Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8fd8eff3-3334-3717-84f8-e558f2c0775f.roa
File:                     8fd8eff3-3334-3717-84f8-e558f2c0775f.roa (raw, json)
Hash identifier:          r9ErJtdCClEhqAO23/I/8wvNBu8kpChdYt9D/XPb/ps=
Subject key identifier:   0E:C9:4B:0C:D5:A8:DF:F9:6E:68:BD:01:08:F8:CE:B0:32:7C:3E:B2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F55DF1A1A543E75F28700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8fd8eff3-3334-3717-84f8-e558f2c0775f.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:55:df:1a:1a:54:3e:75:f2:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=69e5b2a2-4426-4bbe-9a5f-50a7abe38f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:f3:72:34:ed:1a:12:09:42:c7:79:b9:a9:
                    38:8b:53:51:2f:d7:d5:53:e2:9c:8d:4b:77:d8:89:
                    40:b5:6c:4f:6b:f1:54:23:43:33:1c:bc:87:26:2e:
                    a3:82:5c:5f:b8:80:bf:ca:d2:8a:e2:44:3e:c7:bd:
                    59:d7:77:7b:e9:49:7f:8f:31:2e:7b:60:f3:c0:e4:
                    35:57:d1:1e:4d:62:00:b9:29:19:4a:5e:f5:f9:33:
                    39:7e:d9:49:dd:cd:cc:92:40:25:8c:5e:ef:88:71:
                    5e:a0:34:b6:b8:c2:00:11:0d:75:9f:4f:98:1d:5f:
                    a6:ba:af:6f:7e:d7:5b:8b:7a:06:10:f4:48:53:b4:
                    27:e1:1d:41:a8:b1:e5:8d:7a:00:0a:ea:05:22:20:
                    90:9a:36:59:fb:8f:ac:b4:9f:9f:84:16:e4:0c:3e:
                    4d:03:05:06:9a:a1:07:e9:4c:46:91:ac:17:c1:7f:
                    b9:7a:6b:1b:ea:6e:99:92:7b:82:d3:1f:aa:fc:18:
                    a0:32:0c:88:41:9d:54:a4:d9:67:6c:21:fe:cb:d9:
                    57:e4:5a:18:1f:9c:f9:c2:47:f9:08:0e:3b:25:dc:
                    38:f2:e1:b7:84:4c:0a:75:96:93:1e:99:6a:7f:87:
                    c1:60:1e:a7:64:f5:12:e6:2c:a4:35:34:dc:a2:f9:
                    89:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C9:4B:0C:D5:A8:DF:F9:6E:68:BD:01:08:F8:CE:B0:32:7C:3E:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8fd8eff3-3334-3717-84f8-e558f2c0775f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:0b:c2:4d:8a:62:bb:ad:e0:e7:5d:c0:7d:41:28:ac:f7:11:
         4f:ad:1b:78:1b:3a:90:bc:d3:e1:a3:14:ba:85:ff:bd:96:03:
         66:4e:ba:b5:d3:9c:3e:55:0e:d0:e4:23:2a:d2:f4:bd:b0:4a:
         3d:2a:12:65:25:5d:ed:f3:33:f2:39:f9:4d:8f:f1:3b:6a:03:
         0d:a4:51:c8:bf:3d:7c:ca:50:e7:f7:7c:2e:6e:ab:fa:71:aa:
         82:54:fd:04:23:32:28:dd:5c:94:cb:5c:7a:85:67:4c:82:64:
         8a:ca:cc:57:1f:bf:e5:00:3a:a9:41:c0:c6:ed:1e:90:39:82:
         d4:ea:7f:6d:3c:2a:c0:25:2e:f6:f3:35:8e:5f:80:6f:9e:56:
         4a:0b:63:84:1e:5f:d3:63:58:90:d3:48:a9:65:b5:f1:52:09:
         51:b0:c6:fe:ff:85:8e:19:3c:8d:b2:ec:d5:dc:d2:9a:c4:ea:
         14:99:88:58:3e:ee:97:c6:b4:11:2d:95:06:44:48:55:6d:4b:
         ed:1a:80:e7:5e:fb:ad:f8:8d:a1:39:59:2c:0d:ac:f2:09:eb:
         a5:d0:82:ef:72:9e:ab:08:fa:ea:22:b2:09:e3:06:15:5c:3c:
         1b:ce:f4:86:7d:78:4a:e7:3f:0e:67:db:5b:75:55:bd:2b:18:
         9a:de:a2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:45:15 2025 by rpki-client