqYRMcM6hPQGfaVW6XQ8TO++YSM=
Subject key identifier:   E9:A9:34:D1:21:86:3D:27:8E:2D:CB:B9:92:E3:7E:8C:72:05:DB:3C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F4595C398348C800D9F40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4268df17-96c8-3b1f-b764-7fdc745f282b.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     396982
IP address blocks:        104.133.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:45:95:c3:98:34:8c:80:0d:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=281dc639-73b5-4d0d-8be8-17db5fa58b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:20:1b:c6:da:54:ac:e9:2f:57:c7:f6:95:ac:
                    4f:29:66:5c:16:23:88:20:59:76:72:b3:68:7d:5c:
                    80:f1:cd:71:33:26:ea:c5:a8:10:89:76:81:bf:58:
                    a9:69:a8:d0:70:d6:69:83:6a:c1:c3:3a:4e:45:59:
                    63:fd:c8:01:cd:b2:68:ab:86:75:87:8c:23:1d:50:
                    b0:a5:f0:95:74:2a:c7:6c:97:df:b5:ff:53:46:ca:
                    07:b7:61:70:4f:05:78:20:50:7a:90:76:72:e2:48:
                    31:00:03:83:ca:57:2c:78:32:b5:9e:74:b4:aa:60:
                    83:db:a9:27:0a:5a:43:7c:95:83:47:a6:cb:92:29:
                    11:79:bc:50:39:eb:f9:34:f4:ce:41:2c:02:e7:09:
                    9c:d3:f8:56:59:1c:c5:cc:6e:e7:38:27:32:c7:b7:
                    1d:95:93:13:73:37:df:cc:07:c1:13:9d:19:47:88:
                    71:0f:e4:c8:f4:ca:61:03:07:61:48:f8:8c:20:27:
                    4d:79:ba:0c:a6:13:97:e2:a5:ae:13:7b:da:3e:21:
                    90:83:cb:de:a2:42:02:bd:74:b5:9d:96:0d:d2:dd:
                    bd:ae:bc:db:40:bf:f3:03:d5:f0:5e:ce:fa:6f:a8:
                    ef:1b:b6:ef:b3:63:09:05:79:ac:3e:44:d3:1b:59:
                    52:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A9:34:D1:21:86:3D:27:8E:2D:CB:B9:92:E3:7E:8C:72:05:DB:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4268df17-96c8-3b1f-b764-7fdc745f282b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:03:65:0c:89:3e:a5:bf:fe:49:58:56:2a:ac:25:91:30:be:
         1b:fb:ee:fb:2c:92:0a:98:41:5c:74:44:a7:50:f1:b4:eb:fe:
         ea:a9:7a:84:80:14:9c:26:1b:1a:8a:00:af:ce:8d:a7:44:2a:
         87:d9:2d:7e:02:e2:c2:e6:6f:c4:d7:55:43:8a:4a:3c:67:16:
         08:2b:ce:d6:98:bb:de:92:f2:52:38:12:dd:73:a9:c6:b7:c6:
         e0:06:7d:c0:a8:62:24:f5:77:82:4b:5a:ae:15:c9:0b:7d:70:
         d4:61:94:7d:87:fb:f9:d5:92:54:2b:f1:1d:fe:5b:98:76:5d:
         67:fc:92:fc:d2:4c:a1:e5:90:f0:47:87:ed:67:27:a5:c3:61:
         5c:5d:ad:fd:02:de:4f:ec:ec:74:de:b2:5a:73:02:ed:f0:94:
         ff:b0:fb:fc:76:95:e3:5c:61:3c:44:7f:92:f7:9a:53:ef:b7:
         b2:e7:a4:af:b5:9f:cd:67:62:3e:fd:07:2c:c1:e6:86:ee:c9:
         ed:0f:e4:f4:16:1d:83:27:75:70:db:94:31:89:b0:e3:90:b8:
         76:06:ed:08:f3:4a:5b:e1:8b:1a:30:40:04:d1:c6:2b:7a:e1:
         6a:81:1d:5f:50:06:a7:16:06:4e:8b:01:86:08:b4:1d:fd:b8:
         8b:7d:9d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:50:18 2025 by rpki-client