Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b01b4255-7d87-3a32-b6fb-0ef4a70657ff.roa
File:                     b01b4255-7d87-3a32-b6fb-0ef4a70657ff.roa (raw, json)
Hash identifier:          G1GmhNjcg7RUuEgaSqkY956+FjEbakhD14WJNlxzvh4=
Subject key identifier:   63:D0:81:CB:08:C7:40:03:72:5E:39:AA:89:B5:4A:07:DF:28:32:F1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993FA03B46D4C177292A79E80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b01b4255-7d87-3a32-b6fb-0ef4a70657ff.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     41264
IP address blocks:        104.133.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:fa:03:b4:6d:4c:17:72:92:a7:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=ce1d089d-b2cf-4a0f-9967-97ccb699e555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fc:1d:14:22:9a:bc:80:ca:9f:5d:f3:52:44:
                    a1:5c:81:e2:5f:a8:6c:1a:fe:fb:ac:97:ee:0b:b9:
                    02:42:db:47:7c:2f:c8:7e:63:5f:42:b1:ec:8c:4f:
                    76:fc:c1:08:e6:e0:58:b1:63:ee:33:c1:9f:c3:97:
                    b4:01:3b:f2:cd:8e:c5:a3:b8:75:25:7d:14:8d:69:
                    29:89:53:54:b2:d1:a7:60:da:01:34:51:a2:d2:ba:
                    40:13:99:26:f6:23:2d:b9:5d:48:ff:bd:7e:b7:dc:
                    6d:6c:fc:90:57:a4:b5:9e:93:c8:ec:1c:0f:10:c6:
                    ab:0a:29:c2:e6:cb:f1:4e:dd:12:66:ea:eb:a9:a5:
                    f5:de:e8:43:1f:7d:0e:c8:95:55:8d:16:36:e0:43:
                    dc:21:4c:b8:d6:44:53:28:6f:cb:d7:88:25:27:08:
                    2c:ca:00:0c:87:26:a7:4f:b1:fb:4c:8c:a2:b3:73:
                    53:81:3e:c6:db:2f:6d:5b:34:db:04:a6:e2:05:0a:
                    1c:61:6c:8d:63:3e:f4:5e:8e:19:29:8d:5b:27:10:
                    ab:54:50:22:59:a5:7e:21:c1:0a:2a:9e:ce:83:4e:
                    27:c1:61:39:b4:ff:c2:a5:56:d0:c4:79:6e:1d:ec:
                    79:33:2c:7c:d8:98:83:9b:d7:70:0f:a4:ff:17:a8:
                    1e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D0:81:CB:08:C7:40:03:72:5E:39:AA:89:B5:4A:07:DF:28:32:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b01b4255-7d87-3a32-b6fb-0ef4a70657ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:ee:a9:21:52:35:49:2c:f7:38:f8:69:12:c1:b4:cd:90:27:
         a3:48:75:02:61:c5:5d:67:d4:c8:ab:9b:73:1a:43:68:f6:16:
         9b:78:cb:c6:6b:3a:71:af:6b:84:91:dd:99:34:7f:ee:ae:97:
         31:2e:28:61:eb:10:e2:79:be:b4:78:50:f5:ec:a5:20:a2:b9:
         d6:64:be:d2:33:6c:ca:ba:72:05:1d:2d:0d:35:92:c9:7d:f8:
         34:ec:9d:a6:91:a2:8f:e7:64:e1:98:b6:77:c7:7d:9e:67:d8:
         f3:68:1f:8b:c7:27:81:3c:7a:3a:6d:d9:37:6b:28:a9:5b:85:
         e6:b3:b1:97:30:9f:73:8e:b5:c1:4e:a8:dd:3c:21:3d:e8:25:
         bc:9e:03:29:4b:61:8a:ec:cf:05:5f:92:fe:46:5a:e3:a6:0f:
         4c:b0:7d:da:3a:43:f9:87:97:3e:18:2b:81:34:86:68:97:ea:
         4f:5f:59:f9:5d:d1:48:57:04:ae:2d:70:0b:3d:e7:48:ec:9a:
         65:9b:4b:9b:dd:70:c6:02:d9:a5:87:20:1a:85:6f:82:ec:d0:
         62:8c:bf:d2:52:66:0b:5f:d2:04:26:d0:a4:65:e8:08:ff:5b:
         08:ab:f0:f5:4f:e3:3b:dc:73:92:cc:67:ef:fb:fd:47:e7:ea:
         39:c3:e5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:38:51 2025 by rpki-client