Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a724ffb-ee8d-3ed5-956e-7efde39ee995.roa
File:                     8a724ffb-ee8d-3ed5-956e-7efde39ee995.roa (raw, json)
Hash identifier:          qJEQBIdiFn8xyDJlvbjC87H3zpD+bbusPCU5E1DiM6E=
Subject key identifier:   36:08:58:15:EB:B2:64:A6:F1:B8:C2:70:60:4D:78:19:15:4A:AC:8E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9FA244F53EF846CD76580
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a724ffb-ee8d-3ed5-956e-7efde39ee995.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     395973
IP address blocks:        104.134.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:fa:24:4f:53:ef:84:6c:d7:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=c27cf3b5-eea7-4137-b3c9-ec434d9a5c10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:89:9a:34:c8:79:34:34:90:b3:e5:8f:78:d0:
                    1f:93:4f:7c:4c:45:8d:98:a0:4c:36:d0:9f:1f:ce:
                    72:f7:bb:87:85:00:e0:51:3c:ee:c6:38:73:de:ec:
                    93:d1:06:ed:e4:a0:29:c6:07:96:c1:ce:dc:0a:9b:
                    f4:1f:87:49:05:ac:cd:c8:2b:69:f3:4c:e4:07:f0:
                    c3:33:0b:2f:ff:7e:b4:03:50:61:11:d0:ba:df:9d:
                    30:48:a0:90:ac:16:1f:c8:c3:95:d9:d7:30:55:99:
                    2f:af:e7:d8:28:22:bd:8f:ba:14:c6:25:07:69:42:
                    03:64:b9:d2:0f:38:74:8d:15:37:82:54:50:ae:aa:
                    8e:5c:1e:89:32:81:9a:40:43:39:c3:76:45:0f:2b:
                    bb:7a:ef:eb:ea:33:e6:ba:83:7a:96:a6:06:25:ae:
                    92:9b:9d:d4:17:05:71:50:1a:25:80:10:25:4c:69:
                    4a:7d:8c:dc:36:6b:88:fb:92:c8:3b:dc:08:67:9a:
                    7b:99:62:58:a2:d1:eb:3d:6c:7f:fc:de:0d:a9:be:
                    47:99:51:c2:f0:d2:85:9c:24:d4:b8:aa:36:fb:1d:
                    9c:ad:5e:a6:b3:59:e3:f0:c1:ef:ad:b5:cf:71:d8:
                    f9:e9:16:b0:4d:f4:cd:b4:5c:50:9a:6b:20:0c:8c:
                    63:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:08:58:15:EB:B2:64:A6:F1:B8:C2:70:60:4D:78:19:15:4A:AC:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a724ffb-ee8d-3ed5-956e-7efde39ee995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:a3:74:8c:17:33:8c:b3:03:74:be:ae:48:07:a0:d5:63:ca:
         66:13:0d:0b:9b:be:56:36:8d:a0:a7:4f:be:e9:7e:82:c2:55:
         0c:ee:f7:30:1a:7e:02:9d:87:ae:a1:9d:16:4c:f9:66:6b:94:
         71:93:d7:de:d3:23:03:4e:05:da:d3:93:49:1e:04:24:36:88:
         a5:e9:6e:d3:2c:28:9b:c7:10:1e:e7:cd:7b:5e:8f:35:14:04:
         c3:c9:dd:98:b1:84:73:26:e9:75:02:f6:a0:6e:3a:b7:71:53:
         24:f9:30:a8:a7:cf:e6:77:10:d7:a6:99:2d:8b:a1:c1:0a:f0:
         3f:93:d6:19:f6:f0:87:77:77:e1:b4:62:74:79:81:a8:14:88:
         fb:70:3c:4a:af:94:18:e9:19:ac:86:0e:88:d5:39:a3:71:c6:
         4a:d2:94:a0:e6:91:14:32:07:8f:85:f7:31:24:a7:51:4a:05:
         b0:b7:48:c5:f7:5b:90:26:a1:5a:e9:ec:bf:0f:7a:88:61:45:
         5d:4f:1e:72:63:54:59:61:1e:7e:66:b7:f3:76:b1:3b:63:dc:
         9e:48:19:53:9d:c6:8f:91:88:2f:8d:75:25:70:10:5e:a0:d8:
         ae:79:4a:7f:de:24:ed:dd:ec:62:7a:68:a2:f8:aa:aa:c6:39:
         2e:f4:b0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:28:07 2025 by rpki-client