Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/663cebbc-414c-31b8-a2c2-256e295c4fa5.roa
File:                     663cebbc-414c-31b8-a2c2-256e295c4fa5.roa (raw, json)
Hash identifier:          oJsDoKHwrLbmmJKmI/2qK7acGvjdcca/gNH7QZRMQLs=
Subject key identifier:   01:C7:80:66:B3:48:DF:9D:38:33:9E:6A:07:B5:C5:E6:E0:CF:D3:E9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24A331290AB1A116DCEDC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/663cebbc-414c-31b8-a2c2-256e295c4fa5.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.134.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:a3:31:29:0a:b1:a1:16:dc:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=1f70282f-56b2-44c9-ac36-2ecdd4de0b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f1:7d:ad:d4:2a:a9:6c:b3:1b:c2:68:8c:1e:
                    1f:b2:35:9d:20:97:9f:1e:58:42:81:9c:50:3f:69:
                    56:42:e9:8b:db:bd:71:22:4a:49:18:c5:27:c1:6a:
                    73:ba:a6:49:4f:2c:e7:cf:ba:5c:9b:f8:4e:3d:89:
                    49:3a:42:4e:71:df:c3:6b:61:31:bf:87:70:b7:88:
                    d9:d7:a6:49:82:2c:03:cb:8f:e1:2f:37:2b:1c:75:
                    e6:18:b2:4c:bd:54:97:c2:83:fc:46:24:5c:05:66:
                    40:ef:85:2c:e7:67:2a:96:42:d6:93:1e:0f:77:b6:
                    fe:88:4d:53:24:cb:c2:38:ec:64:fd:99:2c:ad:4c:
                    da:93:c3:fb:c0:e0:29:89:f9:cf:c8:e5:d3:1b:ad:
                    91:89:07:3a:8e:59:9f:c1:90:69:35:aa:3e:f7:5f:
                    73:3f:a5:e9:e4:63:e7:13:76:20:47:44:b4:9a:e5:
                    53:73:21:fd:8f:d5:d9:2a:3b:68:fe:bc:fe:f1:54:
                    47:b2:ce:e5:b0:e8:7b:8a:68:64:19:ec:44:35:13:
                    a3:66:18:6d:f6:8b:62:90:fc:8a:cc:d9:c9:ac:10:
                    8b:81:cc:fc:7f:b8:37:0c:d8:9f:20:41:ed:48:f0:
                    b4:bf:19:5f:72:47:b9:8f:07:68:3b:10:59:ca:2d:
                    d5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C7:80:66:B3:48:DF:9D:38:33:9E:6A:07:B5:C5:E6:E0:CF:D3:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/663cebbc-414c-31b8-a2c2-256e295c4fa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:06:58:97:82:e8:c1:82:d4:a7:33:77:08:03:50:7a:83:0e:
         3c:8f:90:ed:f3:cb:d0:37:05:0c:9d:d7:c4:ef:fd:1d:5f:00:
         1e:c0:49:5e:e8:0c:5f:f6:2c:a2:de:ce:17:9f:df:7f:94:e1:
         d0:ca:f6:07:3e:73:77:ed:1d:27:4d:a6:4d:92:99:bb:2e:cc:
         cb:61:c8:67:ac:ba:8d:e0:51:02:04:41:a8:83:07:cf:57:68:
         51:95:dc:79:e7:cc:ad:79:cc:62:d1:58:a0:6e:9b:6b:09:14:
         e3:40:96:e7:f8:47:a6:d6:58:f9:75:01:9c:33:3b:c2:9a:ec:
         ef:a4:5c:6c:f9:08:4d:0f:3e:25:82:b3:f6:18:dc:ae:cb:d3:
         28:39:6a:14:5e:5c:7f:05:74:f0:ec:4e:32:01:1a:bf:48:f3:
         ea:67:e1:4d:31:66:08:0f:60:99:c5:73:7f:08:6c:f6:33:9f:
         fc:de:4f:b4:96:8b:e5:3b:03:f5:95:5e:21:18:f2:eb:43:33:
         e6:0d:37:85:ab:0b:4a:50:e8:29:7f:24:8c:25:dd:88:f7:ad:
         d0:c6:35:99:d3:31:65:af:8f:31:f1:9c:bd:48:51:52:6b:4f:
         fe:05:56:a5:1a:63:13:18:f3:36:1c:5a:44:1b:b8:2c:1f:b4:
         61:66:01:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 10:30:58 2025 by rpki-client