Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e95485-4c78-3788-9f7f-f3ad1cdead0f.roa
File:                     c8e95485-4c78-3788-9f7f-f3ad1cdead0f.roa (raw, json)
Hash identifier:          adSNE4qdUrhaliH6/RH9xZbZc+TD7dz7A6IMrI+7m6A=
Subject key identifier:   AD:03:DC:BD:EB:9B:D7:A6:24:03:6E:C1:69:40:83:72:34:F8:C4:42
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9ECE93AB2798531B8C4C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e95485-4c78-3788-9f7f-f3ad1cdead0f.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     41264
IP address blocks:        104.133.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:ec:e9:3a:b2:79:85:31:b8:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=f70d9ed6-8634-40b4-be75-491c965d387c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ed:09:f9:cd:d5:fb:c5:54:29:0b:66:28:9a:
                    8a:67:ea:c4:72:88:14:70:c9:31:df:e6:a8:de:e6:
                    2f:80:06:25:e8:0d:19:4d:39:a9:d3:54:4f:8a:6c:
                    c0:e1:e8:a9:0e:91:c6:4b:b2:59:02:46:30:81:bf:
                    bf:ee:8c:a4:e6:0f:a6:ee:6e:f4:54:69:12:c8:33:
                    d0:00:95:17:d9:50:45:81:1d:48:c5:1a:44:58:03:
                    32:b3:03:f9:18:c3:0d:10:35:e3:17:0c:b3:9a:63:
                    64:03:bd:e5:b9:b5:93:20:ac:28:f7:42:27:f5:ab:
                    bb:35:26:bc:cc:ac:3c:b1:62:64:89:36:81:9a:c1:
                    f2:16:61:8e:67:f2:ac:fd:5a:af:42:65:3f:85:73:
                    60:f8:5a:db:6a:ef:c0:26:7e:18:3b:29:a7:8d:cc:
                    17:ab:9a:da:16:99:dc:a6:d7:74:d5:09:a4:e7:73:
                    ea:ce:c0:d4:c0:f2:18:8b:85:81:b4:43:be:9a:76:
                    66:d8:cd:5f:52:3a:ee:c3:51:d4:af:4d:0e:84:df:
                    01:fa:9e:c6:5e:6f:24:f8:c3:d7:8a:4f:98:cf:77:
                    e6:21:8d:9c:8f:5d:be:dc:5e:9a:d2:ce:75:a7:a0:
                    ab:47:fb:6c:5b:e7:19:f6:34:de:7f:74:fc:9f:6d:
                    f5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:03:DC:BD:EB:9B:D7:A6:24:03:6E:C1:69:40:83:72:34:F8:C4:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e95485-4c78-3788-9f7f-f3ad1cdead0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:ca:f8:36:12:1d:f2:62:93:54:bf:e0:90:a2:5f:71:ec:fc:
         d7:c9:67:23:a4:bb:3a:95:14:a5:fc:a2:71:49:2f:85:3b:0b:
         52:29:df:70:04:c8:1d:50:c1:0c:31:60:7f:d9:d7:45:7f:1a:
         bc:70:49:74:90:d0:06:c9:38:47:55:23:bf:d9:ce:16:91:3d:
         71:35:94:da:11:f5:a4:f3:86:6e:ff:8f:2d:a9:67:00:92:02:
         1b:41:2b:bc:46:77:77:48:0e:4f:d1:7e:5b:54:1c:b1:a4:c1:
         f7:6d:5b:ce:66:3e:f8:a0:72:5f:82:b5:06:97:2e:fe:a0:fc:
         ea:dc:8b:7b:06:4d:d1:5b:79:04:b7:86:95:70:d5:6e:94:23:
         68:86:26:e5:29:7a:b6:2f:1e:b7:b4:c0:1e:35:4a:67:59:c8:
         20:32:f0:5e:d2:a2:c8:de:c4:d5:2f:33:ae:52:4f:02:29:73:
         6c:b4:4b:72:90:c8:fc:6c:b5:d8:3f:fc:b5:75:63:8d:44:d0:
         12:53:93:e6:75:f8:db:46:32:ec:b1:ce:44:0b:bf:64:90:2a:
         28:86:4e:f9:fe:02:94:7e:4f:29:5a:74:2b:ce:d8:5e:3d:28:
         0b:39:88:42:0d:25:b9:3a:0d:69:26:81:a9:f1:8c:29:5b:49:
         0c:15:69:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:59:33 2025 by rpki-client