Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bceb1cd5-1c8c-3d82-be4a-077a97f58c63.roa
File:                     bceb1cd5-1c8c-3d82-be4a-077a97f58c63.roa (raw, json)
Hash identifier:          hihFp9pq63l4qRen/wzKkgXi8w43EUFnbaSsWE8NvME=
Subject key identifier:   C1:76:CA:62:63:20:DB:BE:DB:C1:C7:7D:E3:2B:69:26:E2:BC:82:4D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F5293011BBB746A6EC040
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bceb1cd5-1c8c-3d82-be4a-077a97f58c63.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:52:93:01:1b:bb:74:6a:6e:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=7cf62830-0d95-437e-8a27-fba6c754e42f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:aa:89:33:db:b9:d0:55:c9:30:ed:3d:38:d8:
                    b1:87:ac:63:6f:3f:98:f6:d7:90:f4:d3:4b:18:1e:
                    b4:47:3f:5e:95:d7:25:07:bf:9c:5f:5c:86:d6:b9:
                    24:59:e2:33:e0:b5:cd:38:11:4e:00:5b:2c:a4:48:
                    07:a7:95:6b:cf:33:21:cd:ce:62:10:ac:d3:12:d9:
                    da:c9:a7:ad:0d:b8:3c:77:fa:e4:67:8f:9f:d6:5e:
                    74:e0:ae:78:32:ae:5a:93:0c:ae:84:e3:aa:b8:ea:
                    99:2c:f7:67:33:69:db:ff:84:e5:03:e3:d9:1f:a2:
                    ea:31:96:32:d0:61:8a:a9:8f:70:ca:19:99:a5:9c:
                    d2:da:fc:55:98:68:60:0d:52:7a:43:c6:54:34:f2:
                    a8:a2:4d:d8:6b:13:f5:c0:26:d3:9e:1f:14:7f:d4:
                    e9:e2:09:03:37:d1:4d:eb:5c:c5:65:7e:2b:bf:03:
                    dc:dd:10:86:f7:bd:7d:9d:25:18:8b:6c:37:ed:cf:
                    81:c7:f0:9a:2e:99:61:56:8c:14:56:aa:77:2f:de:
                    c5:01:ac:4c:2b:bd:93:a2:75:89:b2:d5:85:f8:19:
                    04:36:8f:08:a8:74:69:0d:96:7c:59:bf:de:bb:12:
                    47:f3:58:10:a7:f4:52:db:7c:50:c6:67:b3:b9:8f:
                    3f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:76:CA:62:63:20:DB:BE:DB:C1:C7:7D:E3:2B:69:26:E2:BC:82:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bceb1cd5-1c8c-3d82-be4a-077a97f58c63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:10:64:db:00:d3:e2:11:6c:3d:60:f4:a3:1c:01:1d:8f:49:
         2f:04:af:f7:30:53:b4:65:d2:53:1e:22:6c:0b:6e:fd:13:1f:
         23:d8:42:6d:18:67:8b:69:b5:dd:e9:47:b1:2b:52:c1:c9:f5:
         a1:1f:94:9f:52:a9:1b:fc:85:92:af:7b:a6:37:f0:aa:c4:ae:
         b8:b1:af:c0:53:84:16:dc:bf:d4:c2:ae:b7:1e:f6:17:3c:fc:
         35:77:51:e1:30:16:c9:b0:19:8f:7d:30:b9:55:f3:af:dc:f4:
         a9:fa:59:7c:94:86:c8:04:cd:09:6a:4a:d4:26:ba:69:b9:23:
         e0:63:67:55:5e:fc:9d:b8:27:68:4b:b6:64:96:11:2c:7f:44:
         e9:e0:e7:9a:9d:7a:f3:a2:c8:03:76:97:84:a3:da:46:9f:1c:
         76:94:b9:43:01:38:be:01:7f:7a:90:37:15:27:5c:1a:4a:96:
         a6:c9:05:13:b5:01:4f:db:4d:20:fb:fb:80:6e:9c:35:bb:cb:
         5c:7a:ba:f0:81:45:53:73:2c:73:e9:2d:4e:73:23:53:40:fc:
         01:bf:12:b5:ab:7e:4e:aa:5b:2e:ce:7a:b1:3a:2c:ce:54:7e:
         07:77:65:11:0c:38:2b:81:c9:9d:80:71:e4:13:1c:86:2e:22:
         11:32:35:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:39:29 2025 by rpki-client