Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/712d5f5e-f891-3057-873b-010acb3334aa.roa
File:                     712d5f5e-f891-3057-873b-010acb3334aa.roa (raw, json)
Hash identifier:          GfXXo/NgTgmL7ljFtDMJQcfzEDZDJZUy0PYm9rLt+SQ=
Subject key identifier:   83:15:F2:D8:68:FD:BB:12:43:B7:46:A5:8D:DC:8A:F2:5F:29:69:50
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9F597DC843982A9FBC680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/712d5f5e-f891-3057-873b-010acb3334aa.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     395973
IP address blocks:        104.134.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:f5:97:dc:84:39:82:a9:fb:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=5efe79e2-bf55-4379-b21a-3af2d36a2ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b5:0c:d9:e5:bf:d3:bf:6b:c6:37:a7:7d:41:
                    08:35:53:e6:e1:c6:fa:05:b2:fa:2c:48:0a:9f:d8:
                    be:28:e6:8f:1f:95:20:96:68:ed:cb:86:bb:fe:77:
                    2f:e6:88:7c:eb:30:17:bc:52:a3:9e:32:4e:4d:91:
                    20:48:b1:6c:fc:9e:87:87:5c:dd:c5:7d:1c:d8:b4:
                    c6:70:d8:77:b3:18:25:6c:e0:f4:fd:10:44:1b:55:
                    10:f7:60:65:7d:3c:82:e9:54:a9:ad:23:e4:d9:2a:
                    d0:54:7f:93:b4:21:1c:72:44:1c:48:48:ac:db:75:
                    20:d0:95:55:75:64:b4:93:54:87:0e:87:fe:3d:9f:
                    8c:86:a7:d6:b7:52:08:e3:6e:94:71:14:12:57:f1:
                    81:11:5b:d0:3a:fe:f4:e4:bc:7a:5c:69:32:7b:68:
                    60:f9:4a:6f:cc:4f:f4:f6:96:26:c5:f6:d3:7e:27:
                    70:fd:f3:22:e3:a8:c5:19:16:11:e2:93:89:12:b6:
                    18:46:6b:91:3c:58:d0:ce:4e:fd:6c:d8:8e:7a:b0:
                    12:0a:2e:50:3d:be:4e:f2:ca:7f:e9:60:bf:34:cc:
                    96:06:f0:84:ae:6b:c7:a1:d6:e7:51:79:a0:01:13:
                    95:3d:aa:1b:08:bc:ce:61:2c:6d:3c:77:50:97:fd:
                    9f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:15:F2:D8:68:FD:BB:12:43:B7:46:A5:8D:DC:8A:F2:5F:29:69:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/712d5f5e-f891-3057-873b-010acb3334aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:1e:48:fb:b1:f8:be:e7:6f:20:a6:8c:55:03:9a:cc:7a:01:
         ec:bc:bb:40:ee:f6:7b:95:63:8c:b8:a2:47:b3:70:e5:10:45:
         9a:22:2a:c8:5e:15:9f:72:fc:c7:78:58:33:0f:b0:af:e7:33:
         d9:73:d8:9c:bc:b7:a3:1a:8a:35:d9:d5:ea:e3:4e:2d:cf:db:
         86:06:39:f8:ee:82:5e:11:8a:3f:4e:7d:11:82:dd:06:69:cf:
         d7:f2:84:75:0a:8a:26:52:11:4b:af:7a:31:30:ed:db:6f:cc:
         3c:16:cd:94:18:6d:7a:af:9e:9e:06:73:2d:a6:75:cb:12:57:
         c3:75:1c:81:9e:1e:7d:93:f5:ca:86:20:63:3a:31:f4:b5:4e:
         73:0a:30:a8:fd:81:3b:da:f6:7a:69:d9:ed:da:cc:5b:b9:b5:
         3f:e2:3f:78:92:ab:c2:58:af:7a:03:51:f3:c7:f6:93:87:10:
         c2:ee:d5:00:14:84:c6:11:06:36:27:a2:ac:81:5c:ab:f4:06:
         5e:35:40:72:1b:1c:86:0e:cf:e1:f3:1a:90:43:dc:39:4c:51:
         f6:f0:7b:d2:66:54:3d:d5:d6:f0:49:e6:74:93:a1:c8:1c:b6:
         5e:56:cd:84:93:1e:d3:05:7a:ab:c8:71:91:46:99:63:0a:93:
         53:f6:6b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:31:41 2025 by rpki-client