Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/377c67cf-0a40-3a13-a0cd-4c33512de5cb.roa
File:                     377c67cf-0a40-3a13-a0cd-4c33512de5cb.roa (raw, json)
Hash identifier:          WII+xkrp8MEt7/BnnTz959+Z8v/A5lv+iQ2ONk3Bo4w=
Subject key identifier:   F8:D7:93:02:70:46:57:72:86:85:65:13:0D:DB:0C:A5:49:F1:6B:13
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24CF7AAD9A6DC8337EB580
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/377c67cf-0a40-3a13-a0cd-4c33512de5cb.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.134.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:cf:7a:ad:9a:6d:c8:33:7e:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=6692e05e-7252-4665-b9d6-6fefde750423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:77:05:fe:fd:c8:53:c4:82:a5:37:d5:a3:37:
                    9d:4b:5e:a5:66:3d:f6:00:f9:30:5a:84:0b:ff:64:
                    0a:fd:f3:ba:1f:9e:88:5d:f1:84:0a:8c:ab:b1:16:
                    b4:e9:ce:47:03:b3:99:7c:9c:06:12:29:fa:93:27:
                    d0:78:13:0a:1b:1e:4b:a4:0b:76:3f:c0:fc:d3:91:
                    e1:5f:2f:2b:ec:86:68:9d:0c:fe:89:f0:77:7f:e9:
                    2e:de:72:72:6d:6f:fc:a7:87:f8:e6:7b:8b:2e:b7:
                    0b:10:4d:40:b7:b7:ab:c4:38:b4:24:80:58:50:23:
                    1e:04:5d:26:1f:75:1c:07:2c:92:a8:a9:f8:96:6c:
                    15:0d:d5:85:6a:06:f2:12:4b:89:55:5c:c8:4f:58:
                    f1:98:72:3f:cb:ff:4f:8a:df:2e:d3:c1:ec:0f:e7:
                    b4:00:34:65:c9:95:70:e7:74:1e:cb:b5:2c:c1:e1:
                    5e:d3:65:5c:b2:7a:dc:dd:ea:1c:d7:2d:79:10:4e:
                    9f:48:ea:34:f0:a4:8f:f0:78:e2:33:af:62:77:8d:
                    6d:36:5c:04:d8:25:6f:c9:63:b9:8f:df:ab:2e:21:
                    dc:70:ce:34:e4:e8:19:e2:eb:21:de:31:9f:de:dc:
                    df:51:29:f9:84:50:cb:df:1c:68:24:ca:df:91:6e:
                    80:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D7:93:02:70:46:57:72:86:85:65:13:0D:DB:0C:A5:49:F1:6B:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/377c67cf-0a40-3a13-a0cd-4c33512de5cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:41:c3:f7:d1:37:2b:ba:38:54:e1:b8:b1:17:dd:fb:a9:62:
         23:b4:3d:4c:42:26:50:15:99:b7:4d:86:73:65:e1:03:2a:90:
         ba:04:a6:f6:8e:a7:84:1c:5d:96:20:31:da:99:c2:32:ef:ad:
         a7:3c:64:5a:33:6c:c7:92:aa:7e:62:64:a2:d4:d9:a5:56:10:
         61:8d:3c:7a:d2:b7:08:03:28:2e:c3:37:50:95:b3:de:93:66:
         6e:9f:2e:af:aa:bb:0e:4e:8e:e0:9d:e7:61:e5:76:e9:98:12:
         75:cd:5a:91:8e:c7:cc:b3:f7:94:53:7d:82:ac:e3:bc:29:b9:
         a1:48:c7:fb:6f:c4:25:da:d3:fb:0b:af:dd:fc:0c:c3:a3:86:
         4f:87:eb:ca:0b:a0:f9:43:e5:bd:52:9d:aa:ed:31:9a:18:73:
         23:94:14:9e:1b:34:21:70:29:14:ac:c1:c6:a4:e0:15:a3:e3:
         78:3d:da:c3:83:f7:10:96:9c:9a:c3:6e:28:4a:d8:18:dd:16:
         1c:c1:45:0d:c0:bd:6b:df:f7:dd:fd:21:ce:24:2e:d9:5d:e1:
         c0:91:e4:d8:59:3e:c0:3e:00:ef:39:51:c4:97:f1:71:c4:67:
         2d:6a:95:eb:81:f8:ac:50:40:75:39:2b:ef:fe:41:62:53:30:
         6d:bb:51:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:54:14 2025 by rpki-client