Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/713050b9-20d5-34f0-9f3a-c9ad151b9dce.roa
File:                     713050b9-20d5-34f0-9f3a-c9ad151b9dce.roa (raw, json)
Hash identifier:          /6jcDYaI7mTGJoFF1+pCZedGZuS+mf9KzIipb0d9Qmk=
Subject key identifier:   29:00:98:34:AE:4A:06:E7:2D:F1:86:01:5A:FB:78:06:55:A3:50:5D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24A7301F0B129987187200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/713050b9-20d5-34f0-9f3a-c9ad151b9dce.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     395973
IP address blocks:        104.134.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:a7:30:1f:0b:12:99:87:18:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=2a37b71b-8e59-416b-b4b3-58aa5a197ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:e5:39:c5:26:21:09:c3:fb:17:59:29:6f:
                    8c:bb:3a:77:8c:c0:1a:b8:91:34:78:84:af:9d:f9:
                    d7:d6:e3:e1:8d:10:f5:41:7e:f0:85:60:e7:1c:9f:
                    f6:c8:e6:b3:3a:81:eb:73:c7:25:dc:a9:ff:5d:71:
                    97:cd:1d:5e:e9:83:5b:5f:44:17:3a:a7:20:30:6c:
                    e7:3d:b6:17:9e:e7:e2:9a:c8:39:00:7c:b5:fa:87:
                    98:09:0a:2c:01:b2:45:01:b2:54:9f:cd:79:9a:24:
                    ac:64:4c:64:46:bc:a7:56:51:14:cb:2b:f2:42:3e:
                    6a:df:0b:04:3b:1b:fe:f1:65:83:d0:89:8b:ea:ec:
                    14:cb:63:eb:40:69:1f:56:c3:c6:ae:19:d1:80:4a:
                    56:d1:bb:6b:91:4b:dc:9c:b1:5e:a5:0a:45:0a:f5:
                    af:4d:89:ee:ca:74:e7:f3:00:29:f6:c1:2d:74:14:
                    82:0f:5e:e6:32:f6:f4:46:27:81:56:eb:0f:70:fe:
                    eb:20:8d:08:8e:d0:1b:7c:2f:1b:8b:a6:09:c6:1d:
                    ec:52:ff:d1:b6:e7:9f:aa:9c:ae:26:ae:45:90:7a:
                    7e:36:0f:4b:c8:dd:af:50:04:d2:c2:93:2c:90:48:
                    c5:e0:27:ce:b3:13:20:ee:b4:fa:c5:d0:e5:d5:a1:
                    8c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:00:98:34:AE:4A:06:E7:2D:F1:86:01:5A:FB:78:06:55:A3:50:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/713050b9-20d5-34f0-9f3a-c9ad151b9dce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:61:1a:63:9e:50:45:b4:f7:08:46:91:95:57:30:82:38:56:
         86:99:2f:59:41:d2:ab:16:36:30:e9:9b:d1:d2:a5:29:9f:59:
         f7:ba:a6:fc:62:b6:fe:d7:18:d3:ad:7f:95:7e:ea:96:83:3e:
         94:69:f2:b8:0c:e3:65:40:ac:2a:12:a5:be:d8:41:0d:b9:d3:
         af:af:f9:9b:9c:38:7f:66:d8:ea:29:34:6a:36:5d:8e:bb:60:
         db:7a:68:21:62:23:8b:a7:e4:5f:15:1f:b2:1c:a0:69:8d:1b:
         20:ef:3d:32:23:ee:57:a8:d1:79:3f:d1:76:d7:92:dc:f9:77:
         0c:8c:2d:eb:f7:93:78:34:16:c7:56:89:79:d7:51:98:fc:c2:
         bf:d0:1c:2a:f5:52:3b:19:53:b5:f5:4e:c7:60:09:93:60:da:
         de:41:0a:68:a0:3a:44:f7:3f:c4:fa:be:4c:58:a1:d1:6c:af:
         e6:db:d1:41:9a:ec:0c:80:2b:4e:dc:cd:92:8d:35:af:fe:56:
         11:39:53:e7:e8:0c:6f:4b:58:0f:fe:79:79:7f:73:ba:3e:22:
         20:4a:54:cc:b4:4f:22:9c:75:61:a6:c8:1c:04:5d:fb:c4:d6:
         5d:97:39:24:02:d9:b8:c7:99:92:66:6b:8a:22:40:4d:74:ea:
         0a:e3:95:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:13:44 2025 by rpki-client