Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91db731c-9bb4-36f4-bcf9-7d4a3e3b44f1.roa
File:                     91db731c-9bb4-36f4-bcf9-7d4a3e3b44f1.roa (raw, json)
Hash identifier:          o1Ok7kSpO1T5ONmvOXTgYBVKh+uAUP9GoIhYYXSkI2s=
Subject key identifier:   61:E0:BE:16:3A:69:1E:2E:55:4A:83:73:12:54:4C:A8:3F:CC:C1:A1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24D6C7D6C053EF0C241A80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91db731c-9bb4-36f4-bcf9-7d4a3e3b44f1.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36383
IP address blocks:        104.135.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:d6:c7:d6:c0:53:ef:0c:24:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=62d721d9-efa5-41c6-a101-1aee99872bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:5e:ca:35:b6:73:7a:26:ff:93:d8:e2:15:
                    72:4d:f6:13:4e:8d:f2:d4:e0:fd:5d:3a:e9:bd:05:
                    9b:f5:33:54:2f:7d:eb:f2:cf:dc:93:62:a9:44:92:
                    25:16:e3:02:e3:04:f5:8f:c0:88:98:da:95:cd:7a:
                    9f:e5:47:03:2b:ab:66:74:fe:68:56:70:88:6a:5d:
                    87:50:be:28:7d:cb:80:cb:03:cb:4d:a2:71:f2:de:
                    44:e4:22:34:13:99:0d:e7:67:fd:45:68:84:29:38:
                    f1:c6:74:ba:a8:83:3a:f3:7b:1e:ff:27:0e:fe:51:
                    05:20:96:5f:7e:b9:69:8b:21:25:6d:79:2c:6d:44:
                    d4:95:e0:48:83:30:ae:33:43:30:bd:de:6e:a2:58:
                    f1:f3:c0:20:95:5a:0c:db:88:6c:00:43:a8:6f:76:
                    c1:e8:ca:77:de:35:41:c7:68:1d:de:68:b2:38:9f:
                    93:4b:f7:2c:7a:a1:7c:e0:b7:a6:d7:ed:d2:46:50:
                    94:9f:c1:d2:05:fd:c9:bc:d5:1f:59:f8:8e:64:3e:
                    41:9f:07:18:6e:d6:d3:a5:1e:11:14:87:27:45:0e:
                    f2:40:0f:0f:96:15:7c:f3:3e:a9:4b:0a:d5:a6:0c:
                    6f:ab:a7:46:40:1f:ec:88:b1:b7:39:a6:44:18:b2:
                    d0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E0:BE:16:3A:69:1E:2E:55:4A:83:73:12:54:4C:A8:3F:CC:C1:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/91db731c-9bb4-36f4-bcf9-7d4a3e3b44f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:6d:d8:d7:cd:a2:f1:24:2e:ad:bd:c4:d5:d7:ec:21:47:c2:
         71:a4:4a:7f:c4:4b:21:5d:f4:ef:32:39:c2:36:c2:9f:01:36:
         04:b1:7b:5d:7d:63:8f:af:09:76:b0:82:44:0a:3a:e8:ea:31:
         e6:fd:7d:ff:59:2d:07:b4:ac:03:19:f4:a2:8e:68:1c:5c:7b:
         7e:df:bd:b3:5c:b9:fd:a1:cd:81:c5:05:1f:a0:ed:6a:2f:0d:
         75:be:96:5a:d3:00:c0:85:13:65:ae:af:36:42:bd:de:80:6a:
         06:72:9f:e4:dc:f1:41:a0:a3:3f:24:e7:44:89:73:c0:23:48:
         6d:d8:45:fd:83:35:a3:24:80:f9:83:7d:5b:67:fb:c9:b2:e0:
         6b:9e:44:4e:94:0a:8c:5b:db:48:7d:86:ed:cb:dc:e4:c5:b1:
         fc:fd:47:a9:11:71:2e:b0:bc:a0:16:d4:58:6d:21:ac:9e:27:
         2c:e2:7e:b6:3c:44:f3:b1:f7:ca:60:19:26:97:83:81:a3:04:
         aa:72:9f:2c:5f:25:1e:f0:e3:8e:68:21:b6:25:d3:3b:f6:09:
         26:d5:95:31:04:2d:61:a5:d3:6a:69:c0:ac:ff:56:7f:47:9a:
         1c:03:c9:bd:c9:a2:5c:20:df:e9:53:c4:be:f5:fd:3b:56:65:
         69:7c:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 18:22:46 2025 by rpki-client