Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/adc238fe-2275-3c01-99ce-701d864813d1.roa
File:                     adc238fe-2275-3c01-99ce-701d864813d1.roa (raw, json)
Hash identifier:          7OAG7YBhHJ++07kn3e9Gk6D+RfMrbYZuqN18cchZv70=
Subject key identifier:   97:C1:57:E3:E8:37:7F:00:61:76:B5:AB:0D:08:57:14:DF:EF:A7:90
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F520A7129CDFA5EB62980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/adc238fe-2275-3c01-99ce-701d864813d1.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:52:0a:71:29:cd:fa:5e:b6:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=dbd3208c-55f5-4823-b348-adbf21e918b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cc:66:a7:db:44:dc:cd:4b:e2:c0:8a:43:65:
                    86:5f:c9:a9:b3:db:d2:79:b6:cc:3f:83:7b:62:c0:
                    59:42:2e:af:df:86:58:9e:74:4f:1f:6e:64:ef:e3:
                    66:bd:10:70:1a:47:3c:b7:07:54:08:3c:6e:61:70:
                    c2:2b:78:7b:84:9b:43:c6:f8:c8:06:7d:13:c1:12:
                    92:0c:03:c5:56:75:85:48:b7:0a:47:9c:37:f6:f4:
                    a4:7b:69:a1:b4:b2:54:34:23:45:52:05:79:27:39:
                    87:5e:f6:e5:ea:f2:03:4b:b1:b5:08:f1:d1:70:37:
                    bf:4d:9d:44:8a:11:28:38:2f:e9:0d:24:d0:a4:82:
                    93:3a:dd:76:9d:dd:e2:24:52:de:dd:c8:67:a7:19:
                    6d:f6:4b:bb:01:6c:3e:d1:0f:71:d4:1d:29:11:61:
                    7b:a1:c1:bd:b6:50:f3:69:7c:e3:0c:cd:b7:1d:8b:
                    3c:6e:ca:25:70:cf:f1:31:23:2d:df:a1:c9:2d:13:
                    00:4b:40:19:13:e1:d5:fa:84:20:45:11:37:ab:28:
                    d8:88:82:31:16:fd:38:32:2a:42:a9:28:a9:32:45:
                    84:85:9f:6a:28:ab:6b:9a:15:66:23:83:83:dc:9d:
                    45:82:66:01:e1:58:20:6f:90:88:76:5b:5b:d1:01:
                    cc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C1:57:E3:E8:37:7F:00:61:76:B5:AB:0D:08:57:14:DF:EF:A7:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/adc238fe-2275-3c01-99ce-701d864813d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:3c:91:07:af:44:13:f9:34:0c:ab:ff:94:3b:34:db:b3:54:
         b3:0a:85:bd:ef:15:a2:00:89:50:26:ea:7d:66:50:49:f4:22:
         0a:db:3e:02:93:c3:5d:25:fd:3c:84:e4:83:83:13:90:cf:d3:
         ed:51:f0:41:82:d0:99:54:93:8d:1a:a4:96:09:06:44:08:52:
         4d:6a:20:43:c7:cb:08:f8:db:25:37:c7:58:9f:df:5d:fa:32:
         a3:a2:1c:ed:ca:b3:a5:e4:8d:6e:66:be:ab:4c:a6:75:07:2e:
         f9:36:9b:0d:b7:9e:1a:42:9a:7f:b5:ce:e8:cb:f7:47:e6:f9:
         52:26:34:3c:f6:62:e2:9c:25:4b:8c:6f:9b:2a:e9:6b:03:f8:
         31:f1:5d:27:dc:7d:cb:27:91:eb:5a:5a:8f:20:ae:3b:94:9c:
         84:a0:0a:c3:2c:a5:90:48:4a:e6:d8:3d:79:e9:74:fd:ba:92:
         bc:94:30:21:85:06:5a:b6:06:18:f7:26:da:73:4b:5a:50:2d:
         36:d0:32:af:f2:1d:6a:9e:45:56:69:1d:b5:43:59:82:d8:df:
         38:7a:6a:6b:fd:8b:42:9a:b0:ab:64:aa:6c:fb:f7:0a:75:1c:
         17:59:cd:5d:34:f1:14:21:45:60:18:af:f0:ec:bc:0b:38:2d:
         1d:07:b1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:21:45 2025 by rpki-client