Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/923427c8-783a-31c6-ade4-2bbbb6759d6a.roa
File:                     923427c8-783a-31c6-ade4-2bbbb6759d6a.roa (raw, json)
Hash identifier:          pOVsqVyfqM1B0IBVouDxE/30Cfpv79nuUg47dsm0jAo=
Subject key identifier:   0B:00:4A:6D:31:9A:40:3D:C1:71:B1:68:9A:44:B8:09:7C:6F:85:ED
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24A61271602B60AE088300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/923427c8-783a-31c6-ade4-2bbbb6759d6a.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.134.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:a6:12:71:60:2b:60:ae:08:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=4be81bc1-e231-4f5e-870f-fc7e9d9ac8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d3:ff:c2:53:de:ea:7f:6e:a7:30:74:f3:a2:
                    cc:78:c3:85:49:c2:07:01:63:ba:22:07:e6:99:5f:
                    10:d3:bf:93:3e:32:eb:f1:c2:73:ef:f7:41:14:9c:
                    e4:51:99:bf:6c:eb:de:45:84:d7:ca:f9:63:9a:bb:
                    51:11:45:21:81:4f:79:95:6f:ce:0f:64:62:cf:9f:
                    e2:4a:7b:47:af:6a:17:9e:43:44:26:10:10:ba:51:
                    15:31:65:5a:da:3c:a6:59:44:c3:e0:a5:ea:cf:31:
                    2e:81:f1:75:0c:20:ee:ce:bb:d2:37:bc:82:f2:48:
                    66:1d:87:84:d5:52:fe:d7:d4:3b:ad:7c:a4:2d:b7:
                    84:69:b3:32:aa:92:05:33:d2:d5:0b:72:e9:c7:bf:
                    66:70:84:da:20:5e:b0:92:17:c7:6d:55:cd:1e:c7:
                    bd:95:ca:fe:b3:ea:27:25:25:8d:ca:29:d6:af:b8:
                    44:0a:dc:39:51:7e:48:57:73:33:3e:9c:ff:1b:33:
                    d0:d8:1d:a6:0c:16:cd:6e:89:17:c3:21:c7:25:17:
                    44:a1:5d:99:57:ee:d9:de:e0:0c:e3:d0:f6:b7:f0:
                    fa:3b:de:b9:27:a5:95:b1:e8:cf:42:0b:82:2b:97:
                    f5:f8:5b:0b:f9:39:e6:e0:52:16:c8:9d:3d:88:b0:
                    c6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:00:4A:6D:31:9A:40:3D:C1:71:B1:68:9A:44:B8:09:7C:6F:85:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/923427c8-783a-31c6-ade4-2bbbb6759d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:77:27:80:26:65:15:73:27:42:69:c7:df:85:20:f8:c9:5d:
         01:ed:ed:eb:62:2b:ea:20:20:38:0e:cd:02:40:50:f9:0b:79:
         17:93:23:4a:96:93:34:e2:d0:4e:63:59:62:5b:d5:ef:9e:a4:
         f1:e7:46:93:1c:d9:fc:a8:a8:ca:6d:50:bc:25:5c:85:8e:4d:
         01:73:a1:33:9f:73:ed:07:de:f3:e7:ee:7f:a0:4b:85:0b:74:
         21:6f:0f:a0:bc:13:2e:32:ef:c7:a8:9d:a1:ac:5a:fe:a2:8c:
         e4:3f:55:ef:48:ab:7e:c2:aa:06:db:28:25:03:6c:76:4d:f2:
         e2:9f:c9:de:61:f5:89:2e:c2:88:f3:e3:2f:0f:fe:54:ce:0c:
         c3:f2:3c:64:c2:e2:21:9e:02:5d:97:54:79:f5:b9:0e:96:9e:
         53:07:04:38:31:ed:b5:3e:71:b9:e5:62:27:5b:2a:80:fa:51:
         6a:41:e7:b1:4d:8a:73:76:29:d9:90:cc:a8:f5:b9:8f:9b:66:
         92:94:2f:2d:79:4d:04:be:ea:d1:f6:43:ef:24:55:0e:92:12:
         1c:4a:da:ff:a6:ce:d3:de:6a:54:97:3d:3b:81:69:ef:79:d8:
         d7:53:36:32:48:f0:77:43:33:1b:88:66:45:4b:f9:bd:95:a7:
         ed:d0:65:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:57:01 2025 by rpki-client