Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9370e763-ebb6-3c8d-a57c-cb725d8f635e.roa
File:                     9370e763-ebb6-3c8d-a57c-cb725d8f635e.roa (raw, json)
Hash identifier:          qu1xWwGAebQJjcr6HrRL3eh0N/FbgCUL4qjwoEzBXQc=
Subject key identifier:   CA:27:88:75:B1:16:B4:59:5A:EA:EC:3D:1C:86:02:0F:F6:C3:A7:D7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849B6DF48CC454F32CF72FA3880
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9370e763-ebb6-3c8d-a57c-cb725d8f635e.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     36383
IP address blocks:        104.135.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:48:cc:45:4f:32:cf:72:fa:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=1a4531d2-f01d-4b38-809e-3771e0c55495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:73:8e:84:f5:c4:77:ab:81:0d:ff:f6:68:c3:
                    34:c1:10:c0:b3:2c:c8:f3:63:5f:64:41:3e:b3:ff:
                    03:c8:0e:61:fc:0b:74:b1:da:04:ec:84:f8:6e:2d:
                    cd:f3:33:e4:39:c1:78:72:73:09:6b:dd:f8:06:88:
                    f9:9f:30:b5:2f:2b:66:15:e8:c4:3f:26:ec:d5:f2:
                    2b:3a:5e:64:08:1c:e1:0d:3c:14:a6:9a:6f:1a:be:
                    3c:f1:6d:58:2a:ac:93:f2:c8:23:ea:f9:a3:1d:16:
                    0f:be:69:0e:76:67:1c:3e:9a:64:fe:90:4a:29:24:
                    a6:b7:71:96:6e:86:80:74:6f:0a:56:69:a4:e0:70:
                    9b:55:33:85:e8:05:c5:ab:32:2f:55:5f:03:ec:a7:
                    70:0b:3e:5c:04:24:f4:2d:c8:bd:94:db:d9:67:fa:
                    20:78:28:f1:16:50:3f:1a:70:53:d9:ad:cf:3a:a4:
                    e5:4d:60:c5:9d:2c:ed:be:fe:63:30:34:d8:96:47:
                    82:e4:b4:ee:f6:d4:a4:13:33:35:81:f2:c4:c2:7e:
                    29:8a:da:88:70:4a:1b:89:bb:f2:2c:28:34:2f:84:
                    45:21:31:8e:c0:78:5e:23:bc:de:10:20:b1:41:33:
                    9f:c6:86:a1:29:16:a1:d6:f0:22:67:46:43:d7:0d:
                    e8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:27:88:75:B1:16:B4:59:5A:EA:EC:3D:1C:86:02:0F:F6:C3:A7:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9370e763-ebb6-3c8d-a57c-cb725d8f635e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:bc:54:03:97:33:f3:9f:2a:f9:38:a8:70:f7:d4:b7:f8:58:
         ce:ae:9f:31:11:25:a6:50:76:d8:86:fd:39:3b:15:12:1f:32:
         e0:c3:44:9a:62:a4:f2:f3:d0:78:3a:cf:a2:a3:d6:a1:04:7a:
         c3:a6:36:e7:c2:18:fb:36:99:f3:e9:b6:dc:0e:2c:35:81:07:
         c3:94:76:8b:8c:f9:c8:79:7e:60:b7:a2:5d:7b:28:96:15:ef:
         75:39:7d:83:f8:06:56:aa:87:03:2e:0d:11:87:96:b8:f0:39:
         0b:1b:74:27:b5:ab:03:06:46:ac:a0:f3:c6:fc:62:86:7d:c8:
         c8:8a:83:e8:5f:f5:6d:0c:99:41:4b:d0:87:3e:0a:55:a8:7b:
         7c:7d:19:c9:01:1d:5e:01:89:80:2b:38:b5:63:fa:30:b7:b7:
         25:db:8d:f0:1f:60:e6:d6:9e:c1:c8:0d:30:5c:f8:c9:c9:86:
         82:38:19:7c:8d:f6:fa:23:c6:d1:b6:67:55:a8:10:e4:fc:7d:
         f6:09:36:98:4a:b9:6e:f9:7a:c9:38:ef:16:4f:34:22:fe:1e:
         f2:70:28:85:a1:fc:ef:cc:a2:02:8e:ef:7a:f9:9f:a3:80:7d:
         c3:8d:a3:da:f1:e1:95:c9:f6:98:2c:2e:7b:cb:59:46:32:15:
         ef:55:bc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:05 2025 by rpki-client