Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/02e5c924-f444-31b3-ba73-f19df457ea63.roa
File:                     02e5c924-f444-31b3-ba73-f19df457ea63.roa (raw, json)
Hash identifier:          TRRBHgz99FznCjBUVcycsdFsN8hg30xik1M/c6KTiUc=
Subject key identifier:   B7:92:94:AA:1A:FC:8C:A0:E3:39:7B:5A:52:1C:34:E5:B5:30:A1:7C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24D25C7835A94824DFCC00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/02e5c924-f444-31b3-ba73-f19df457ea63.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.134.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:d2:5c:78:35:a9:48:24:df:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=a618e2c5-ea94-49d4-ae94-d9b8eb3faecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:50:94:c4:a3:a1:5a:eb:95:66:0f:0c:04:c0:
                    72:55:2a:17:bf:88:58:aa:f1:b4:95:69:d8:57:63:
                    10:82:65:69:a6:9a:86:ae:85:2a:8b:e9:7f:6a:d6:
                    87:34:e2:c3:97:19:e9:fc:52:2e:c4:23:4e:34:f7:
                    c8:d3:ff:91:bf:3c:81:1b:e0:c7:98:58:67:e8:be:
                    b4:7a:d8:f5:a5:d6:11:dc:53:1d:a1:9f:b1:8c:19:
                    ee:18:93:9f:e4:6c:4f:c3:d7:6b:05:2f:dc:0a:08:
                    3a:7f:2c:fc:83:16:95:68:43:80:00:3f:ff:ff:d1:
                    68:b8:37:42:05:66:86:8f:0f:06:a4:a5:ee:6a:37:
                    7a:27:e6:ce:4d:e0:7c:d5:08:81:ed:fe:71:de:34:
                    d7:66:15:00:2d:77:7c:e1:2e:49:3d:89:b3:41:03:
                    e0:c8:cc:6b:dc:37:0e:6a:e2:3d:ce:e1:57:f4:6b:
                    05:cc:e2:75:aa:59:74:b2:5e:a2:04:16:9a:21:70:
                    c0:62:e5:2b:76:f9:69:05:2b:6c:52:e7:85:f5:c1:
                    93:6d:d3:78:73:bc:eb:da:7e:ea:1d:23:2e:16:87:
                    85:b3:5d:dd:7d:81:7f:70:3b:dd:47:9e:8c:e3:7a:
                    52:47:a6:77:4f:0c:76:b4:fb:43:ed:e8:f6:c8:5e:
                    0f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:92:94:AA:1A:FC:8C:A0:E3:39:7B:5A:52:1C:34:E5:B5:30:A1:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/02e5c924-f444-31b3-ba73-f19df457ea63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ff:ce:bc:10:2e:88:48:63:89:4b:4f:5a:ba:21:f7:12:bf:
         95:7b:61:2c:d7:43:41:4b:69:31:11:7f:81:db:3a:fe:15:76:
         03:c8:f6:1b:c1:fd:34:3c:a3:5b:95:57:fa:74:3d:a2:68:ca:
         c0:ab:7f:6e:73:11:64:e3:2f:d5:f7:d3:d3:a4:91:de:03:d3:
         79:51:7b:36:0b:52:11:6b:52:c4:e6:bf:ea:1c:d4:ac:bf:e7:
         76:7f:3f:7f:bd:b3:6b:34:89:08:df:08:92:ec:4c:95:8e:7b:
         98:d5:5f:6a:63:fe:87:2d:5a:0a:94:69:59:88:a2:70:cf:44:
         82:44:de:12:9f:78:67:d0:70:b0:f2:43:34:49:21:da:d8:78:
         b6:36:44:0c:ef:29:87:aa:6d:f5:6e:57:9f:6b:03:e5:88:5e:
         d6:9d:50:33:da:b3:54:64:0f:d5:49:b8:6c:66:2a:3d:40:af:
         5f:44:9d:81:59:0d:7d:bd:20:ed:67:a3:8e:5b:f5:12:99:23:
         f0:47:ce:35:26:da:9d:fb:3f:dd:5b:3a:1e:6c:bc:95:04:79:
         72:a5:e6:d0:de:f8:d3:44:21:f7:13:fe:45:bf:eb:75:d0:4b:
         f7:e5:30:be:9a:62:37:6a:d8:18:b6:ea:19:2e:c0:19:35:59:
         ca:84:ca:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:15:30 2025 by rpki-client