Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7bb8fbbc-f8eb-30e1-a24a-ced1ef8c4a3d.roa
File:                     7bb8fbbc-f8eb-30e1-a24a-ced1ef8c4a3d.roa (raw, json)
Hash identifier:          733fLJ5W6JuVS3WmQpld0iNzFlS9GI834m8JIqIwNtc=
Subject key identifier:   C8:2C:27:EE:95:C6:E7:09:B4:C7:D7:DB:E9:D5:29:1A:4F:0B:88:A4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993FA06B48E76E71FD9947260
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7bb8fbbc-f8eb-30e1-a24a-ced1ef8c4a3d.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     15169
IP address blocks:        104.134.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:fa:06:b4:8e:76:e7:1f:d9:94:72:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=0b5cf7cd-17d7-44d9-b3af-bc75ab7e5be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6f:5c:8d:84:76:06:93:c7:f5:68:56:fa:99:
                    52:b9:b3:5f:c8:9d:02:33:6c:6d:27:8f:15:04:6f:
                    75:40:99:b6:5d:6c:06:da:88:e7:85:db:fd:4f:c4:
                    44:1f:66:03:f2:f0:de:1f:4d:67:ae:5c:51:fd:c6:
                    e0:bd:e2:f0:e8:ef:a3:fb:3c:ce:12:58:a8:99:8e:
                    6c:5b:fb:7b:a8:27:bf:2e:1a:64:ee:1d:81:99:06:
                    59:e9:67:75:ec:42:24:3b:87:a3:12:65:2a:4d:80:
                    bf:43:fc:db:bf:4c:63:0f:a4:8f:de:5c:5f:d2:00:
                    9d:6a:d9:3d:40:f8:e9:5c:f2:83:11:0f:fb:e4:e2:
                    a7:2e:f2:ef:49:24:c7:3f:3f:9d:c0:3c:76:90:ff:
                    04:db:3d:00:63:40:45:5c:d6:d7:02:81:8a:b9:75:
                    ff:c1:f1:cd:96:99:6e:0e:b4:b1:ee:d8:d2:40:89:
                    2f:1f:6a:82:ec:07:2e:62:2a:76:0b:09:f4:bf:e6:
                    ee:f6:97:28:1e:2f:21:f2:d7:38:a7:49:cd:c5:93:
                    a7:4e:5f:5e:a3:3f:f2:82:8e:90:84:8c:d0:b7:fb:
                    7e:c6:31:61:6c:a8:e4:3c:e0:37:35:53:9f:e5:26:
                    67:fd:a4:b7:9f:59:7a:17:56:d9:05:50:09:a1:da:
                    64:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2C:27:EE:95:C6:E7:09:B4:C7:D7:DB:E9:D5:29:1A:4F:0B:88:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7bb8fbbc-f8eb-30e1-a24a-ced1ef8c4a3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:f3:83:d3:4a:a8:32:b7:19:6d:c7:22:2c:0d:5d:65:fa:c5:
         13:d6:0e:5d:67:55:a3:b2:af:da:70:4b:30:9b:1f:6f:64:bb:
         39:c9:0b:69:31:4e:06:80:9e:29:0d:c5:f4:e6:1e:bd:bb:a6:
         b2:fa:75:fe:13:c7:58:db:b0:89:ca:a9:4b:f3:8e:5c:01:98:
         4f:a7:19:fb:42:e0:b2:4a:5d:b4:be:3d:79:8d:d3:6e:95:4b:
         0d:01:59:ba:90:1e:62:65:00:78:41:4a:67:3a:45:bf:7d:c6:
         18:94:89:55:02:15:28:29:0c:9c:f0:10:74:0a:25:5e:e1:8b:
         07:4d:00:a7:3a:a4:0b:8f:05:2e:98:13:d2:23:a5:06:97:b7:
         54:7e:c3:7e:44:0d:fa:6f:ef:9f:04:bc:63:0b:6f:fa:6a:79:
         52:84:3f:cf:a4:44:7d:58:c2:8d:a5:58:55:85:78:fc:76:db:
         fa:78:0b:5e:ce:72:67:54:5a:12:d7:61:3e:0b:68:8e:7b:80:
         e5:7e:6f:8d:c4:b9:0c:d4:ef:7f:48:4a:df:8d:a5:43:38:6b:
         64:c6:a8:c6:88:d0:c8:9a:d0:14:16:8a:93:0f:99:fe:b2:fa:
         2c:7f:f1:f0:94:01:70:db:e2:68:68:7e:64:3b:1f:66:a6:0d:
         0b:f5:cc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:49:50 2025 by rpki-client