Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b327f7af-7f55-34fd-a593-db805d4b22ff.roa
File:                     b327f7af-7f55-34fd-a593-db805d4b22ff.roa (raw, json)
Hash identifier:          coQFieytnkhmJyFir69uLF0wD2F3OXSr+0d9U1TMkRc=
Subject key identifier:   6D:F7:A6:00:49:65:05:EC:CE:7D:A9:2A:3C:8D:BD:35:E5:5A:C7:43
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9F699581D31405D2D2580
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b327f7af-7f55-34fd-a593-db805d4b22ff.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     15169
IP address blocks:        104.134.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:f6:99:58:1d:31:40:5d:2d:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=c9cc8710-76d8-4507-99f9-63efa45546c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:23:3d:05:59:91:90:94:1e:90:f0:ca:95:99:
                    b8:8a:9a:1b:d5:1e:ea:d9:63:71:a3:68:ae:18:f0:
                    99:71:20:25:c2:98:4f:72:e8:bc:6b:1d:e0:c3:db:
                    66:2e:28:4f:1e:d9:3c:40:12:58:8f:28:6d:39:16:
                    9c:53:2b:31:cf:76:9f:f5:58:1f:31:2d:40:50:25:
                    8d:7a:e1:7c:8d:b9:44:6f:8d:72:c0:f0:8c:5a:97:
                    9c:11:d3:b9:6f:2d:fe:84:a9:cd:3c:9f:4f:e5:2d:
                    c4:60:8d:6d:9d:fa:f9:a5:67:e0:48:8f:6c:db:84:
                    be:cc:10:ff:0b:a4:8e:e3:b1:b7:af:de:af:47:61:
                    a5:74:52:5c:a1:d6:97:4f:cb:cc:55:5c:33:ab:bf:
                    0b:dd:65:ca:b1:f7:2e:c1:83:b7:32:32:41:9f:ff:
                    8f:5a:52:51:96:0d:75:69:e3:03:72:c7:21:9f:98:
                    12:35:ec:f0:0d:53:aa:1d:53:fe:ec:01:b9:4e:67:
                    2c:4c:78:99:ea:9c:3d:5a:a8:44:6f:a1:01:38:8d:
                    6c:19:b6:8a:64:64:12:5e:1f:6a:ce:14:f9:9a:16:
                    09:cd:7b:3b:54:55:be:b9:36:45:32:f4:e7:90:c2:
                    6f:63:01:b2:97:68:fd:af:29:9a:c2:f2:d5:43:a0:
                    aa:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F7:A6:00:49:65:05:EC:CE:7D:A9:2A:3C:8D:BD:35:E5:5A:C7:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b327f7af-7f55-34fd-a593-db805d4b22ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:bd:aa:67:f1:a7:c5:a6:ba:a8:42:b7:ef:44:e0:df:05:2d:
         4c:76:93:e7:07:3c:e7:04:dc:5f:01:46:97:81:4a:9d:2e:e5:
         3d:6c:cc:bd:47:99:35:a8:59:06:84:8a:7a:71:3b:8c:ed:f3:
         28:34:ce:70:39:a6:c3:4b:80:04:da:5a:15:29:ea:d3:17:1a:
         d2:48:ee:49:6a:de:aa:5a:cd:05:0e:11:b9:fb:50:48:81:be:
         74:3a:ef:a7:f9:1a:23:92:c1:4f:e0:c2:59:b3:07:3e:fb:1c:
         bb:d9:cb:b0:18:8b:20:09:a8:21:ac:f6:b4:dd:2d:bf:91:c7:
         67:af:9b:6b:00:1f:e6:a4:0e:d8:e8:82:90:1e:a9:bc:98:01:
         12:c3:fe:a6:72:b3:36:e3:e5:a2:ed:ad:0f:79:2c:14:47:d6:
         53:e9:27:a5:d8:b1:59:75:99:3f:f9:21:52:59:4e:ba:7d:60:
         b4:5f:58:3f:a8:36:3f:b2:5d:28:e0:49:80:03:87:87:5d:cd:
         93:c5:2d:e3:c5:0f:47:6c:62:8c:ab:04:b8:09:29:6a:ad:3a:
         4a:3d:be:bf:ee:2a:94:64:3f:88:d3:0a:8f:4a:99:f9:95:7c:
         f9:3b:e6:2d:23:8d:4d:81:09:4d:f3:b5:82:bc:2f:3f:38:25:
         1e:d8:f8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 10:29:33 2025 by rpki-client