Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/53eddfdb-18dc-39f4-8ef0-c3d4fefa0733.roa
File:                     53eddfdb-18dc-39f4-8ef0-c3d4fefa0733.roa (raw, json)
Hash identifier:          oXILgWelLvhNj7eoQ9eNAbxeehfCO59gCFJl6a+OP7U=
Subject key identifier:   8B:73:7F:1F:14:D6:C7:F9:76:1A:5F:12:F7:B3:1C:F7:E5:FB:09:1D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24A46ED22CFD3A0DA83040
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/53eddfdb-18dc-39f4-8ef0-c3d4fefa0733.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36411
IP address blocks:        104.135.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:a4:6e:d2:2c:fd:3a:0d:a8:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=80ceddc2-13a8-4990-8a97-d9c5b0a814fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:30:f5:c7:64:77:62:e8:ce:71:71:c6:8b:56:
                    ef:9b:d4:8c:2d:0d:e9:d1:9b:ef:ff:a5:b1:74:46:
                    e4:bb:f6:cd:a8:00:df:db:6b:56:4a:04:70:b1:6d:
                    8c:48:16:1a:94:c1:36:69:1a:03:ab:71:11:9a:dc:
                    f4:8a:7a:ec:81:b4:fc:49:d6:55:ed:16:60:5c:30:
                    c7:fe:f9:40:68:a4:37:5f:5a:7a:10:87:0c:e8:01:
                    ee:a7:da:6b:ea:0b:d0:2f:e6:20:16:55:7b:83:7d:
                    4b:3b:60:70:ab:36:3d:c6:ac:f2:20:c6:36:3f:8d:
                    9e:7c:c6:62:02:63:ed:88:8b:8a:2c:13:1e:2d:04:
                    29:61:a4:00:59:7f:8c:10:85:7f:ba:7a:1b:be:19:
                    e1:86:d8:1b:96:f7:20:3d:5a:84:41:eb:8b:2a:dd:
                    f5:3c:b9:f3:c4:f4:60:84:34:ae:a9:19:3a:7b:21:
                    d9:95:c9:8a:d7:36:fd:03:39:7e:b9:cd:35:b3:80:
                    8a:a4:14:42:e4:ec:4f:ad:3d:a1:16:00:a9:40:e5:
                    9c:a6:dc:cd:fb:27:5e:6a:1a:c6:97:a6:41:92:88:
                    83:99:a9:55:ce:28:e7:17:bb:6d:ca:9a:54:e7:96:
                    eb:74:1a:d7:56:44:4d:c8:c0:ce:87:c4:7d:f5:04:
                    d1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:73:7F:1F:14:D6:C7:F9:76:1A:5F:12:F7:B3:1C:F7:E5:FB:09:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/53eddfdb-18dc-39f4-8ef0-c3d4fefa0733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:11:68:10:b9:87:5b:21:af:b4:75:3d:62:14:35:d0:d7:8e:
         0b:e2:6e:fa:3e:81:40:a0:8a:e9:1d:e1:79:0e:01:0b:b1:84:
         a3:3b:09:da:bd:bb:5b:e8:c9:43:b7:55:f7:90:6b:bf:00:cb:
         8d:75:09:f0:30:da:af:3e:4e:78:a6:8a:f6:bf:a6:59:55:dc:
         9e:8c:e3:3b:19:98:7d:a8:ca:88:a9:a7:69:7d:9b:5a:c0:22:
         50:a4:91:0c:b9:17:b0:39:38:46:f3:49:4f:cb:41:c0:6d:05:
         a8:31:28:b5:4b:1d:8b:61:fb:bb:56:eb:a3:14:60:d1:25:51:
         2f:f5:a5:53:4d:3d:aa:9f:0e:77:8d:b0:a9:56:2d:be:96:cf:
         18:c6:6d:c3:f2:23:74:51:a2:99:94:34:71:29:c5:bf:03:86:
         92:11:93:2a:69:00:6a:e0:fa:9f:86:19:03:ae:db:03:d8:32:
         da:d3:e3:ad:2c:69:b9:be:03:3c:af:fd:83:e5:f0:16:4d:63:
         be:dc:86:76:66:71:09:65:21:a7:46:7a:d0:b2:7b:ce:88:51:
         ac:68:77:76:ca:ac:7c:58:cd:d5:83:25:49:80:dd:e6:f4:d7:
         89:65:ea:cc:28:eb:bc:f2:cd:71:7c:2e:c9:e8:e1:82:54:6d:
         1d:e6:69:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:14:39 2025 by rpki-client