Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/20df07e5-c419-3d3d-9377-4b52fc59b6cf.roa
File:                     20df07e5-c419-3d3d-9377-4b52fc59b6cf.roa (raw, json)
Hash identifier:          zOZglw3tB2hGXMvLtisJE+j9ad48sFdmY49sXnrLJZQ=
Subject key identifier:   83:A5:56:94:48:9F:93:B3:43:09:FF:33:A1:31:DE:28:65:89:95:4A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9F62BDE23145439261E80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/20df07e5-c419-3d3d-9377-4b52fc59b6cf.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     395973
IP address blocks:        104.134.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:f6:2b:de:23:14:54:39:26:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=dada9934-e791-47bc-bb60-32d0ec426e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:47:02:7b:0c:23:57:74:f6:15:c6:e9:75:ac:
                    9e:cb:80:25:98:dc:2c:a2:91:3b:52:5f:f6:03:90:
                    22:24:c7:bf:e1:00:33:e0:c3:ab:ce:5c:c2:78:df:
                    0f:7f:cb:97:f2:bb:1d:98:81:a2:a3:e5:23:b8:6c:
                    6a:3a:c5:2f:95:72:80:d8:ae:fe:8a:0f:85:7c:fe:
                    64:69:fe:85:98:75:1a:b2:82:a9:17:b2:65:a6:de:
                    93:06:a0:14:1d:41:5d:92:ff:e9:98:0b:46:e2:8e:
                    24:b8:c7:4c:c3:d1:01:6e:1c:42:8d:9f:44:06:b9:
                    6b:57:d0:33:01:15:9d:7b:dd:31:8c:a5:19:c8:4f:
                    f4:38:04:d8:dc:b4:98:dd:73:71:24:1c:ed:27:b9:
                    ea:26:15:fd:98:1c:a0:17:b0:97:c5:c5:b0:49:a4:
                    1f:4b:05:d0:b9:4f:6b:2d:cb:d8:99:41:29:bc:31:
                    1d:5f:13:96:ed:cd:b1:9d:bd:fb:6e:32:65:8c:4a:
                    c1:c8:52:3b:67:60:54:1b:31:87:d8:a1:e6:07:80:
                    7f:86:be:ee:56:ac:0e:19:37:9b:5b:e9:45:b1:75:
                    b4:3d:53:43:6b:4d:96:4f:ae:0a:51:de:60:1b:f6:
                    50:71:b2:4a:a6:24:da:12:07:b6:db:eb:ac:b5:37:
                    8e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A5:56:94:48:9F:93:B3:43:09:FF:33:A1:31:DE:28:65:89:95:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/20df07e5-c419-3d3d-9377-4b52fc59b6cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:b8:05:aa:05:37:07:23:0b:2a:d9:68:a5:f4:64:0e:5f:1d:
         06:63:cd:d6:78:3a:f0:04:2b:d8:f2:e3:60:88:1d:da:36:77:
         90:8d:42:19:62:44:54:a4:68:65:53:7e:d9:8e:93:0e:89:73:
         10:d8:d9:74:ae:79:3d:a7:1d:6e:9e:b0:82:c1:fe:d7:47:d6:
         c6:3b:c3:0b:5a:83:2f:78:33:e8:da:f6:97:4a:c3:b7:29:39:
         c5:ed:aa:0f:0b:4c:5e:85:78:03:c3:fa:e1:62:c6:e0:d8:5d:
         c9:86:46:51:3f:a8:67:87:4c:5a:d8:c3:bc:b5:cf:cf:78:77:
         23:14:e2:f1:9b:e6:18:a0:38:42:45:5b:da:87:33:d4:45:1e:
         a8:21:02:cc:3b:b3:16:f8:fe:1f:7a:75:98:bb:27:33:3e:fc:
         12:aa:bf:85:fc:18:81:43:b8:66:9f:30:93:85:2d:c8:3f:40:
         eb:a4:aa:08:b7:fd:d6:b9:ff:76:72:7e:0c:0a:0b:a0:67:a4:
         a1:d6:17:27:f6:8b:22:ec:04:c3:d5:25:bb:1f:9c:c5:da:4f:
         d1:d2:34:87:f8:d1:ee:83:ae:6c:ea:90:df:9e:6a:bd:f0:c3:
         19:47:79:6a:36:10:af:fd:28:78:fc:1a:bb:f7:6b:0d:d9:90:
         69:51:b0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:51:22 2025 by rpki-client