Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a980c0a9-4716-35b0-a698-3c9141bde590.roa
File:                     a980c0a9-4716-35b0-a698-3c9141bde590.roa (raw, json)
Hash identifier:          nZrkmRWC7Gz6SurrxMGabFGTVA8hGoGeuHCLBu4SjJk=
Subject key identifier:   D7:B1:94:83:0D:F0:EC:C6:48:19:1D:E7:41:D3:BD:92:E0:44:31:8E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24C84A3DD564EB3762A600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a980c0a9-4716-35b0-a698-3c9141bde590.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     395973
IP address blocks:        104.134.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:c8:4a:3d:d5:64:eb:37:62:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=65e5db62-35a5-488c-8db8-2d6c1e255eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:af:7c:ea:9c:85:d1:e3:3b:ad:bf:c8:07:8e:
                    80:b1:02:84:5c:f1:ca:32:e5:04:ca:0f:6e:42:d9:
                    34:3b:59:6e:a1:ec:4c:9b:f7:eb:46:97:53:ff:1a:
                    2b:8f:90:30:bb:c7:ac:e6:27:86:46:bb:01:94:cd:
                    a4:dd:fe:0b:ae:c3:90:20:bd:4f:5f:80:95:88:88:
                    e1:12:6a:cb:2d:f9:32:4a:88:59:03:6a:d4:8a:c7:
                    15:dd:80:e4:23:0c:11:8e:af:fe:00:2b:ac:5f:1b:
                    b1:66:cb:46:52:4a:26:85:38:2f:50:b0:66:b6:ef:
                    9f:b3:2a:82:ad:95:1c:16:9a:a1:66:b6:ff:61:0c:
                    32:88:fc:a2:f3:eb:bf:b0:73:24:57:af:e2:e5:e2:
                    04:b8:44:0e:2a:99:53:92:1d:cc:e1:65:7d:e2:6e:
                    d7:4e:3f:f9:09:9e:e7:31:25:cd:42:d5:10:11:8e:
                    a2:5f:c5:7e:fe:f1:88:8e:98:e7:0f:9d:7d:46:24:
                    8c:df:48:1b:b0:15:6b:5e:27:5f:ca:dd:68:0e:cd:
                    8a:52:9b:ba:b1:3d:81:43:62:d2:3d:23:cc:8d:88:
                    f4:f4:a7:80:3a:9f:42:5b:c6:07:15:f3:73:73:a3:
                    bc:62:0b:51:2c:f6:17:68:b0:ee:23:88:c0:8e:45:
                    8a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B1:94:83:0D:F0:EC:C6:48:19:1D:E7:41:D3:BD:92:E0:44:31:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a980c0a9-4716-35b0-a698-3c9141bde590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:fc:a7:f0:99:ed:05:af:0a:8f:d6:ae:e1:a8:63:e9:bd:6d:
         36:cd:c8:c4:64:90:87:71:5c:a5:91:89:fa:ed:a9:90:67:4e:
         2d:e2:fa:d2:9c:ce:8b:38:9f:4c:c1:12:30:46:55:be:0b:68:
         aa:45:12:64:01:e5:1f:59:65:56:dc:b7:dd:68:ec:51:60:d4:
         80:50:fd:e5:43:29:5d:51:31:88:40:da:5c:69:52:2b:17:57:
         fe:54:78:69:74:53:57:67:22:8d:91:1a:aa:ea:e6:a1:2e:07:
         ba:e4:05:60:fc:c9:76:e4:02:10:32:a8:dd:df:27:76:02:4a:
         20:70:69:7b:7f:7a:94:7c:62:f7:3f:b9:c7:d5:55:93:75:8f:
         c4:03:fd:86:70:a3:a5:9e:6f:80:85:b6:a7:63:e2:99:17:4f:
         c3:bd:5e:90:fa:cb:1a:aa:b2:3e:35:8f:3d:b7:f6:5f:ee:9e:
         50:66:9a:34:8f:ef:b9:e9:4b:d2:3d:ce:e1:45:7c:cd:89:11:
         d3:09:25:a6:61:20:68:74:ed:36:9f:a4:2f:b4:a6:09:c3:16:
         5d:87:19:f2:8c:ad:f9:74:a0:26:ab:8e:26:d0:99:0f:35:cb:
         fe:dc:4b:6d:21:f8:29:65:b0:fa:44:08:d4:73:f7:6c:88:c2:
         4f:76:a9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:06:50 2025 by rpki-client