Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/128bb7f5-5254-3a3d-ac5b-edca6a9ecb37.roa
File:                     128bb7f5-5254-3a3d-ac5b-edca6a9ecb37.roa (raw, json)
Hash identifier:          WO/zjkh9y3/GKoHzSCnqUY6BnS1K/Km6mGD81f7oPw4=
Subject key identifier:   FB:84:16:94:6E:32:86:6A:67:6F:41:9C:F1:64:16:FC:8F:38:58:6F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9ECF751A65CFDE6FAAC40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/128bb7f5-5254-3a3d-ac5b-edca6a9ecb37.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     15169
IP address blocks:        104.134.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:ec:f7:51:a6:5c:fd:e6:fa:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=5cbd3eb7-df7e-499b-823f-15d5767e9e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:43:0d:4b:30:75:d7:26:24:ea:4f:3c:1f:9e:
                    20:b2:0d:b6:a3:e4:63:76:c5:88:a2:c6:36:98:f4:
                    8f:0d:95:de:4f:41:71:89:31:a8:3f:bc:a0:96:42:
                    a6:fe:15:f5:4e:59:4d:1d:4b:9c:27:fb:a0:d9:86:
                    3a:a4:2b:30:0d:00:62:58:ee:a9:17:9e:ca:17:28:
                    3e:6e:07:3b:0c:28:33:7a:a8:b2:50:26:18:2f:30:
                    38:34:e0:10:79:d2:4c:f8:4e:28:4d:f6:76:3c:33:
                    bb:56:fe:2a:86:d9:76:7f:78:1c:de:c6:0c:9b:33:
                    5d:12:47:91:fe:87:94:c2:99:41:4f:c3:89:67:e2:
                    99:b1:0c:2d:79:11:5d:a8:ed:89:99:54:a6:ba:0b:
                    c3:5f:dc:19:2a:62:21:17:18:6f:36:05:cc:85:b6:
                    e4:1e:6d:86:8c:65:19:ca:6f:42:24:35:4b:11:64:
                    32:93:e8:f0:50:fd:cc:9e:78:80:5e:11:47:98:39:
                    15:e8:b9:12:5a:3f:4a:ef:e4:54:a3:df:8e:8d:be:
                    0b:22:87:ad:02:2e:d9:e5:1e:94:ad:5b:05:90:c6:
                    4d:71:3a:2f:b9:15:b3:65:09:3d:61:18:38:95:72:
                    76:20:07:7c:1e:be:2b:ab:f8:61:d0:f2:f3:60:6b:
                    16:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:84:16:94:6E:32:86:6A:67:6F:41:9C:F1:64:16:FC:8F:38:58:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/128bb7f5-5254-3a3d-ac5b-edca6a9ecb37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:71:47:5d:9c:a8:a9:5b:ad:98:65:a4:22:07:6a:0f:ca:27:
         bc:5c:d3:0f:8e:1d:64:ca:32:c5:35:0b:ca:f8:2a:f4:20:34:
         3d:90:ec:86:d8:15:4e:41:dc:58:3b:5a:81:43:a1:2d:0b:4f:
         fd:ee:30:0e:a9:9e:44:d0:1f:6f:0d:fc:c0:79:63:55:27:f2:
         5e:a9:c5:d1:e8:e5:bd:10:3b:06:1b:db:ff:e9:5c:e9:db:d0:
         da:d2:2d:68:ef:98:2a:4e:62:d8:76:97:13:99:6e:36:33:7a:
         97:e1:b3:3d:a1:ad:b0:f9:bb:2e:04:16:50:4f:c3:1e:2d:ff:
         84:d1:9c:b3:cf:63:a0:9e:43:05:b6:25:53:3a:86:71:40:41:
         b9:59:4c:14:4a:de:a4:78:47:ad:bd:85:93:1b:b9:23:76:b7:
         1e:c3:d4:3f:24:f2:a9:57:48:cf:2c:a6:1d:1c:2b:da:36:3f:
         bf:c5:d4:75:84:ca:b1:40:7d:75:2e:4f:71:c8:49:9e:90:67:
         d7:fc:04:83:0e:3d:ee:6c:86:d1:ae:e6:eb:1e:3c:39:21:2d:
         cb:cc:c4:8c:a0:06:98:d9:5a:5a:dc:04:31:20:10:96:62:0f:
         02:d3:2d:50:2c:fd:df:f7:1e:a7:54:3b:cb:9d:cc:b3:0c:a0:
         33:d6:c4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 10:55:20 2025 by rpki-client