Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/76a9d50a-914c-3794-91d5-3869f4df4c12.roa
File:                     76a9d50a-914c-3794-91d5-3869f4df4c12.roa (raw, json)
Hash identifier:          Px73GtuH4HkZpuPTuqjr/YbtvX4XyMopb1V4RSEf03M=
Subject key identifier:   64:CC:F0:C3:EB:DA:24:04:1E:3E:2F:E0:97:43:33:48:F2:D5:2D:3E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9F34A0D1C6B54DEBDACC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/76a9d50a-914c-3794-91d5-3869f4df4c12.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     15169
IP address blocks:        104.134.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:f3:4a:0d:1c:6b:54:de:bd:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=c569ecf7-795d-49ad-bd55-34e894f557ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:cf:dc:b5:6c:45:5b:8a:e0:58:80:fb:c1:
                    25:ed:12:4a:07:1f:72:1c:71:b2:e1:5e:e1:1a:2f:
                    0a:61:6c:28:4d:45:6f:a6:14:36:bc:b2:a6:8f:68:
                    da:9d:4c:a5:b3:fb:1d:f1:bb:c0:7f:2e:6a:b9:04:
                    e9:18:7f:b7:76:2e:d0:48:b6:ac:2e:0d:9f:27:58:
                    0e:e1:71:7d:f0:e4:a9:8a:73:f2:6b:b7:8b:23:7d:
                    14:5a:ec:ff:d7:d0:d4:5e:89:16:94:cf:71:55:24:
                    2a:5e:89:b8:33:7a:f4:7e:69:2b:2f:28:43:f9:9c:
                    e6:77:e1:8f:bc:50:85:42:99:67:eb:23:c8:db:53:
                    58:1b:2f:06:1f:7c:0c:9a:69:df:14:cc:ef:b1:a4:
                    ec:73:00:67:04:41:f4:ca:90:bd:31:39:a9:4f:86:
                    75:9f:08:d9:c0:28:7b:4e:a8:61:81:13:68:0b:94:
                    7f:df:f4:23:a3:34:1d:30:bf:f4:29:ee:9a:97:7a:
                    d3:d6:a4:85:56:ec:6e:c1:b0:ae:4b:14:ed:f5:60:
                    1a:78:c1:36:98:e1:7c:c8:78:1d:5b:aa:2e:2b:d8:
                    2f:34:1b:81:23:88:0f:ab:98:3a:7f:b4:25:a0:9f:
                    69:61:0f:ee:55:1e:6d:ed:78:ad:02:b6:32:5a:be:
                    0d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CC:F0:C3:EB:DA:24:04:1E:3E:2F:E0:97:43:33:48:F2:D5:2D:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/76a9d50a-914c-3794-91d5-3869f4df4c12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a9:5b:36:0f:9f:78:2e:eb:d0:24:c9:ca:ea:af:e8:4f:fc:
         ef:7f:b7:7a:b4:bf:cd:7a:97:c3:8e:dd:b2:2a:c4:92:70:93:
         52:ef:5a:c3:63:f6:e5:04:67:be:9b:73:c7:2f:81:88:f7:a6:
         2b:a8:48:a5:85:fb:c7:3b:d3:10:44:84:b0:45:94:1d:c9:10:
         35:ef:13:30:99:e5:e9:0b:c0:15:ae:38:48:b8:92:8b:5b:43:
         f3:2b:4f:1c:a2:cc:57:74:79:24:bc:63:e2:fb:a2:a8:09:84:
         81:c2:1e:f1:bd:62:2a:c0:11:47:88:5f:af:cd:0c:4b:f3:ea:
         c3:9a:19:a5:61:c6:d5:cd:ff:91:ab:33:48:dc:08:9c:84:82:
         f7:85:e1:e2:ac:0d:53:db:fd:cf:88:f3:1e:58:25:fb:96:1d:
         e9:66:d0:ed:5f:56:14:f3:e1:74:eb:93:1e:c1:43:db:e5:6a:
         4e:8d:c2:af:df:5b:b8:41:30:21:38:6a:05:21:11:b4:0e:3a:
         cb:8b:ee:ef:49:02:66:f9:27:00:d5:eb:ea:94:59:68:4d:43:
         1a:f9:65:54:f1:b5:9c:cf:1a:48:bc:2c:6a:c5:1f:5f:30:74:
         0f:3c:f0:f3:07:80:0e:f1:ba:91:19:3f:e5:01:f5:59:19:62:
         e5:74:7d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:57:42 2025 by rpki-client