Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d9519af-b0d7-3c64-8aa7-4ef03c25d6b0.roa
File:                     9d9519af-b0d7-3c64-8aa7-4ef03c25d6b0.roa (raw, json)
Hash identifier:          nviUdPUTpD4wQkjds7sgV27SIXZG0GKNotUvlA3gAO4=
Subject key identifier:   59:45:00:EC:CC:BB:31:1B:C0:A8:87:46:15:61:4C:41:F0:2E:B1:E2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9F20803E0BCA7E1277E88
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d9519af-b0d7-3c64-8aa7-4ef03c25d6b0.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     41264
IP address blocks:        104.133.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:f2:08:03:e0:bc:a7:e1:27:7e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=b6cbc6ac-1c33-4325-8ea3-a60040767caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9e:c3:d5:84:c5:21:aa:8a:ab:64:b4:8e:39:
                    0f:28:0a:36:d4:82:45:ce:d9:42:18:44:52:d9:70:
                    83:6f:69:48:8f:0a:a6:7c:21:dc:79:16:dd:74:8b:
                    b1:77:00:1a:e6:13:64:4c:b4:87:52:db:48:25:ac:
                    34:a1:a0:d5:be:24:87:4b:0b:62:b4:9f:08:6b:f4:
                    84:cf:5c:6e:9b:82:aa:70:d7:cf:fa:e9:e4:59:25:
                    79:ec:7f:94:a9:38:21:a8:a8:31:45:18:fa:98:dc:
                    75:ae:8e:b1:65:e7:51:87:11:24:b2:f4:27:32:e8:
                    fc:f9:ca:ba:de:43:6a:bf:5c:3e:59:87:bb:e9:2e:
                    89:3a:fa:9d:0f:8c:45:68:3b:2f:85:0b:69:d5:09:
                    c8:dd:6b:9c:b0:ac:f9:ce:59:db:7f:7a:94:fd:5f:
                    5a:bc:4e:2f:00:a6:79:23:a0:9b:c7:52:27:87:71:
                    56:4e:67:2e:6a:12:d2:89:a8:55:b2:f0:01:dc:20:
                    b6:03:a2:d4:5e:5f:c1:50:53:da:d4:ec:c9:9f:a0:
                    a8:66:67:66:b9:30:9f:4e:dd:49:bf:67:fb:d3:17:
                    de:e2:a0:9a:62:f5:69:0d:e2:bb:b2:6d:af:12:13:
                    95:e8:48:bd:da:28:8a:19:e8:a0:30:3a:46:a4:a1:
                    ba:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:45:00:EC:CC:BB:31:1B:C0:A8:87:46:15:61:4C:41:F0:2E:B1:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9d9519af-b0d7-3c64-8aa7-4ef03c25d6b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:58:cb:e2:04:e8:fa:38:9e:67:02:2d:09:98:89:d0:11:38:
         65:4d:b2:bc:7d:99:79:b7:7d:5c:d7:65:40:df:fd:38:a8:d6:
         b1:7a:ef:ca:76:9c:a5:e2:e2:f7:b3:91:1f:74:b2:c5:a5:28:
         bb:fe:00:6b:74:5f:a3:32:d8:a3:4f:ba:fb:9b:7a:5c:eb:f8:
         b3:62:3e:98:a8:92:7f:29:df:fe:b0:e6:15:c4:fa:50:a0:e9:
         6f:7e:6c:66:bf:26:c7:6b:d2:f7:9a:84:38:fd:1c:cc:11:72:
         84:71:f0:8c:ac:80:e0:e6:4c:b5:c8:eb:fa:70:87:89:de:63:
         69:5c:09:c1:4b:d4:6b:46:4a:16:77:72:2e:77:de:a4:53:b7:
         c6:3d:11:c4:45:27:96:35:00:f2:1c:14:08:3a:96:c2:ff:52:
         a2:bc:ea:af:96:48:b0:64:0e:52:0b:e7:d4:18:af:8c:d7:cb:
         7d:67:71:d5:1a:21:c6:b4:f1:f0:d2:a5:66:6f:57:f4:c9:de:
         6f:09:af:8e:9a:c1:e4:fa:f0:47:d6:13:d8:f3:41:bf:d4:fd:
         7d:a7:b9:89:a9:6c:0b:64:bf:94:88:a5:91:1d:2c:af:be:4c:
         82:81:b5:1b:f9:f3:4c:9d:3b:64:95:61:a7:19:31:b0:7e:1c:
         df:c5:36:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:30:38 2025 by rpki-client