Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/de0741f0-25f7-3470-af56-f7126463130d.roa
File:                     de0741f0-25f7-3470-af56-f7126463130d.roa (raw, json)
Hash identifier:          nTBfCO9iNUnNcOp/Seyn4SQRvyd5hijBF6CLPaWKdvo=
Subject key identifier:   F4:45:05:C5:A6:FD:C4:EB:04:46:33:2A:03:A8:2B:81:21:D1:DC:6F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24AF032A7F9D4303485880
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/de0741f0-25f7-3470-af56-f7126463130d.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.134.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:af:03:2a:7f:9d:43:03:48:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=617c339f-852e-480a-aad8-1e0fd3e0b5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:07:40:8d:2d:b7:cc:08:4f:a6:83:47:d7:b7:
                    65:24:ec:f0:65:b9:8c:82:27:c8:a4:5a:04:a0:e1:
                    37:c0:ce:46:27:77:34:b7:dc:88:78:a5:63:60:32:
                    25:ba:70:4e:ea:c8:40:7c:e2:13:60:88:f9:a4:08:
                    6a:73:fc:bd:a8:77:f5:bb:7c:c6:83:ec:15:08:c7:
                    39:e4:69:83:9d:de:f9:54:dc:15:43:96:6e:54:65:
                    d7:d0:c3:e4:4a:47:6e:1d:4a:15:86:63:d7:f3:a8:
                    d3:df:ad:cb:2f:55:db:7e:84:e9:ee:5f:99:86:39:
                    72:ae:65:88:ba:f2:33:6e:38:d0:28:2a:dd:f7:2c:
                    66:72:89:cf:26:69:1f:65:26:db:5b:25:93:93:cb:
                    dc:9b:fe:11:4e:02:ed:e6:89:33:27:27:2b:60:2b:
                    e0:0f:f4:60:1b:8c:64:6b:b5:55:9d:07:10:ad:95:
                    ef:20:f8:d8:d6:91:47:06:17:50:e8:a1:74:e7:69:
                    b1:73:0a:c9:5f:cc:81:ea:ae:68:d9:d5:b1:e6:9e:
                    34:c8:db:bc:89:16:3d:f2:2a:ba:8d:8c:12:fe:22:
                    66:e1:11:45:b7:bd:a2:49:2a:61:ed:67:bb:21:36:
                    c6:a2:16:d5:e2:55:cb:0b:2f:1e:17:a0:c0:6e:52:
                    21:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:45:05:C5:A6:FD:C4:EB:04:46:33:2A:03:A8:2B:81:21:D1:DC:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/de0741f0-25f7-3470-af56-f7126463130d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:4a:5e:27:b1:21:1e:18:60:11:2b:67:5a:ed:61:ac:a4:69:
         cb:31:0c:2e:95:58:81:85:a4:2e:be:c4:48:20:de:84:8c:2e:
         d6:06:83:e4:d5:e3:e1:71:08:c6:fe:05:56:1a:fe:9e:92:ad:
         d1:72:34:eb:5b:13:31:4c:9a:d2:dd:95:3f:6b:c5:20:e8:23:
         ea:34:8b:9d:26:93:10:75:ea:9a:5c:39:ef:0a:06:6f:ca:b6:
         e9:31:0f:3d:5e:b2:5f:f0:02:c9:89:31:3d:ba:7b:9f:2b:2b:
         4b:94:0e:77:ca:3e:1f:96:46:e8:e7:d0:86:15:91:7c:40:6f:
         34:d2:cf:fc:36:9e:75:12:1d:56:87:cd:22:d0:ca:54:16:47:
         d7:f6:f1:f3:5e:f5:a0:87:d0:3d:2c:b5:af:02:6c:8f:8c:17:
         0f:5f:83:0f:e2:e3:ca:7d:22:16:17:83:4c:42:e0:21:c0:df:
         0c:86:67:67:8a:85:16:1f:15:af:55:07:f1:f0:07:46:ba:fd:
         5b:c3:d9:4c:2e:cd:d7:bb:77:2e:de:0f:44:33:7e:97:c8:13:
         b3:e7:16:e4:c7:bd:d7:c7:a5:56:fd:c2:92:7a:f0:b5:fa:87:
         05:69:f2:10:50:c8:f0:59:eb:3f:bf:7b:71:84:a1:95:68:d6:
         54:6a:49:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:45:43 2025 by rpki-client