Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/71a7ba9c-8502-3515-8db2-433776b27f44.roa
File:                     71a7ba9c-8502-3515-8db2-433776b27f44.roa (raw, json)
Hash identifier:          dnKmNTEgImfH/2L69to0nlCDT7bsG+gXFxBDWxZ4V10=
Subject key identifier:   13:6C:D7:3D:5D:C9:36:B5:7A:2B:21:64:7C:76:04:89:3F:CA:EA:14
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F52B274C3931C8D11F600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/71a7ba9c-8502-3515-8db2-433776b27f44.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:52:b2:74:c3:93:1c:8d:11:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=8076bb59-071e-4824-ae12-4265a563a754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ee:09:21:71:b0:2e:f7:32:5c:04:58:aa:f5:
                    94:80:df:05:18:bc:f7:e7:21:47:4e:d3:ac:0e:e8:
                    5e:16:50:bc:92:39:47:b6:42:6a:90:fc:6e:9a:c1:
                    60:2a:88:ce:d4:27:2f:f5:63:ca:1d:97:24:4c:f9:
                    8c:ce:56:31:23:e8:cc:b3:97:72:f4:a5:ad:b2:84:
                    f9:4b:8e:bf:ad:7e:c1:5f:1b:6f:37:7f:34:9e:50:
                    ee:57:f3:39:9a:78:e3:2d:d4:cd:13:3c:2e:02:b9:
                    5d:cc:fe:f4:0c:05:0a:0d:40:94:9c:dd:cb:4a:fb:
                    72:67:63:21:06:3d:7e:a1:9c:4f:43:ce:69:84:69:
                    35:5b:63:fe:b1:01:02:d8:72:46:af:ac:00:15:9b:
                    92:4f:2e:bc:24:74:0f:b3:b1:e7:f8:84:42:45:df:
                    05:4b:7f:d3:fb:13:34:d6:c4:3f:7c:67:f7:36:6c:
                    7e:c1:30:b4:7d:b6:c4:83:f1:e4:c5:c0:7d:86:a6:
                    0f:0e:e7:01:42:d0:b2:10:f7:2d:14:ee:f3:80:70:
                    ef:d2:0e:88:b3:8f:47:1f:fb:43:7a:f4:05:9d:68:
                    5c:f1:a0:8b:53:f4:0f:ba:bd:78:54:93:11:bf:75:
                    d6:61:fd:4e:f2:5a:a5:90:33:91:98:4e:7d:29:7d:
                    fa:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6C:D7:3D:5D:C9:36:B5:7A:2B:21:64:7C:76:04:89:3F:CA:EA:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/71a7ba9c-8502-3515-8db2-433776b27f44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:1d:9c:17:f8:b9:26:b8:89:70:b8:af:cd:69:c0:39:b6:97:
         9b:91:b1:73:d7:f7:35:2d:a1:15:10:3e:2c:59:69:ea:f0:48:
         5c:1d:42:fd:8f:f6:00:7d:80:5f:e3:69:58:11:fe:41:48:11:
         ec:41:c6:13:45:e9:20:b3:38:81:b2:76:65:b0:98:74:f3:0f:
         fc:60:18:74:e0:7c:fc:4f:13:25:81:6b:52:29:cd:08:72:0e:
         cb:dc:00:2b:68:a5:40:8e:c4:d8:e8:02:9e:34:e4:f6:35:9b:
         44:75:dc:6c:2e:0a:0a:0b:03:8a:a2:6f:cd:49:ea:e3:bf:1c:
         40:df:26:76:74:61:b2:d9:9a:d3:d6:f7:8b:af:c5:45:d1:e1:
         2d:74:f3:b3:65:83:03:57:77:92:f9:d9:46:8d:40:d7:ba:9c:
         a3:dd:9e:c9:f2:56:7e:42:09:09:12:37:26:85:7e:40:72:e9:
         a6:b2:02:e2:80:53:48:a9:e3:b0:78:9c:f1:22:b0:3f:57:19:
         80:41:a4:d0:b5:07:2e:98:21:7d:05:c4:40:26:4c:50:31:b5:
         14:a7:cd:6b:0b:29:dc:06:e7:57:88:6c:2f:48:9e:51:38:5e:
         64:41:26:e5:e5:31:c5:9c:5d:f0:08:2f:a1:ff:53:2f:b0:fc:
         77:f8:cf:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:00:13 2025 by rpki-client