Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9b1afc57-b373-3153-86cb-8e68343b27d5.roa
File:                     9b1afc57-b373-3153-86cb-8e68343b27d5.roa (raw, json)
Hash identifier:          daUd7cjQhXaJf+wMLEVimzEAytx5GXxS2pYmxcVY5P4=
Subject key identifier:   AD:42:3B:94:E8:D1:4D:46:5C:4F:4D:B1:D5:B4:C7:A5:3F:B6:4E:EE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9FA1518D5970E670A2840
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9b1afc57-b373-3153-86cb-8e68343b27d5.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     15169
IP address blocks:        104.134.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:fa:15:18:d5:97:0e:67:0a:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=33d6e1d7-6392-4f5c-a0fa-5b7ca298184b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:62:65:ed:d8:d9:a0:9c:0c:94:d6:35:c8:75:
                    6b:1f:85:0c:30:73:66:57:ae:52:6b:62:bb:a1:57:
                    6a:5a:63:d1:69:44:55:11:6e:1e:7d:06:6b:2b:cc:
                    fb:3b:5b:e5:f7:db:47:0f:b0:4b:8a:76:bb:da:9f:
                    d7:e9:bf:42:75:1b:a4:a5:92:4f:af:33:25:97:48:
                    29:8f:f8:f8:36:1d:73:8a:1c:bd:c8:29:de:16:17:
                    17:9e:b3:86:e9:61:e0:a5:0e:85:9b:83:a3:01:17:
                    86:ca:36:2c:4e:8f:12:d1:29:3d:ff:ae:5d:c2:db:
                    c4:e8:4a:e6:9c:ad:22:b8:f3:bd:f5:13:aa:c9:be:
                    38:76:49:e1:00:10:7a:4f:70:66:c4:2e:5e:a9:9f:
                    8c:af:5f:06:0c:b2:b3:41:0c:78:54:47:91:e9:b3:
                    25:b5:b6:66:05:eb:dd:1c:d2:a2:64:8a:8c:33:ae:
                    fd:bb:ce:5b:ef:7d:2b:74:5a:d5:7a:f5:29:03:9c:
                    f8:40:a4:61:36:17:eb:f2:51:4e:1a:0f:47:f8:53:
                    f4:17:18:e7:2f:38:d4:91:8a:3b:8a:4c:61:11:56:
                    83:ed:e4:23:35:a4:e0:13:1d:ab:af:fa:18:60:d4:
                    50:e2:04:ac:e4:5e:aa:80:23:2f:d0:28:e7:2e:52:
                    16:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:42:3B:94:E8:D1:4D:46:5C:4F:4D:B1:D5:B4:C7:A5:3F:B6:4E:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9b1afc57-b373-3153-86cb-8e68343b27d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:e4:8d:92:7c:d9:55:ed:43:84:91:93:d1:12:70:71:e8:5b:
         8e:42:b2:e8:dd:77:d4:1d:b3:ef:b9:19:18:97:b1:81:fc:1c:
         43:6b:f8:14:da:6e:ec:a2:44:4e:67:63:7f:7e:f1:00:13:b8:
         e8:27:e1:e6:b7:d6:85:96:c5:f3:21:70:61:a2:b3:a0:51:50:
         ce:b5:68:35:f6:f9:13:23:f3:7c:e3:e6:e9:6f:40:ea:02:86:
         68:8b:4d:83:0c:ab:32:73:ef:38:79:06:41:36:5a:37:83:c0:
         fa:12:43:f9:2f:90:15:70:3f:50:70:55:9b:7b:6e:89:49:5c:
         cc:2f:fd:7a:41:c4:7e:82:18:95:e9:bc:c5:a3:4d:5e:30:02:
         a8:93:e0:e0:3e:9d:3e:d8:d5:44:c3:e7:dd:4e:33:3b:75:5c:
         5f:33:c3:ce:b5:58:5c:dd:0e:95:2c:46:8b:03:b6:1e:65:07:
         a3:99:4b:be:d5:fa:14:a0:f2:20:7e:82:04:99:90:77:33:de:
         75:85:04:d9:10:aa:23:ca:b9:bd:98:f1:8f:66:7d:64:83:b4:
         70:d5:9c:d6:8a:18:34:8a:79:d2:41:5c:f2:da:e1:65:e2:3e:
         d5:39:d4:a4:2e:ba:cd:38:4e:25:06:94:f3:e5:77:05:1d:0a:
         f0:a6:f5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:57:09 2025 by rpki-client