Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7cd5a713-8a01-35fd-b964-96eb1c44ba2b.roa
File:                     7cd5a713-8a01-35fd-b964-96eb1c44ba2b.roa (raw, json)
Hash identifier:          Dr2IlNgnxnpcdl1scTc5nfVJi7sJWnKo7MvYT0E7vPk=
Subject key identifier:   C0:0E:39:C3:56:6E:33:02:0F:C2:DC:26:DE:3D:0B:E7:4A:D2:78:16
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24D4597E18ACE94545FA40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7cd5a713-8a01-35fd-b964-96eb1c44ba2b.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.134.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:d4:59:7e:18:ac:e9:45:45:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=753ba901-5822-4027-a28f-1d59f93d5eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b3:dc:81:37:09:5c:fc:47:a9:65:ab:42:20:
                    05:e9:cd:2d:75:39:63:a9:77:86:de:a6:f2:1b:e3:
                    6a:62:d1:88:d6:04:4b:7b:68:3a:de:bc:0b:86:ac:
                    ef:b1:48:0a:ce:4b:fb:11:87:00:1a:87:b5:be:2b:
                    a3:04:08:ca:b2:3f:b0:95:0f:a4:90:13:b5:27:6f:
                    69:c6:64:2b:76:dd:59:86:b0:b9:6c:77:4c:d6:67:
                    3a:2d:6d:00:76:cc:0c:8b:eb:96:7a:ba:1e:ea:0c:
                    0f:28:c0:da:ac:f6:56:a4:1c:d8:d5:04:24:44:96:
                    01:65:0f:eb:62:4c:47:41:68:56:62:05:47:46:83:
                    51:b3:f6:35:ff:a5:f4:27:9d:cc:a7:cf:61:94:d0:
                    64:89:b7:b8:01:59:46:09:7b:b6:d6:88:68:29:e2:
                    4a:05:74:45:29:00:be:18:ab:d1:6b:8e:c1:4f:ac:
                    ac:00:f3:95:0c:46:eb:3f:96:14:e9:34:33:9c:30:
                    30:6e:de:70:bf:ba:0c:4d:f3:62:ed:4c:ef:30:23:
                    48:c7:a6:4f:f9:48:56:e9:f6:e0:ee:ac:fb:39:a0:
                    20:44:a8:2f:82:64:4a:6e:cf:b6:42:c9:9f:e9:42:
                    8d:b9:ed:8a:1d:9c:bc:06:c1:eb:42:f0:9f:62:63:
                    a3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0E:39:C3:56:6E:33:02:0F:C2:DC:26:DE:3D:0B:E7:4A:D2:78:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7cd5a713-8a01-35fd-b964-96eb1c44ba2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e4:94:07:61:3f:47:37:43:70:a9:de:75:2f:08:46:99:65:
         28:86:6c:7f:f6:16:bb:0d:24:9b:bc:68:65:ca:7c:d1:e8:dd:
         0c:db:3e:c9:a5:27:4c:9e:0d:be:78:49:6d:e1:56:b5:7c:b2:
         68:ed:13:b8:95:2a:72:5a:fe:a5:61:d6:d7:7c:df:ee:b9:ee:
         89:82:35:2c:b2:75:3d:ff:bb:11:0f:15:72:3d:04:11:d6:7f:
         e1:3f:1e:11:21:03:0b:26:1c:ed:5c:39:ec:34:1d:60:c9:c8:
         f9:d1:8e:20:34:29:9c:71:70:5f:f6:cc:51:80:a3:7d:66:4e:
         ab:93:dd:82:c5:84:67:80:7b:de:55:98:b4:9e:28:15:f1:61:
         f6:ec:1c:42:6b:39:ee:21:1d:76:ef:92:12:10:3b:45:22:e6:
         bc:e4:98:18:2c:c9:0e:69:29:6f:e0:85:61:73:d5:68:e9:2e:
         a3:e7:62:e8:e5:b1:05:26:d3:73:ca:4e:dc:f4:b7:07:72:cc:
         9c:05:55:85:66:ea:0a:25:3a:40:03:37:1d:4b:33:ca:f5:b5:
         c9:bb:9b:58:7a:51:97:cd:45:c5:25:e0:cb:fa:83:93:75:9b:
         8f:89:00:ea:fd:5d:96:0e:00:dd:6b:47:dc:0f:df:d7:f2:cc:
         09:16:0c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 11:32:31 2025 by rpki-client