Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2397e60b-0e89-3d4a-9efe-fcc3aed9eea6.roa
File:                     2397e60b-0e89-3d4a-9efe-fcc3aed9eea6.roa (raw, json)
Hash identifier:          CaWFHTCRgEypR5Bm4Anaz7ScuhRc1+5DQFp3zbK/lVA=
Subject key identifier:   D2:FF:44:0E:27:29:B6:71:62:0F:72:1F:FC:25:43:CC:F7:99:28:E8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24CDB1A9134341BC7FDA80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2397e60b-0e89-3d4a-9efe-fcc3aed9eea6.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     41264
IP address blocks:        104.134.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:cd:b1:a9:13:43:41:bc:7f:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=c3f79ec9-aec7-49c3-9e42-604b2aa98724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:60:f4:b7:46:47:5d:59:4c:76:ff:41:d5:a7:
                    1a:14:0c:bd:e1:21:c8:95:8b:d1:5d:5f:5e:22:68:
                    b6:05:2c:ba:ad:af:7c:cf:63:f0:7d:9c:9c:50:3c:
                    86:75:0b:49:4e:95:1e:85:41:b8:c8:a1:9c:0b:4c:
                    c6:05:7d:df:fa:24:17:f9:b5:d2:af:7b:9e:f0:79:
                    f9:a6:c4:f6:8d:14:77:0f:df:aa:8c:b1:4c:db:a0:
                    e6:d7:37:ad:0a:8d:f1:2d:8f:39:93:d1:de:d2:c9:
                    96:43:18:1b:e8:fc:3f:51:3a:d4:ac:59:d2:8e:15:
                    83:7f:09:57:0f:9b:20:b7:92:57:c6:cc:2a:7a:2c:
                    c6:ef:b5:01:14:d2:1c:c5:7d:e6:fa:37:36:cd:dc:
                    89:17:81:e5:49:9a:0a:f3:fd:85:a5:60:1c:76:fd:
                    f2:13:ad:02:51:01:b5:85:ca:4c:2e:d2:b1:fb:d1:
                    e9:7d:fe:3d:2c:31:29:62:5c:7b:ad:a7:24:d4:7b:
                    ea:54:6e:f1:2e:2d:87:eb:2a:89:ab:ff:16:13:80:
                    e3:c6:4a:5d:58:28:41:77:2f:50:f8:04:14:3b:1e:
                    3d:83:92:77:10:bc:f2:73:dc:69:08:9b:40:9a:e8:
                    bc:0b:68:24:7e:68:0c:5d:5e:be:b1:21:c3:e0:c1:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FF:44:0E:27:29:B6:71:62:0F:72:1F:FC:25:43:CC:F7:99:28:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2397e60b-0e89-3d4a-9efe-fcc3aed9eea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ce:3e:f7:cc:df:66:78:37:4e:f7:ff:fd:6e:a0:2c:c5:8b:
         45:dd:09:88:5c:4e:57:83:ce:eb:97:98:b0:b0:5e:77:1b:05:
         9c:2e:2f:cb:b1:bd:96:22:b1:71:04:64:cb:41:dc:ee:a7:4c:
         04:8e:c9:a2:94:f2:47:55:a0:f6:ad:24:d8:3a:90:8b:c7:76:
         2b:f3:8c:b7:32:e3:38:be:20:bc:16:40:06:be:3a:8f:eb:13:
         79:62:03:70:8a:e6:0e:1a:81:08:6a:e0:ae:e4:5b:b0:94:8c:
         fe:e8:79:86:4e:30:c8:d7:37:fa:a2:92:8a:61:33:b1:da:a8:
         f6:a2:52:fe:09:8c:bc:2c:a5:60:da:9d:9a:33:4c:db:65:08:
         f9:2b:82:91:44:d0:25:95:da:dd:b5:cb:5d:05:c5:40:bf:0c:
         84:e7:52:25:be:89:9b:11:2c:1f:e8:3e:cf:f3:68:7d:68:e9:
         63:81:2f:f8:cf:f5:65:1f:5d:f7:47:17:52:61:df:c4:24:c2:
         ba:ce:2d:01:32:ac:53:02:e2:6f:68:4b:bd:88:e0:41:8f:05:
         ee:d0:96:dc:82:9d:1b:1a:d2:fc:ff:4e:12:01:17:d3:96:2e:
         a5:89:95:ee:d5:cd:43:87:1f:9d:63:24:09:96:51:ae:91:d9:
         30:e8:25:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:09:36 2025 by rpki-client