Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9b227b35-e6e6-3308-97bd-ca6b9e0a3bdf.roa
File:                     9b227b35-e6e6-3308-97bd-ca6b9e0a3bdf.roa (raw, json)
Hash identifier:          EuctVAzy6HbkrGqOtVIUdgpv+wYTUwWjF0D+nPZj0i0=
Subject key identifier:   F8:53:09:76:9E:16:2D:AF:CD:6E:75:2F:CD:D5:6D:F3:4D:E5:BE:B9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993FA0A48B9054DBC909172C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9b227b35-e6e6-3308-97bd-ca6b9e0a3bdf.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     41264
IP address blocks:        104.133.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:fa:0a:48:b9:05:4d:bc:90:91:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=493ee42c-57c1-454a-96ef-745438b2a821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5e:7d:cb:28:9b:77:e8:31:a7:84:4a:b5:61:
                    cf:9f:c3:27:ec:9d:70:d1:e4:f8:8f:dd:11:90:61:
                    ee:c3:43:57:f1:06:46:de:7e:d7:a8:5b:d0:10:76:
                    ea:a7:b9:c6:af:80:a5:a0:f7:5f:3b:cd:e5:07:16:
                    4a:42:a5:62:97:76:a4:1f:6a:e0:49:6d:52:7f:64:
                    d2:a9:eb:9c:5d:c8:df:5b:59:f9:22:52:71:fa:c8:
                    57:cf:d2:44:fc:33:93:5d:a0:62:18:6f:92:4c:3d:
                    dd:c2:03:fe:8c:32:aa:b4:b0:17:92:75:6a:1e:c0:
                    40:1c:33:a4:38:ff:5b:68:94:4a:47:4c:6f:3b:f0:
                    18:fa:f2:63:88:e3:06:84:0e:ff:d0:72:2e:c0:8f:
                    1c:c9:45:36:75:d2:e9:0f:76:cb:c3:1c:00:87:91:
                    63:c2:78:ae:47:9b:a8:41:c8:4c:72:23:0c:2a:c7:
                    d3:50:d0:da:f3:54:a2:f5:62:19:51:28:d3:60:34:
                    1d:3e:66:1e:24:d5:9a:67:c0:a0:30:8e:5f:8d:b1:
                    b6:2b:a2:79:92:c8:f9:cb:85:d9:ae:de:69:0f:41:
                    53:9d:de:56:dd:c6:49:68:73:02:aa:4b:1b:d9:f9:
                    f4:e3:d6:3f:db:05:c4:70:97:ed:71:0d:fc:7f:9b:
                    85:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:53:09:76:9E:16:2D:AF:CD:6E:75:2F:CD:D5:6D:F3:4D:E5:BE:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9b227b35-e6e6-3308-97bd-ca6b9e0a3bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:2b:d1:53:a9:67:d3:71:bb:b2:d3:de:4a:6f:56:3e:dc:f3:
         b7:27:37:a8:d4:7a:8d:98:0d:1d:70:b6:c0:68:ed:fd:05:53:
         47:51:38:af:ac:7a:8d:3d:a7:4c:fa:8d:dc:9b:29:43:dd:12:
         65:6a:1b:29:a0:91:47:78:68:6c:f5:5b:84:fc:ef:3f:7c:1a:
         08:4a:a5:e7:a8:96:fa:c9:b2:c8:42:22:fb:95:c8:19:d9:11:
         67:a4:a3:7d:e2:59:a0:4c:53:8b:42:6a:9f:9a:63:0c:de:e2:
         e6:f7:20:33:94:0c:30:63:04:14:4d:38:8b:a3:2a:51:02:f8:
         d3:73:80:70:d6:9d:e9:9f:e0:f6:a9:89:23:94:cd:a6:5a:5d:
         15:c5:0e:07:f1:4b:03:bf:fe:9a:c1:88:58:44:c9:30:7d:05:
         7c:2a:d9:d6:68:a1:39:aa:f4:12:de:76:c2:8b:97:84:c2:61:
         c1:82:fd:3b:68:83:5b:da:1b:78:4c:83:f9:c3:8f:23:fe:c3:
         23:bd:68:ec:8c:ab:c7:6a:57:01:ce:35:99:09:6d:fe:1e:d0:
         85:99:90:3c:d0:5e:d7:54:af:be:b8:0b:ce:60:2e:50:8c:36:
         c3:90:88:4f:22:ec:5b:76:22:a0:25:c2:e7:54:7d:3c:15:65:
         51:d5:3d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:10:16 2025 by rpki-client