Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3d8926f1-40ac-3315-8a5a-b55e9b202869.roa
File:                     3d8926f1-40ac-3315-8a5a-b55e9b202869.roa (raw, json)
Hash identifier:          2bhh6kxUri52SJEg3qZsV/Q3ek5jHFPvo6g46ga4l68=
Subject key identifier:   72:D2:A6:53:4C:49:1B:15:ED:D9:2B:13:55:B8:4C:50:3E:21:05:D4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24B898B3813F15D30021D0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3d8926f1-40ac-3315-8a5a-b55e9b202869.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.134.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:b8:98:b3:81:3f:15:d3:00:21:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=9188fafb-9c6b-4cb5-9f44-2a73ff862d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5c:47:2a:89:27:28:07:0a:22:95:d3:63:1a:
                    f2:d1:9b:14:ac:a8:ac:aa:dd:e4:ee:d5:25:a5:c1:
                    8d:f0:ad:e5:89:ca:e8:56:10:7e:cc:c5:50:62:f2:
                    8d:43:03:c5:69:94:3a:3b:ec:30:ab:e9:ab:20:01:
                    ab:ff:c2:b7:c4:2b:ad:2e:df:a8:a4:62:13:cd:e1:
                    39:b5:e4:07:eb:43:e0:64:ae:ed:92:eb:9e:18:28:
                    74:92:9b:fc:45:b7:97:8c:f1:75:1c:f4:a3:60:8d:
                    5d:dd:1f:79:fc:31:1a:81:20:7e:96:d6:17:3d:a8:
                    3d:31:f4:a3:cb:13:c8:f5:27:00:63:a6:e6:e8:36:
                    11:7d:ce:a8:11:8d:da:6e:2d:ef:85:c1:0a:a7:c2:
                    bd:a7:19:29:e4:b9:cd:f6:8d:4d:2c:f6:d9:1c:0f:
                    95:5b:2a:ad:f0:4f:27:c8:da:ec:3b:b2:0d:7e:bb:
                    58:47:a5:2b:77:b0:1a:3b:68:d3:cc:90:c6:c4:6e:
                    00:c4:1d:69:e4:e2:fb:03:b1:e1:1d:bc:f0:06:0a:
                    72:f2:25:e2:59:8e:77:c6:63:72:d5:51:34:a4:b3:
                    be:b4:b0:55:8b:47:fb:3f:e8:c6:cf:72:80:98:58:
                    e2:e2:3b:c5:9a:09:d3:7f:b4:ad:38:fb:f3:2b:9d:
                    17:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D2:A6:53:4C:49:1B:15:ED:D9:2B:13:55:B8:4C:50:3E:21:05:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3d8926f1-40ac-3315-8a5a-b55e9b202869.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:fb:af:6e:5c:cf:46:d0:9a:d9:f7:3b:c8:20:81:59:ce:8d:
         fb:60:b3:97:18:2e:d5:46:3e:a9:56:29:f0:9d:3f:3d:74:81:
         4f:c8:87:f1:7f:a0:ae:26:cb:57:40:85:e2:d9:47:14:67:f0:
         16:29:da:f5:c8:22:09:3e:7e:b9:00:6f:e1:5a:1f:ce:bf:9f:
         13:38:e2:2a:28:f6:eb:c6:2d:f0:f7:99:a2:6d:b4:41:4f:bd:
         1a:df:19:b3:b2:21:cb:1d:b2:8d:28:a4:38:ab:56:a1:27:50:
         2d:08:9f:87:e4:1f:a3:23:4e:dd:a7:68:50:7b:2c:1e:a1:36:
         86:4e:51:6c:1d:ff:31:dc:54:ed:da:d6:83:e4:5c:21:df:2b:
         86:39:bb:01:63:60:37:c8:0f:7f:13:01:17:9c:5a:69:41:c7:
         bc:fa:b7:4f:e1:51:af:27:72:d7:49:55:7c:f7:c3:e1:9c:f6:
         96:9f:23:ee:23:4e:e9:01:f4:84:24:85:83:31:98:9c:49:2e:
         9d:43:75:81:27:91:27:92:5c:0d:34:2a:f6:ae:d4:85:78:ea:
         31:15:2b:1a:a9:4b:2d:dd:f0:40:52:b7:7c:65:bf:f1:c8:ae:
         4c:f5:3e:d7:d2:51:1d:ad:e2:c0:32:fe:9e:bb:11:28:10:05:
         cf:65:56:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 11:54:23 2025 by rpki-client