Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2416adec-368c-3ff0-95ec-242aae841168.roa
File:                     2416adec-368c-3ff0-95ec-242aae841168.roa (raw, json)
Hash identifier:          Id3+MkQ8zrDSyY79y4KLRiMjBF/UFGoqyGZ2M5zF5N0=
Subject key identifier:   0A:CF:CD:92:B7:D3:F4:07:AD:6C:0B:05:9B:E5:1C:17:FB:AE:9F:C9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858498B99D67CC8C46E89AC02D140
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2416adec-368c-3ff0-95ec-242aae841168.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     36383
IP address blocks:        104.135.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:d6:7c:c8:c4:6e:89:ac:02:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=92798c40-5ed1-46bb-8e38-85c68446a489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:97:89:ee:4e:70:89:85:d2:b2:62:27:db:83:
                    d8:83:19:e4:14:3d:94:e9:66:22:45:69:1c:f6:61:
                    3b:7d:f3:96:53:77:6e:07:7e:15:ad:e7:cb:9a:9e:
                    e1:26:a4:13:10:c9:54:be:8f:ad:c8:f9:64:27:ac:
                    9d:16:f9:f8:1c:e7:be:b5:35:e0:b0:fb:c0:f1:67:
                    a4:83:ad:d2:bc:f1:53:9f:84:d2:72:1e:8d:a6:f5:
                    95:f9:4b:4f:0d:4f:97:c4:cb:cd:c0:78:1a:0b:43:
                    06:93:94:70:5d:cc:57:45:8e:32:6d:57:5e:04:54:
                    62:ce:87:34:ff:80:7f:ad:22:75:1b:f9:d5:0b:77:
                    35:94:fc:85:d5:be:e1:7c:16:f1:3a:6f:13:30:96:
                    0b:ec:2d:9e:ae:70:f6:c3:79:74:47:cb:11:ee:bb:
                    47:37:c4:de:cf:e7:ed:fd:5c:00:99:6a:5a:fe:9e:
                    12:50:78:e5:48:96:23:25:b3:30:c7:92:61:bc:1b:
                    75:48:75:e4:5e:f5:f5:ea:07:af:33:b5:df:0b:e0:
                    ab:19:a0:79:88:cc:5a:eb:74:ac:63:fc:cc:76:d5:
                    b4:17:89:01:48:e4:ac:e5:c6:62:be:53:5e:fe:ac:
                    ea:84:21:eb:36:b2:d7:d5:fc:2d:be:98:7f:ac:c0:
                    91:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CF:CD:92:B7:D3:F4:07:AD:6C:0B:05:9B:E5:1C:17:FB:AE:9F:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2416adec-368c-3ff0-95ec-242aae841168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:84:a0:30:bf:28:53:1e:14:f1:12:47:3c:09:d3:55:41:da:
         9a:91:54:88:b6:d6:7e:3f:37:b9:7e:d6:57:dc:f5:35:6e:f4:
         44:ab:bf:69:0a:cc:1c:13:cb:a1:5b:03:53:97:37:10:21:f6:
         07:0b:6c:95:8d:46:c3:91:27:9c:6d:ed:47:a1:bf:31:85:84:
         e4:c9:e3:69:28:c5:d2:26:b0:d4:d5:a1:c6:9e:3e:2d:b4:47:
         1a:ff:64:83:6e:5f:96:d9:c8:8b:0a:a9:cc:ca:3f:e7:6d:5b:
         a7:fe:0a:aa:46:75:51:4d:a5:45:d3:40:77:bb:ed:d0:d0:cb:
         bd:99:8f:c7:e2:9d:40:61:de:52:db:c9:5f:cd:48:d1:66:bc:
         e0:d4:85:84:80:25:93:bd:eb:16:b1:e4:6b:f2:53:8d:fb:7e:
         21:ba:a6:3b:97:8e:9e:bd:2a:0f:da:f1:ae:5b:f8:e8:63:2a:
         c4:89:75:ca:ca:83:af:2f:37:b7:ab:ab:93:57:89:f9:9a:b0:
         b9:91:ff:71:5c:5f:58:89:1d:fc:52:11:23:80:c5:8f:7e:ec:
         23:d2:ad:61:89:eb:f2:bd:16:85:8e:9e:83:52:4b:ed:99:30:
         38:43:bb:a7:0f:a9:49:8d:b1:ca:35:27:23:9e:e1:73:22:37:
         20:32:48:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:32:44 2025 by rpki-client