Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/864f13b9-684e-3b25-9fd9-5f770c83fbb0.roa
File:                     864f13b9-684e-3b25-9fd9-5f770c83fbb0.roa (raw, json)
Hash identifier:          6Yl2KKnAsrcqUQyxvElUlWaZTCqNhroZDCZwqytkM38=
Subject key identifier:   93:2B:7A:8D:BC:E6:37:4E:86:3A:E1:AC:16:C8:BB:0E:41:A4:5C:6C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9F2ABBA61E9B6A70F8960
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/864f13b9-684e-3b25-9fd9-5f770c83fbb0.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     41264
IP address blocks:        104.133.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:f2:ab:ba:61:e9:b6:a7:0f:89:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=d7520a16-2581-4043-a36d-7b32b4e6be65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:37:ea:f5:9d:d4:d0:a9:d1:34:05:26:3b:
                    f8:48:ee:37:e4:94:6d:05:f7:57:e5:ef:e3:84:73:
                    d7:03:e8:35:1f:8f:8f:c6:55:9e:49:6a:4e:50:08:
                    12:a6:00:e1:28:c5:ec:9b:18:9d:09:96:63:fb:b6:
                    ee:ea:f8:c1:09:7f:a7:52:4d:ca:a2:4d:62:a0:20:
                    b7:01:84:b5:d4:24:e7:b6:aa:5f:b3:ec:49:b6:f8:
                    d6:3c:1c:11:a7:9f:01:bb:b9:a0:96:59:29:08:b3:
                    34:15:bc:88:77:6c:4b:f2:44:03:f4:ed:00:12:3a:
                    d9:a6:aa:4f:bd:a2:51:47:bb:12:6c:82:ce:f4:48:
                    e3:d8:7c:f9:b9:0a:d6:71:93:aa:0c:17:d9:e2:12:
                    c2:d1:62:86:29:b8:c6:d1:2b:88:ee:e8:70:a9:ab:
                    de:3f:cf:d9:03:82:34:93:63:16:07:0c:24:cf:91:
                    ed:00:bf:f9:17:aa:c6:2f:fa:05:ab:61:0f:7b:d9:
                    be:42:b6:bc:4e:53:91:2c:75:34:96:08:b5:6f:01:
                    e9:5f:e3:7a:30:68:8f:6f:76:ae:25:19:b5:aa:1c:
                    ed:fe:f4:bb:9d:6b:f1:92:28:c3:bf:93:b1:59:d9:
                    19:f3:d6:7f:37:4f:53:cc:68:4b:6e:71:46:b6:e9:
                    a2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2B:7A:8D:BC:E6:37:4E:86:3A:E1:AC:16:C8:BB:0E:41:A4:5C:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/864f13b9-684e-3b25-9fd9-5f770c83fbb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:38:cd:6e:8a:3e:a5:8c:b8:e8:22:0e:4e:34:43:ba:dd:07:
         fe:3c:b5:b4:a1:1b:ca:a1:dc:45:cd:26:d4:cd:7e:8e:7f:f6:
         b2:06:3a:01:af:53:d4:9d:5b:f3:12:71:cd:d3:27:99:11:61:
         fe:4e:53:96:88:e1:b5:d2:a3:e0:0d:54:3d:41:01:4a:1b:40:
         56:11:4c:7a:c7:e5:db:77:8e:1d:56:24:29:b2:e7:88:93:57:
         83:1b:c7:1a:f8:cb:68:f5:f1:33:a0:d3:10:8c:19:86:36:e2:
         67:0f:57:b7:51:b7:29:0a:98:d4:a3:8d:2e:07:cd:2d:56:ab:
         74:e8:65:fa:30:20:f4:5b:07:91:78:15:3d:c4:e9:18:e0:eb:
         3b:7d:92:38:ca:b0:b3:47:1d:cf:13:a3:89:23:84:5b:38:a6:
         bb:b5:15:8a:75:c0:54:23:5a:a9:a5:03:88:0d:0c:9e:fe:6d:
         10:7d:2a:82:1d:11:be:ff:f7:48:ee:03:58:24:be:6d:1c:11:
         d4:38:b5:16:7c:79:0b:84:ae:bf:4c:64:7d:20:87:a7:1e:94:
         14:a0:7a:04:29:e3:97:e6:f6:37:cd:06:eb:5f:b1:fb:5f:7e:
         56:cb:78:82:e7:9a:91:da:c8:98:52:fa:26:69:22:82:60:5d:
         0d:66:01:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:36:38 2025 by rpki-client