Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/37abedc4-2900-314b-ad6a-37f15041c34b.roa
File:                     37abedc4-2900-314b-ad6a-37f15041c34b.roa (raw, json)
Hash identifier:          L8Lm2Hyctv9h99kZrKCvhGPfM6d6B0+IFq0bfVa8KOU=
Subject key identifier:   1D:45:97:22:3B:67:73:BF:C1:06:E1:32:BB:5F:43:5D:D4:30:36:A6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24CC396FAA24E199B4E608
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/37abedc4-2900-314b-ad6a-37f15041c34b.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     395973
IP address blocks:        104.134.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:cc:39:6f:aa:24:e1:99:b4:e6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=c75bdde5-eade-4c01-973f-9407d3259be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3d:86:3c:d0:8c:65:9e:cd:a3:77:a5:94:3b:
                    93:43:78:68:ad:72:44:dd:52:fb:6e:3a:9a:cc:c0:
                    13:16:bf:77:82:dd:e2:d1:48:f5:97:50:a7:2e:72:
                    11:f1:fe:8a:6d:ff:aa:f9:81:39:10:a2:dd:4b:5d:
                    3e:4b:91:b6:39:6e:3a:de:c4:b7:77:d3:c2:93:55:
                    09:fa:2a:6b:d5:a8:f7:95:e0:51:29:da:34:be:02:
                    d7:c2:2f:63:4d:87:d8:3e:1b:34:ac:f5:da:8d:9c:
                    bd:65:12:df:01:35:6d:6f:17:23:69:a5:c9:e1:a0:
                    b7:90:1c:e2:ef:a5:ae:16:1a:63:44:42:27:3d:4e:
                    74:37:c3:a3:2d:eb:7d:49:bf:32:d1:39:e5:f8:80:
                    42:68:72:70:27:88:87:bc:8b:eb:9c:a9:73:c5:71:
                    a3:b0:04:6e:5d:d4:9c:4f:c3:b5:12:bc:79:0e:02:
                    f2:4e:3f:45:25:77:50:77:d8:5d:ca:ed:7b:2a:91:
                    78:bf:f4:cd:f6:41:ef:0b:3f:71:87:8f:a3:aa:8a:
                    9e:61:1e:f6:32:a6:61:98:75:70:98:87:07:24:45:
                    80:04:f7:fd:68:94:ca:9c:73:75:e1:bb:a7:3b:76:
                    73:d6:77:d0:c3:c1:af:09:2d:98:bd:44:0d:6a:6b:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:45:97:22:3B:67:73:BF:C1:06:E1:32:BB:5F:43:5D:D4:30:36:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/37abedc4-2900-314b-ad6a-37f15041c34b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:50:ed:45:7c:c1:ed:3e:03:f7:cb:78:a1:e6:03:ed:45:85:
         af:63:1b:d1:b9:69:39:df:3a:74:be:48:cf:20:37:45:ca:5d:
         04:0a:3a:a3:b2:37:b8:30:39:16:de:62:01:e1:13:f3:e3:4f:
         3f:32:36:07:31:19:04:49:8c:ad:17:4a:fe:26:cd:5e:4c:26:
         f8:2b:10:7a:5b:b6:8a:97:3c:9f:bd:b3:2e:ce:c1:43:78:fd:
         b0:13:05:b1:0b:80:8b:d4:4e:2f:d6:83:3a:03:2a:57:ca:9a:
         bf:77:3a:d1:59:72:72:59:48:87:27:3a:d0:78:e9:d4:ee:91:
         52:48:85:ff:a6:86:95:9d:30:f2:2e:f6:82:75:a6:da:a3:47:
         69:65:06:c8:cf:15:ef:20:a3:9c:32:08:82:62:6e:b2:8a:c2:
         56:8e:03:03:c4:28:4b:95:1f:91:9e:b6:0d:d8:5a:be:b8:93:
         f5:11:06:84:af:c9:bb:5a:5e:e6:53:d6:22:86:87:48:89:1a:
         aa:3b:2f:2c:76:83:5f:32:be:85:99:08:89:76:27:ae:03:71:
         66:cc:6b:f2:11:68:f4:45:b7:55:be:19:cc:83:55:10:05:f1:
         28:06:07:a5:c2:ab:11:ea:67:52:75:ec:b5:be:39:bf:66:d5:
         a6:fb:e4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:51:34 2025 by rpki-client