Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3741a62-6b00-3cd2-a119-5270fe1c77c2.roa
File:                     e3741a62-6b00-3cd2-a119-5270fe1c77c2.roa (raw, json)
Hash identifier:          iKh+q7bJVE2iyY1mDi37FxsgpsCjmP2mxdSP4SDtGjs=
Subject key identifier:   12:1B:B0:34:98:4E:E8:97:CB:01:2B:59:E7:50:E9:3C:4B:58:65:DC
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9F1068844E365ACD0BAC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3741a62-6b00-3cd2-a119-5270fe1c77c2.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     395973
IP address blocks:        104.134.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:f1:06:88:44:e3:65:ac:d0:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=160a660d-36f6-4aef-bbed-12e9e2394c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2f:59:de:6f:87:bd:c4:22:44:ff:fe:01:cc:
                    e3:26:7d:12:6d:74:0b:39:f8:a1:3e:87:5a:f6:d9:
                    42:37:77:e3:9b:84:3f:ce:74:12:c5:75:b7:31:ae:
                    91:31:38:67:1a:8f:12:87:5f:4e:c0:40:ce:1d:2d:
                    01:e5:25:ab:8f:00:6c:01:2f:30:48:7d:ba:38:36:
                    da:bf:0b:07:21:09:36:72:0a:aa:bb:64:b3:40:22:
                    a1:73:50:53:da:ea:c7:65:82:f6:d1:f3:f0:6d:3c:
                    e2:2c:8b:3a:c5:27:0f:a2:81:8f:c0:3e:0b:35:70:
                    15:9c:43:e0:8f:02:36:88:7e:15:37:c6:d7:d0:d7:
                    ea:b1:24:de:ca:bc:a4:be:79:79:55:d9:d2:a1:1f:
                    f1:5f:fa:54:33:42:f5:56:83:df:66:e0:6e:98:67:
                    22:8d:e3:40:5c:f5:87:28:a4:63:43:16:95:f8:a8:
                    c4:52:77:c0:02:c6:8b:29:7e:93:2a:96:b4:80:44:
                    0d:7b:1f:9c:b8:4c:e3:0c:87:9b:95:7f:8c:4f:d5:
                    41:68:bd:49:16:28:31:cd:12:51:6f:da:b6:d1:f2:
                    05:80:d0:a0:13:8e:4a:c7:ff:bf:27:74:4a:1a:79:
                    de:86:36:f1:f3:73:08:2e:ea:b7:e6:43:e6:78:25:
                    3b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1B:B0:34:98:4E:E8:97:CB:01:2B:59:E7:50:E9:3C:4B:58:65:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3741a62-6b00-3cd2-a119-5270fe1c77c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:fd:99:eb:6c:1b:72:09:1a:67:11:be:9c:6f:f5:7d:f2:6c:
         02:f6:96:97:43:df:fc:aa:70:22:9d:87:6d:12:18:ac:d8:23:
         69:df:1b:10:f4:cf:98:17:1f:67:89:a2:12:5a:65:94:88:d6:
         58:30:b9:29:2e:96:64:66:d4:6f:87:08:85:06:e3:04:81:eb:
         b1:c0:4d:29:82:7c:1b:c5:22:0c:d1:21:39:5d:64:76:a7:38:
         19:58:c2:c8:6c:36:77:12:29:f1:eb:c8:84:bc:46:a9:5f:42:
         3f:d2:6d:e8:b0:45:f1:28:52:e6:5b:a1:87:5d:d5:89:93:af:
         25:47:9c:af:95:1b:0d:7a:4a:e3:39:6a:a9:81:a3:25:96:7a:
         7d:7a:c1:2a:f3:e7:35:05:4b:37:e8:4f:4f:db:6e:cd:69:36:
         56:9a:e9:28:52:bc:50:85:88:0d:7c:65:42:4c:0f:d0:09:13:
         f4:42:e6:f3:91:f9:3c:ec:f7:b1:96:fa:53:d9:b9:c7:a2:27:
         00:23:f7:49:79:31:ce:26:8c:d4:74:7a:30:3b:96:64:21:9f:
         97:43:6c:0f:69:15:44:70:26:d8:b3:64:d2:03:1e:33:88:58:
         3f:4b:3c:0a:4c:ab:3a:8f:e9:2c:44:78:a7:cc:9c:21:be:e4:
         ba:32:2a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:31:07 2025 by rpki-client