Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1981d9b-c1f7-37af-a128-63cf9018c583.roa
File:                     d1981d9b-c1f7-37af-a128-63cf9018c583.roa (raw, json)
Hash identifier:          K8OI3mbY3ElPPPzYATfrRdpi33BoVHwIDgLtsUNgLyQ=
Subject key identifier:   9F:DD:6B:77:7B:66:C7:23:EE:62:65:D2:F2:F0:0B:18:28:C9:2D:03
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24D145D2CF246410708300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1981d9b-c1f7-37af-a128-63cf9018c583.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.134.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:d1:45:d2:cf:24:64:10:70:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=940f9d4a-99eb-494f-bb36-c2754fac89f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:91:dd:7c:14:0d:55:f6:f9:72:41:85:f1:c2:
                    fc:6f:7d:df:12:89:61:90:ba:12:82:4e:f5:c7:ba:
                    8e:37:80:f7:db:4d:05:c1:9e:1c:3d:70:eb:da:79:
                    59:94:f8:8f:b2:62:cd:4c:05:13:db:43:cc:0f:7c:
                    74:0d:55:eb:9c:bc:a2:de:2d:0b:cc:5b:f3:6b:b9:
                    36:da:c7:b9:20:00:bb:5e:e8:88:ff:90:7b:e0:69:
                    79:5e:50:5a:9e:d5:d4:4e:2e:68:91:63:68:2f:83:
                    cd:7a:fa:cf:86:1a:6d:48:00:ee:11:10:ca:ae:16:
                    c6:aa:ac:33:bf:37:28:1c:e4:8c:05:a3:94:57:12:
                    13:e3:80:17:5f:21:3a:da:35:52:ff:6a:2b:79:63:
                    40:07:be:1a:4a:53:71:e0:4e:b8:c0:e1:4f:a1:45:
                    1b:58:19:27:0d:af:c7:a5:f4:ae:3e:31:55:ed:15:
                    41:2f:7d:ef:2f:e0:93:c7:85:53:cd:ec:31:1e:4c:
                    6f:c5:11:31:72:22:dd:27:be:a3:66:b3:ca:18:19:
                    a2:a5:1c:6e:9a:39:60:4b:0d:22:97:0d:a9:7a:3f:
                    32:7e:df:0d:6b:14:fa:f5:77:fa:e5:95:5e:a8:d7:
                    30:1f:46:a7:bb:a7:4d:5c:62:38:8c:02:c4:24:67:
                    bd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DD:6B:77:7B:66:C7:23:EE:62:65:D2:F2:F0:0B:18:28:C9:2D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d1981d9b-c1f7-37af-a128-63cf9018c583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:41:e8:ac:49:99:29:da:29:86:90:2c:65:4e:85:e9:ba:bf:
         5f:8e:cd:52:d1:5e:20:e6:74:3c:07:ec:28:c5:af:9d:d4:da:
         dc:8e:94:b5:f2:97:6d:c7:d1:03:b6:16:e6:1b:23:7a:d4:2f:
         e2:b2:ce:14:e5:38:83:b9:fd:0c:d7:81:7c:c7:54:f3:2e:67:
         68:34:7a:65:aa:de:62:a4:d7:90:11:df:09:a9:dc:8b:05:ec:
         d8:d3:a7:11:73:a8:07:71:b2:4e:68:45:f8:c6:16:e1:27:dd:
         d5:a8:fa:8c:2a:fb:39:2d:27:4e:e0:cf:17:34:cb:2d:50:3f:
         95:9c:b6:f8:08:78:5d:6d:af:9e:a2:9d:f5:0e:1b:36:7c:10:
         cb:64:b6:47:c3:f6:54:2a:1c:b0:ac:26:7f:2d:e4:b6:93:be:
         e0:4e:09:16:31:90:e4:9d:f4:c1:3b:24:7f:d9:35:27:81:80:
         64:66:68:15:48:b8:a1:09:b1:e8:ee:fa:72:9b:28:8a:f5:24:
         e5:e7:14:fb:c6:e7:99:42:7a:c7:22:16:c0:97:b3:2c:90:4b:
         9b:94:a7:c8:5e:42:a8:76:13:ab:04:0a:e6:16:ee:fa:19:c3:
         19:47:b6:06:6e:f0:99:c7:c6:25:46:7c:56:25:c1:79:45:00:
         9b:f6:1f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:08:39 2025 by rpki-client