Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206860e2-e972-3b6c-a4c3-e144604e1ae9.roa
File:                     206860e2-e972-3b6c-a4c3-e144604e1ae9.roa (raw, json)
Hash identifier:          LAbRMZL4ii+KdTmT4O/hc/pbZS570OwsZFHOA0DZadw=
Subject key identifier:   55:95:DF:8F:BF:84:7A:75:F8:92:C7:04:91:08:87:8F:D7:AA:26:A4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24CD54FF36C68EBDBFBF00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206860e2-e972-3b6c-a4c3-e144604e1ae9.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     395973
IP address blocks:        104.134.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:cd:54:ff:36:c6:8e:bd:bf:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=ac87d422-970a-4a08-b882-fb070642db7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3e:c7:63:69:9a:09:ee:bd:06:3d:3b:ed:c4:
                    ae:75:f3:c2:5f:d5:8b:79:53:85:84:fa:fd:df:b4:
                    ff:fc:d3:e0:61:b1:71:e9:74:1e:31:a1:df:ff:01:
                    1d:6e:49:03:57:de:7c:d3:47:e4:d4:81:46:62:44:
                    29:a7:61:73:9c:c5:a0:cb:fd:3a:98:cd:93:19:4a:
                    67:ae:c1:80:0d:3b:78:70:f4:54:e4:29:87:48:2b:
                    6b:75:c8:ed:75:f2:e1:bf:17:fc:f5:61:f5:c6:b3:
                    1e:84:0f:d3:c3:b0:ba:ec:ab:b2:fd:0c:ce:ed:b0:
                    fd:84:e9:df:c0:5a:6e:02:de:c2:1f:09:2b:00:b9:
                    1a:43:9d:39:70:da:ed:31:40:c1:d3:8c:80:c3:ef:
                    7e:6d:71:39:42:da:93:3b:16:16:c9:21:0e:b1:14:
                    10:c6:c2:12:67:03:ff:64:c9:0e:de:90:63:76:f5:
                    a6:79:8c:b8:77:19:df:b1:44:21:18:02:84:f5:0a:
                    d3:99:cb:68:11:9e:2b:9b:9c:42:9b:9a:c5:59:6d:
                    7c:7c:f8:3f:ae:44:7a:d6:8a:ab:e4:7e:03:13:9a:
                    09:e6:82:87:e8:65:0e:88:56:72:a2:25:e7:16:2e:
                    78:78:b1:ce:c5:57:5c:13:a5:07:f4:11:39:eb:6a:
                    f5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:95:DF:8F:BF:84:7A:75:F8:92:C7:04:91:08:87:8F:D7:AA:26:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/206860e2-e972-3b6c-a4c3-e144604e1ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:48:c5:48:b0:8e:76:b4:f7:1b:ac:2d:44:ae:17:51:b0:43:
         bf:98:04:ca:c0:84:43:e4:0b:07:8c:cb:0e:de:a2:22:b6:3d:
         8f:40:29:ac:a3:bf:84:92:7f:80:28:c2:4f:83:d4:f2:0a:41:
         ac:11:b6:b0:7b:bd:76:02:2c:0d:6c:f8:a6:b3:ce:e6:68:48:
         b1:7b:52:0f:fd:2a:2a:b2:a1:28:d4:56:2a:ed:80:9e:fd:a6:
         e9:d3:fe:63:5d:4a:08:fe:4b:ae:99:5e:43:c9:33:ee:5b:a7:
         d6:f6:b8:d3:69:59:4a:0a:b4:21:3b:ae:4e:45:81:27:42:91:
         9a:ad:ff:d2:82:e9:40:76:7a:bf:8f:61:ce:64:30:a4:59:8e:
         a2:46:b3:29:2c:a1:9f:39:26:67:c3:53:09:61:28:1b:dc:c0:
         6e:24:e0:48:2a:8f:54:cf:52:c6:cf:60:af:44:84:44:2d:63:
         97:79:88:19:32:d2:08:de:95:e1:7f:23:99:5c:5b:77:93:3f:
         61:21:76:5e:f3:1c:55:6d:73:e5:d8:cb:e3:e7:dc:d9:18:81:
         e3:ad:01:94:7c:0f:5b:4a:74:47:ce:84:ab:0a:b6:75:b2:b7:
         4b:98:f7:de:2e:53:c5:94:a3:22:a2:4e:ec:ca:e0:5d:a7:4b:
         31:53:ec:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 23:09:12 2025 by rpki-client