Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ba33c07-3a1a-3e39-ad6d-00a1de305c28.roa
File:                     0ba33c07-3a1a-3e39-ad6d-00a1de305c28.roa (raw, json)
Hash identifier:          OqhNbNoIQzIhQ972scyHgF2o4kJ/AoZLNclVqF317ZU=
Subject key identifier:   A1:46:53:40:F2:A5:8B:01:BB:C6:B7:2D:ED:AF:00:C8:BB:7F:22:BE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24D2E7CA56889397C62F00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ba33c07-3a1a-3e39-ad6d-00a1de305c28.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.134.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:d2:e7:ca:56:88:93:97:c6:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=b58a0e8e-0b9d-40cc-a75a-9e75da9be33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2c:0a:0e:ca:ac:88:87:b2:b3:80:0c:4d:cc:
                    b0:0a:c5:28:1b:7f:fd:35:ca:43:bf:1a:72:56:e2:
                    31:d9:bb:94:9e:14:0c:5e:51:c2:4e:e5:64:4e:cd:
                    12:80:02:c5:e7:e6:31:1c:58:18:4b:50:3d:c1:f4:
                    7a:02:e5:bb:7e:d0:af:25:e3:d6:fa:34:35:8a:fd:
                    c6:e8:03:b1:fb:49:2e:02:bd:b0:15:25:e0:e0:01:
                    94:22:1e:22:28:f5:58:49:7b:dc:f2:7f:42:cf:8a:
                    24:da:26:f7:f3:b9:fb:58:c2:ff:de:6e:30:21:f2:
                    bf:03:2c:0c:d2:40:09:43:09:f8:b1:54:c7:bb:32:
                    16:da:e5:75:b0:f1:4e:c6:31:5c:f2:35:8c:a2:e7:
                    9e:92:dc:71:48:77:06:6d:2c:47:a7:70:19:02:e5:
                    e0:ab:84:f3:7f:12:89:44:af:ca:8b:3e:8a:3c:47:
                    e7:6a:8a:8a:b0:79:7c:44:18:1d:de:0c:1f:13:12:
                    fd:87:19:23:a1:00:b1:1d:2d:ef:07:68:58:f5:73:
                    c7:12:8f:fd:34:7a:4e:76:4c:a5:8c:c7:14:08:b5:
                    5c:f8:53:4d:98:68:88:19:5f:d1:ac:36:88:27:08:
                    dc:86:da:51:a3:df:18:e3:f7:83:8e:ed:1e:48:a4:
                    b5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:46:53:40:F2:A5:8B:01:BB:C6:B7:2D:ED:AF:00:C8:BB:7F:22:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ba33c07-3a1a-3e39-ad6d-00a1de305c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:a0:2c:1e:50:db:f6:c0:20:a1:38:e4:7c:96:ad:ac:7f:44:
         29:2a:56:54:76:c3:44:01:25:e9:49:3e:ba:8a:e8:65:d7:4d:
         ef:56:19:ef:98:ea:4f:5a:07:90:df:16:56:6d:fc:70:31:63:
         9e:ec:d1:66:01:65:37:ef:62:d4:12:29:e0:69:d4:42:eb:d3:
         41:4a:f0:7e:56:a6:f2:a7:d5:e3:45:3f:64:bc:e4:67:6f:93:
         44:5a:77:e5:e3:d8:7d:b7:43:b6:ef:2b:4e:39:67:30:61:a7:
         4d:41:e8:3a:bb:b9:98:48:91:12:46:87:d7:45:c5:c2:dd:50:
         00:54:ee:07:11:15:19:2c:bb:03:8d:c4:c0:94:d7:4e:18:34:
         6b:02:7c:f9:54:f8:ed:11:2d:dc:1c:79:fc:35:6f:56:18:38:
         7b:38:5e:60:82:ad:b4:9d:94:b8:c6:85:e6:70:e8:ff:97:0b:
         0d:2c:64:f7:5b:6f:65:15:fe:bf:cd:ab:66:2f:a5:7c:fe:8d:
         5f:ba:d5:00:5a:af:bb:0b:79:24:c3:d7:af:ca:13:ed:88:a3:
         72:af:20:ed:ac:37:5b:ce:44:bd:fa:0b:b4:1b:4c:2a:b1:c8:
         06:d2:c5:0e:05:65:d7:f4:20:20:96:d7:a9:da:fc:0c:a8:a1:
         c2:5e:76:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:15:07 2025 by rpki-client