Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d4cf9a27-f0cf-3ee3-8f43-25b195a8854d.roa
File:                     d4cf9a27-f0cf-3ee3-8f43-25b195a8854d.roa (raw, json)
Hash identifier:          0BTqpjPz4Q72W6KIy7Os8NDQ5pp5uv9WD7Z6t/BB1ZQ=
Subject key identifier:   E3:53:06:E4:E8:DE:E4:EC:65:16:2A:98:64:89:5C:1E:0C:82:FE:F1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24A76F885E1C0290B8F740
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d4cf9a27-f0cf-3ee3-8f43-25b195a8854d.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.134.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:a7:6f:88:5e:1c:02:90:b8:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=0af2965d-8a30-49b2-8ea0-ba3b002a257e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:58:b5:aa:ce:af:bd:4b:b9:f1:43:80:07:57:
                    ce:e9:60:2f:b3:a2:a3:38:7c:50:60:d8:93:75:4e:
                    f0:3c:19:02:72:7e:29:9e:43:bd:ea:fb:22:1d:27:
                    56:be:6e:41:f0:4a:f8:11:c4:b4:f1:35:2f:1c:84:
                    c4:90:4f:99:99:40:c8:ef:a0:26:20:f9:49:5d:d8:
                    64:87:8f:a4:58:f4:5d:a7:01:21:ee:80:99:7b:69:
                    ac:87:f3:eb:f5:fa:42:4e:93:1a:1c:e6:59:51:24:
                    1e:9f:2e:b1:03:b7:b0:6c:34:bf:c0:3b:84:d7:96:
                    7e:ae:81:4b:bd:cb:4a:78:82:d4:69:e4:89:33:11:
                    d0:af:78:5f:0b:61:cb:78:6f:a4:cd:51:36:9e:26:
                    6f:a6:09:a5:4c:7b:c8:e4:28:4e:55:e1:76:91:3c:
                    37:9c:e4:ea:3a:bf:3b:3e:52:f5:3e:70:97:43:69:
                    29:9c:e0:ab:fc:47:e5:05:f5:3c:e7:df:78:53:bd:
                    4f:25:f3:17:46:41:63:f3:68:56:24:f2:10:e3:2f:
                    30:a3:a6:53:13:e8:b0:1a:f7:b0:70:5f:19:99:7c:
                    dd:2b:54:70:2c:ce:50:74:d1:e8:c9:1f:e0:85:90:
                    5a:2e:9b:37:60:eb:29:54:58:89:7d:af:79:96:1c:
                    c8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:53:06:E4:E8:DE:E4:EC:65:16:2A:98:64:89:5C:1E:0C:82:FE:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d4cf9a27-f0cf-3ee3-8f43-25b195a8854d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.206.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:19:26:66:a3:5c:c4:b7:2a:4c:2c:cb:08:eb:f7:6c:1f:91:
         8a:92:f7:db:67:2b:c1:2a:85:43:76:1f:3b:d8:68:3f:8f:87:
         03:56:40:17:28:a7:06:59:65:4b:b3:7f:65:42:9f:16:e9:ff:
         14:50:73:9f:c2:55:b2:04:d3:ea:5c:a6:20:69:55:1a:cd:20:
         6c:cc:42:54:d7:8f:b7:3d:a2:dc:68:fa:4c:2d:f7:19:24:a6:
         c6:ac:06:84:0c:36:d0:18:62:14:9b:89:9f:58:b0:ee:af:e0:
         ce:c1:11:01:3a:4b:05:c5:e9:3d:1d:1b:97:8e:c8:cf:ee:a9:
         f0:a8:d1:e7:7c:56:3f:41:64:ee:11:ed:92:e6:b6:f0:c1:1c:
         62:72:bd:cd:de:2a:13:03:80:1f:1c:9f:2f:f2:8d:7c:85:25:
         4e:4a:27:b4:d3:cf:06:32:e3:1d:1e:a8:cc:da:68:18:a4:f8:
         4a:b4:b0:ff:1c:55:f9:60:d5:e4:b0:db:2d:08:6e:be:02:01:
         f3:6e:a2:ef:80:75:9c:1c:37:5c:50:65:50:8c:13:72:81:11:
         0d:8a:4b:47:a2:85:97:c8:45:8d:9f:ae:58:aa:a0:f8:f7:a9:
         dd:e0:c2:e6:8f:c7:3d:7c:42:00:8d:aa:70:d9:14:a8:f7:76:
         ac:cc:a0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:52:44 2025 by rpki-client