Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e9fee5da-0cc0-3745-aefa-49aa2529ad6b.roa
File:                     e9fee5da-0cc0-3745-aefa-49aa2529ad6b.roa (raw, json)
Hash identifier:          al+aTkislRWbJEJ7X/0D8rZetlSahLsZj8DKLRsCZfU=
Subject key identifier:   2C:DD:1C:7E:EA:BE:39:80:88:9D:DD:91:58:11:B5:5B:87:7D:02:F2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24D2156F53708C2F9512A0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e9fee5da-0cc0-3745-aefa-49aa2529ad6b.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.134.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:d2:15:6f:53:70:8c:2f:95:12:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=2728d45b-fc86-4583-b7c9-9a0940178b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:81:0e:e2:42:64:00:6f:c5:77:36:a5:8d:69:
                    aa:2d:af:55:bb:db:3b:a3:35:62:ec:df:bb:78:85:
                    7c:e2:8f:2a:41:92:59:df:9b:3c:57:71:be:19:17:
                    d8:82:65:68:3e:75:31:71:ff:d2:5b:63:89:bf:ce:
                    b8:aa:07:9f:b0:84:86:e8:c3:cf:a8:66:d2:80:52:
                    f0:49:37:3c:96:62:c5:1a:68:7b:ac:e7:79:d9:a3:
                    6a:8b:17:1c:99:3d:d9:90:9d:c9:06:f2:f5:97:cb:
                    14:b0:d0:dd:15:8d:9d:b7:7f:69:a4:63:db:2e:ac:
                    69:c5:34:13:53:bf:5b:53:b2:70:16:e7:83:fa:96:
                    9c:a1:f5:b7:36:94:50:8e:b7:65:cf:49:0b:d2:fc:
                    32:9d:89:e9:13:27:b1:57:9c:c8:5f:a1:14:7c:ed:
                    e2:ea:b1:13:bb:dd:f1:7e:d8:42:09:fe:f1:e0:e4:
                    6c:58:e1:57:18:3e:6e:52:d7:47:e2:34:f8:32:ac:
                    bf:2c:c3:6b:cc:7c:5a:c7:7d:e9:cb:4f:de:e8:ad:
                    32:c7:7c:75:f3:ce:39:6f:ce:95:48:47:73:77:36:
                    39:e0:e4:d2:a5:9a:40:a0:30:08:4d:9f:91:a3:2c:
                    7f:a8:6d:ad:5a:0b:aa:a6:44:05:e7:93:74:dd:18:
                    1e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DD:1C:7E:EA:BE:39:80:88:9D:DD:91:58:11:B5:5B:87:7D:02:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e9fee5da-0cc0-3745-aefa-49aa2529ad6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:cd:45:a7:c6:f1:da:e4:d9:ac:47:4d:32:85:cf:95:a5:90:
         7b:be:ec:7e:24:7d:28:a7:3c:e9:0b:8a:8e:3b:64:25:72:20:
         9c:67:6e:b0:75:e6:2a:9b:e9:df:b6:83:7f:ed:84:f1:00:be:
         73:e7:d7:fa:5d:54:58:0c:41:51:2d:c7:99:5f:2a:b1:24:fd:
         bc:dc:d3:82:7c:69:a7:50:0d:22:4c:74:e4:fc:b4:28:63:b0:
         4f:77:0f:ae:e5:d3:63:17:0c:c7:b4:ea:48:5e:3c:c1:d1:c3:
         94:a6:f5:c3:84:8f:e4:41:69:53:11:dd:44:79:5b:9e:60:65:
         05:e4:ef:04:e2:dc:37:f6:dd:35:49:59:03:11:8c:9d:76:cf:
         7e:fb:50:24:70:e7:f5:e6:a5:9d:6a:89:d1:6d:b8:ae:9a:a2:
         95:f9:de:d2:54:7e:91:4a:c9:9f:ce:ba:57:d5:95:97:e3:19:
         06:36:e5:c1:9e:e6:2a:ba:cc:28:19:a3:20:6d:ed:83:7b:f2:
         d7:89:b5:1b:e7:16:47:ea:4d:05:21:45:f5:53:88:2b:54:26:
         d3:8c:7b:18:64:22:69:b0:e3:bf:a8:c8:86:71:c3:57:70:d8:
         0e:67:9f:d9:2f:ff:27:4b:c6:43:b9:eb:b6:bc:51:cd:fd:ae:
         e6:af:b5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:56:59 2025 by rpki-client