Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1c02188-d805-3301-8938-976960f7c557.roa
File:                     c1c02188-d805-3301-8938-976960f7c557.roa (raw, json)
Hash identifier:          npGnnntIdy1fL0VFs/d1Kxk/qJ2qrnScLNMn4zenTQM=
Subject key identifier:   39:B0:37:9A:A3:28:05:38:D1:87:D8:EC:40:03:DC:FB:6A:7E:C5:E5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F53F3634B59A8699E1C80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1c02188-d805-3301-8938-976960f7c557.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:53:f3:63:4b:59:a8:69:9e:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=13f00572-d732-440e-9e2a-24b9d93324cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d9:2d:8f:e9:bf:ac:e5:58:e4:e4:cb:53:84:
                    53:1b:b6:3d:4a:65:6e:ac:b3:6c:2c:b1:32:89:93:
                    12:89:d8:0b:85:f0:17:59:73:26:8d:b4:63:fc:97:
                    b8:cf:74:40:99:1e:5b:6b:20:90:0e:56:03:df:83:
                    81:00:b8:54:ce:1e:c1:02:6f:e1:1e:1c:43:f0:2c:
                    ca:2a:be:34:38:53:a2:e7:e5:00:34:14:f7:00:23:
                    39:f3:92:03:44:06:a1:5c:d2:cd:f1:33:d5:62:ed:
                    e5:e0:d9:bb:a5:40:30:c6:bd:79:5f:0e:2f:bf:85:
                    ec:0c:7e:bf:49:2b:d5:7d:e0:78:be:20:1e:01:5e:
                    6d:b6:57:99:cb:c6:11:f5:dc:13:67:01:41:0d:41:
                    8b:7e:98:af:14:61:65:13:a2:5c:57:a4:3f:47:72:
                    cd:c1:f9:43:4d:fe:fb:cd:24:16:c9:72:d8:7b:9b:
                    00:18:9f:99:d0:b1:11:65:af:34:fe:a8:7b:6d:9a:
                    cd:e8:51:33:af:9d:e0:44:dd:0d:a2:6f:61:50:45:
                    60:f1:a1:f9:75:27:43:a6:06:7f:7a:56:cd:c2:f3:
                    eb:c0:85:07:83:98:b9:b0:44:d4:df:36:55:0a:f1:
                    8e:43:02:fe:77:52:a1:59:74:d8:16:a5:75:6b:7a:
                    77:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B0:37:9A:A3:28:05:38:D1:87:D8:EC:40:03:DC:FB:6A:7E:C5:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c1c02188-d805-3301-8938-976960f7c557.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:3d:b9:de:cd:f7:15:b9:b5:c8:fd:e2:26:bb:52:8d:17:b7:
         90:59:71:7f:28:92:b2:54:00:1e:30:db:ea:6e:7f:e1:62:4f:
         c5:75:fe:44:fb:2a:99:68:b8:eb:1e:18:d2:c2:4e:61:4f:a8:
         62:87:b3:94:f0:ef:60:de:2d:f8:a0:87:d5:3d:74:2a:10:b2:
         f8:9c:09:a5:fd:3e:bf:eb:81:d7:67:3e:16:55:5f:87:c3:48:
         8b:33:d9:4d:64:fe:1a:71:f0:8b:c4:d4:b1:4f:03:64:d0:38:
         6c:e2:7a:0e:21:15:e3:2a:2d:a7:79:d9:00:2f:a1:72:f4:30:
         b1:de:71:08:a8:ce:3d:a1:fc:27:51:3b:69:a9:71:8e:6a:31:
         21:58:39:43:de:27:86:bf:00:e8:a2:80:29:c9:5d:73:5c:5d:
         42:2c:26:df:9b:95:75:35:ea:b9:ff:ff:d5:9e:24:78:01:bd:
         7a:45:e8:50:38:96:4f:c4:20:97:8a:53:34:e7:97:76:cb:37:
         dc:2a:14:7e:1b:da:e9:b3:f3:b2:cf:bc:c2:7f:00:72:ed:38:
         fb:93:a4:fe:3e:97:86:e1:4e:33:52:23:bb:81:53:64:e7:93:
         bc:ae:c3:e7:8e:1b:d5:92:79:d1:c1:8e:0c:11:f0:56:3c:e2:
         37:90:b0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:35:53 2025 by rpki-client