Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/96c4df34-8a29-31c9-b8bc-4d1b10fdcd70.roa
File:                     96c4df34-8a29-31c9-b8bc-4d1b10fdcd70.roa (raw, json)
Hash identifier:          n1BHcOBaIkt5Q7fz4C/BYgdJKyrW2k4Uyeem2IgP8VA=
Subject key identifier:   49:8F:93:6B:64:3B:48:C6:14:E5:95:B2:91:57:FB:80:A1:FF:AB:2E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858498E6499DF15474672D8CF4D40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/96c4df34-8a29-31c9-b8bc-4d1b10fdcd70.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     41264
IP address blocks:        104.132.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:99:df:15:47:46:72:d8:cf:4d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=957b3272-f269-4f3d-8239-8e458594cba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ba:78:94:95:0e:a2:53:2f:dc:18:4c:d9:79:
                    b3:33:96:96:03:c8:32:8d:ea:0f:62:10:55:aa:18:
                    e8:b5:99:4b:3e:34:05:93:a7:74:0f:45:fc:a8:0b:
                    b7:5e:ed:69:5e:62:2e:a6:2d:63:af:3d:ba:6b:a0:
                    8c:a4:1a:11:22:2d:71:6b:40:72:40:83:63:c2:1e:
                    08:ce:21:89:ed:da:b3:81:09:0e:43:97:11:83:44:
                    7c:28:61:77:79:16:b4:e1:78:3f:59:bc:65:46:94:
                    91:45:dd:36:63:56:13:b2:d0:81:b1:e3:09:64:3c:
                    ab:47:ce:2d:a9:b7:88:f0:c5:e6:73:36:5d:85:88:
                    0d:a6:f7:69:8e:5a:0f:14:bb:bd:86:4a:5e:48:04:
                    cb:14:15:f8:7c:38:af:d0:fd:48:9e:97:54:98:b9:
                    1f:6c:b9:87:d6:db:b5:f4:64:f7:8a:4a:37:23:7d:
                    ba:ee:02:64:ef:05:78:63:9c:2c:52:f7:86:c2:ee:
                    70:f3:7e:60:75:f0:90:99:d0:39:e3:9a:e6:93:19:
                    26:cb:54:3e:a0:b1:dd:f1:33:9f:98:7c:f6:df:fc:
                    80:51:7f:cd:bc:a8:4d:d9:81:83:cd:38:c8:83:87:
                    34:ab:de:65:49:fa:97:d3:48:67:31:97:ad:d5:84:
                    57:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8F:93:6B:64:3B:48:C6:14:E5:95:B2:91:57:FB:80:A1:FF:AB:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/96c4df34-8a29-31c9-b8bc-4d1b10fdcd70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:a7:63:f2:06:9c:38:59:4f:3f:eb:7c:90:63:0e:01:50:15:
         b7:52:1f:5f:4b:07:93:c1:bc:39:ef:05:92:92:58:a8:62:e2:
         62:92:9c:29:9f:a6:c8:47:70:fd:1f:ef:70:df:68:c8:47:30:
         56:10:3b:8d:b1:f3:06:2c:53:b2:64:86:dc:b4:35:87:4d:ce:
         24:45:ad:5b:91:c2:47:d5:62:0c:86:b2:e6:54:4c:da:43:30:
         d1:66:3f:cc:73:45:dc:94:e7:21:f6:de:bd:4b:dd:d8:8c:0c:
         59:28:85:ce:27:d0:25:e5:65:40:3d:b7:67:44:22:40:0c:7b:
         e2:c8:dc:25:9b:8e:29:ad:d5:5e:b5:b8:7f:b7:e8:64:37:62:
         c8:cd:be:01:1d:ad:b3:e1:59:7b:70:6d:e9:a5:83:02:9e:82:
         2f:c8:51:72:9b:82:d2:6e:1c:cc:52:c4:71:f3:28:91:96:62:
         fa:f0:10:95:e4:78:65:2b:fa:91:d3:03:1a:4c:45:02:2d:2a:
         d6:a1:68:5d:50:d7:b8:4e:94:ff:dc:a0:b9:86:98:11:4e:00:
         7c:a5:09:d3:55:90:f0:57:ed:0b:2c:62:41:8f:bf:06:e4:f4:
         8f:c0:cf:f8:d2:83:2c:bd:da:bc:3c:89:aa:e3:33:65:b1:0d:
         56:5c:ee:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:56:22 2025 by rpki-client