Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cd5adb5b-fd86-3c76-96c0-fc75acbbe52f.roa
File:                     cd5adb5b-fd86-3c76-96c0-fc75acbbe52f.roa (raw, json)
Hash identifier:          InRfB0WGxAH3vVyeigw1WQSGEdvQJTxQ7Ug2+XRvkjY=
Subject key identifier:   84:7B:8F:C4:F4:C4:C9:31:01:10:8A:D1:F9:C8:53:4F:17:5C:FE:E5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F55C3691C7D22C2E757A0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cd5adb5b-fd86-3c76-96c0-fc75acbbe52f.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:55:c3:69:1c:7d:22:c2:e7:57:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=410fda6f-989c-4f83-a16e-b041d7a322e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9e:a3:b7:0a:be:33:5c:b5:bf:db:86:dc:72:
                    0f:8b:fc:f4:a8:4f:e9:16:bb:fd:76:0a:07:6e:f8:
                    9b:ac:79:d7:4d:43:f1:9d:1b:9f:c7:9d:12:45:5f:
                    0c:f6:4f:63:45:95:7e:f2:d2:77:0c:b1:5b:4c:d5:
                    96:aa:bf:18:1a:a4:f5:76:90:ca:7d:ac:75:f9:9a:
                    17:b8:b9:c6:ea:6a:bd:fe:be:fe:74:bb:92:ff:be:
                    33:b7:b0:d2:b7:36:3e:0e:da:16:07:cb:05:5c:53:
                    8d:38:31:01:a3:07:69:8e:d7:91:7c:20:63:66:dc:
                    5b:6a:17:5b:47:14:62:4a:4b:84:16:fd:ed:df:7d:
                    7d:28:e3:bd:45:aa:4d:6a:8b:98:bb:a4:51:53:5c:
                    1c:87:f4:49:d4:2d:24:51:e1:a5:69:c9:f3:2d:d2:
                    9c:38:95:f8:65:f8:19:0e:97:2e:ba:d3:8a:db:6f:
                    a3:9f:c3:18:53:11:ca:45:58:d9:e3:da:f9:18:c8:
                    a7:d6:b8:d8:4d:52:7b:50:8f:ff:46:57:b0:2c:e9:
                    33:66:57:1f:30:aa:1c:f5:0a:78:e2:f4:91:6e:b6:
                    05:7c:a9:d9:d0:28:0b:a3:eb:2a:cd:52:93:ff:58:
                    34:c2:df:e8:31:09:40:55:fe:66:d1:00:32:e0:e1:
                    75:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7B:8F:C4:F4:C4:C9:31:01:10:8A:D1:F9:C8:53:4F:17:5C:FE:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cd5adb5b-fd86-3c76-96c0-fc75acbbe52f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:b5:41:d6:86:73:c4:9f:cc:a4:4e:af:4c:9c:aa:27:6f:77:
         9c:e2:7f:4f:b2:76:a0:75:5e:6f:60:20:92:b6:d3:06:fb:1f:
         28:cd:40:e0:3a:c5:e7:51:d2:c8:1a:81:d0:e4:47:6f:77:3a:
         1d:33:ea:80:30:d1:a0:8d:5c:00:05:aa:c8:91:ff:77:08:c3:
         ef:fb:2b:cd:17:cd:a3:ec:f5:f3:af:4d:95:38:61:63:90:00:
         a1:47:e4:f9:7d:8c:be:47:9f:a0:a7:51:a5:12:60:64:f3:ae:
         c2:91:fd:3d:a9:af:d8:fb:7f:ab:36:d7:bd:76:b3:28:36:16:
         fb:c2:8e:ac:ea:21:7c:54:8d:b4:c4:eb:98:ea:f2:99:60:92:
         fd:f8:92:75:90:da:dd:96:7d:4c:b7:1e:9b:cd:49:4d:dd:94:
         b8:40:85:2d:4f:7a:3b:dc:f0:0d:97:28:32:f7:48:82:c2:f1:
         24:34:8f:ea:fa:b3:5e:f5:30:97:27:c7:4d:4a:54:e8:53:53:
         b6:56:8b:ea:48:00:92:de:10:08:76:eb:0a:1d:2c:d8:9d:4c:
         eb:60:b8:5d:bd:b4:a8:b7:2e:79:92:ce:af:3a:4e:18:10:b6:
         20:71:db:c9:66:01:8e:2f:81:42:48:03:c8:e5:30:40:14:63:
         b4:81:85:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:16:24 2025 by rpki-client