Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/09c48bbc-6b05-30bf-9605-fe4f3101a0d9.roa
File:                     09c48bbc-6b05-30bf-9605-fe4f3101a0d9.roa (raw, json)
Hash identifier:          cSoovaEikhzhnpVS4qBnPNVet2EVawc45MKCEbE0zP8=
Subject key identifier:   A6:9F:0F:B9:4E:7A:60:AF:EC:95:77:06:98:02:2E:ED:95:5C:AC:AF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24D465FC24A84A94DA6100
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/09c48bbc-6b05-30bf-9605-fe4f3101a0d9.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     395973
IP address blocks:        104.134.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:d4:65:fc:24:a8:4a:94:da:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=343bdb4f-7e33-4388-9984-0bab6167068a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d7:da:6e:c1:cf:5f:d5:07:23:54:01:81:50:
                    2f:26:87:15:3f:64:24:e6:50:90:39:1c:70:a4:35:
                    0f:95:fe:6b:38:ae:9f:aa:06:21:c3:48:d1:01:aa:
                    a4:97:01:d6:a0:ed:3f:55:20:37:90:47:33:a3:d8:
                    7e:5c:b7:4f:78:d6:89:cd:43:3e:03:c9:ba:7c:9e:
                    99:f2:11:98:61:99:06:90:e7:7f:05:af:ff:b9:59:
                    90:30:27:1f:af:ba:cd:ca:57:86:05:b6:35:d8:e0:
                    18:0c:04:13:08:de:c7:f4:30:a6:ce:bc:e1:d4:2e:
                    a9:92:47:55:02:90:97:68:5e:ca:07:93:9e:bc:58:
                    ec:88:a4:89:28:eb:6f:34:72:fb:b7:e9:11:09:c7:
                    19:1e:87:ef:c5:a8:1e:c3:5c:49:af:0c:57:88:74:
                    1c:43:d5:70:49:5a:d4:f0:78:80:53:fc:25:f6:d4:
                    c9:53:77:d7:7a:96:db:12:84:cc:5b:48:ee:f4:53:
                    df:bc:d8:59:fe:77:24:33:29:66:ea:d8:22:42:f5:
                    93:8c:67:a1:ed:5d:13:4f:ea:23:f5:ba:6d:4c:9b:
                    3f:45:91:78:8c:af:4c:66:f7:4e:8f:6a:49:c2:ff:
                    b7:ce:46:24:85:ea:0e:b9:c5:0a:9f:aa:f9:5d:de:
                    93:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9F:0F:B9:4E:7A:60:AF:EC:95:77:06:98:02:2E:ED:95:5C:AC:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/09c48bbc-6b05-30bf-9605-fe4f3101a0d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:3f:2d:54:24:99:b3:e6:0b:58:36:d6:70:74:05:df:31:01:
         cc:f0:10:d8:94:4e:24:d0:84:4d:c9:01:c0:59:68:7f:19:19:
         83:db:a3:fb:00:f4:74:e4:3d:c4:8f:7d:d7:05:e6:10:bb:72:
         2a:2c:dd:9f:99:c9:62:20:cb:3e:2f:c9:87:be:6d:50:01:ba:
         6e:ea:61:e9:ff:0d:ae:85:7a:ee:ec:94:d0:db:4c:28:39:d9:
         15:0d:b0:50:73:e9:31:85:e6:4f:6e:b6:3a:c7:0c:6a:07:53:
         6e:85:f1:0c:bd:7b:40:65:05:4e:bb:39:77:42:49:cd:66:1b:
         61:25:60:c0:8d:f1:7c:b7:8c:2a:85:37:d3:7a:c3:f4:8c:c0:
         0a:e2:a6:e0:bb:3e:29:14:01:96:35:47:18:22:5a:e0:52:f2:
         0f:6d:54:41:88:5e:e5:8b:28:cc:67:6d:9f:2a:87:2a:64:39:
         5e:dc:3b:47:64:b3:a9:22:20:64:fd:db:f2:89:db:63:9b:b7:
         53:c8:59:9e:e7:16:40:9d:19:fd:e3:77:fe:34:20:0e:ee:46:
         60:70:95:b1:b6:3f:04:a1:24:bc:b2:6e:9e:00:f7:bb:9c:68:
         bc:5c:ec:e5:a0:e2:61:f2:2b:c5:ab:e4:29:b8:21:2f:61:3b:
         99:10:2d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 21:08:48 2025 by rpki-client