Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/72f7ec78-9699-3393-ac5b-e6e0ba7da4a5.roa
File:                     72f7ec78-9699-3393-ac5b-e6e0ba7da4a5.roa (raw, json)
Hash identifier:          Z2q4qJOJjL53NH5ydl18RukbngAnFqOhl3pwe9Dw1Lw=
Subject key identifier:   37:27:18:2E:F2:67:15:EE:53:54:B0:C3:D1:5C:4E:AD:55:AD:F5:85
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9F9CB65C4A99C65BF3F00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/72f7ec78-9699-3393-ac5b-e6e0ba7da4a5.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     395973
IP address blocks:        104.134.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:f9:cb:65:c4:a9:9c:65:bf:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=70049662-749b-4d92-b333-9ab0db661a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:59:6a:b7:f3:5d:1a:55:6e:07:61:2d:b6:
                    2c:3d:f6:d9:d4:45:5d:8a:9c:5c:4f:0a:d8:22:88:
                    5f:3c:20:68:77:1a:a9:e3:3f:39:ef:24:30:b1:38:
                    27:46:0e:b6:a3:ab:2b:a9:e6:2d:d9:49:1a:1c:a6:
                    1b:12:68:af:23:02:93:e4:78:01:3e:c3:1c:68:99:
                    2c:e3:93:2b:67:60:af:f3:14:b2:09:59:a9:d7:75:
                    9a:6f:dc:62:f0:bf:20:9f:6b:1b:57:0e:60:1f:08:
                    98:79:77:27:7e:96:43:44:62:bd:43:b0:0a:59:00:
                    9c:99:c0:30:71:49:8c:4b:43:65:7a:77:f8:4c:f0:
                    6d:74:9a:c9:7a:f8:58:dc:37:c1:c2:09:b6:78:a6:
                    b0:9a:9d:e8:0c:7b:ff:f3:ed:0e:16:6c:e8:dd:f1:
                    bf:fe:75:a1:32:53:27:42:2a:05:98:55:20:2b:68:
                    ff:b5:e7:e5:6e:bc:58:3c:1e:2f:6e:91:91:4b:f3:
                    98:7d:3a:2a:77:ef:01:84:18:66:c9:68:d3:db:ff:
                    6f:25:e5:1a:8c:6b:13:10:5e:27:91:ea:5b:33:5a:
                    e8:0a:d5:c2:9d:be:cd:3a:a4:4b:69:0f:40:b4:53:
                    c4:4a:11:c5:b6:c2:09:c0:b2:e5:fd:92:5e:19:25:
                    c0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:27:18:2E:F2:67:15:EE:53:54:B0:C3:D1:5C:4E:AD:55:AD:F5:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/72f7ec78-9699-3393-ac5b-e6e0ba7da4a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:91:d5:05:2e:53:82:01:45:f5:59:79:3b:c0:54:6c:14:26:
         7e:81:48:35:09:84:cc:91:6a:75:be:44:1f:ad:07:d2:b9:72:
         83:34:30:1f:c7:84:10:a1:4d:1a:dc:51:10:c6:88:71:a8:7c:
         67:8f:bd:df:58:f9:7b:6c:6e:3b:1a:57:2e:8e:de:04:96:80:
         0a:f7:c9:18:d1:df:e6:5e:28:b3:be:cd:07:28:2b:73:c7:83:
         b1:c0:84:0c:d6:04:f9:0d:6f:0a:9e:92:c7:c6:b0:0c:09:07:
         19:6f:3c:25:fd:63:20:36:5f:aa:3b:49:86:d9:1d:de:2b:11:
         cc:b7:54:db:8a:32:22:e6:71:93:b3:60:60:a6:f7:1d:42:66:
         09:71:7f:2e:c6:cf:00:a8:34:a9:69:96:8b:e7:fe:df:92:35:
         b3:f3:36:4f:22:07:0b:9a:b7:12:ea:41:bf:0e:95:42:8c:7c:
         37:a4:c5:d0:76:94:b6:07:11:b9:d0:c9:4f:f6:56:00:52:9d:
         5b:59:55:9f:3b:83:57:1c:55:57:ec:60:cf:36:29:81:49:80:
         d7:0f:19:82:7a:19:5d:18:8e:2a:cb:14:8b:ca:35:d3:2d:9c:
         0b:3d:02:ef:c4:bb:0b:9b:23:e0:ab:0c:c0:2e:af:09:66:ab:
         69:b1:7c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:30:01 2025 by rpki-client