Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5d37d775-60b6-3270-ba58-7cac81e448f8.roa
File:                     5d37d775-60b6-3270-ba58-7cac81e448f8.roa (raw, json)
Hash identifier:          KiCd2bIqQbUp/Js2+/x2oTq2d0ROunlmrGNQXsjxYVY=
Subject key identifier:   88:79:F7:DF:7D:03:B4:6A:AE:81:81:D6:6E:00:37:F8:4C:35:DD:7A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F48719F6D57C281D20980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5d37d775-60b6-3270-ba58-7cac81e448f8.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:48:71:9f:6d:57:c2:81:d2:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=49666748-9d7b-4754-b1b8-3915e50e8327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b0:b0:24:a8:67:12:3f:33:ea:ab:d5:b1:1d:
                    4e:2e:da:35:95:42:5a:cc:5c:0f:d8:84:3f:ff:2e:
                    39:db:ac:7c:97:f4:bd:a0:0f:3e:d8:63:ad:3b:b1:
                    b7:44:2d:33:97:4a:bf:47:61:a3:e2:d8:5d:67:bd:
                    f6:6f:d2:89:63:a8:ae:3b:6d:c2:9c:26:36:71:f9:
                    68:19:c1:22:af:4f:47:10:0e:f7:26:09:b4:61:a1:
                    f0:2c:64:32:1d:65:ca:cf:3c:59:43:02:83:50:71:
                    b5:0f:5b:25:dd:18:4f:44:43:5c:25:6a:4a:70:c8:
                    b7:30:81:17:30:cb:69:65:33:4d:5d:78:1a:30:7a:
                    b8:70:b7:e1:2c:20:93:17:1a:c3:64:4c:8a:ba:7a:
                    28:51:9a:82:2c:ea:3f:2d:c1:06:a7:0a:91:22:55:
                    80:87:28:2a:8d:25:91:00:ff:3f:1c:28:a5:31:61:
                    54:3f:32:6a:a9:3c:cd:04:27:a0:4f:e2:b8:44:69:
                    1f:02:de:66:df:7d:5c:f1:55:14:90:27:26:fc:85:
                    39:0e:41:90:99:8b:6c:29:4e:b2:da:47:bb:ed:b5:
                    e9:38:e3:d7:23:d0:cd:42:71:84:b4:f2:66:c1:f6:
                    88:f8:21:16:f3:21:5d:42:83:ca:e1:b6:4d:b4:09:
                    e2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:79:F7:DF:7D:03:B4:6A:AE:81:81:D6:6E:00:37:F8:4C:35:DD:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5d37d775-60b6-3270-ba58-7cac81e448f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:6c:44:5b:69:c1:bf:6d:ef:b2:07:de:4e:93:86:bc:42:20:
         61:0e:cc:5a:af:f5:a1:a7:6a:b9:96:fa:a5:11:42:2a:ca:7a:
         be:3d:3a:52:00:22:90:1c:30:53:ee:3a:db:13:a5:50:ad:4e:
         10:c6:e3:ab:c1:6c:10:5a:bb:00:ea:5c:fa:42:e4:45:20:b3:
         4c:0b:e6:07:4f:7e:18:14:50:35:84:17:90:30:06:23:fc:23:
         a3:16:8e:ed:2e:01:c1:18:d9:30:d4:0a:ed:28:b3:76:31:fc:
         4a:13:58:1a:31:e7:0e:20:7c:ee:0a:7c:8e:e2:23:99:6c:96:
         6e:5a:c4:b6:b2:3e:4b:76:b8:28:2f:7c:ab:7d:18:e5:da:c3:
         ab:64:99:a0:55:aa:93:92:9f:23:08:f2:6b:87:bb:9d:73:03:
         9a:57:a1:60:45:95:78:b3:73:d0:10:8e:54:c5:6c:fd:67:ab:
         df:22:ed:8d:0a:ac:6e:7d:03:3d:a0:10:92:0c:f6:0f:4a:fe:
         24:6c:f5:80:8f:94:75:2e:1b:c7:e6:1c:21:36:71:e5:f9:14:
         25:89:1c:0a:75:4b:de:b9:d9:aa:bd:9c:99:63:61:06:ad:9a:
         45:c8:a6:21:12:51:58:76:2e:03:e1:5f:55:69:36:f6:cf:ee:
         17:23:15:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:20:53 2025 by rpki-client