Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e886ad7b-2ef9-3a09-99a0-1bb45d9dc5e0.roa
File:                     e886ad7b-2ef9-3a09-99a0-1bb45d9dc5e0.roa (raw, json)
Hash identifier:          kF4yCx7D1lMUsQPNMZ1BkYIi8a4duBa5D1XYmULd+kM=
Subject key identifier:   68:60:B9:55:F7:7C:96:F8:3F:30:64:BA:96:36:15:06:83:D6:25:A4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24CD9E27B74DC545C316C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e886ad7b-2ef9-3a09-99a0-1bb45d9dc5e0.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.134.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:cd:9e:27:b7:4d:c5:45:c3:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=5d92f996-8aeb-4afc-89b5-60ed61d0e13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cf:43:6f:d3:21:5a:22:06:e9:3b:f0:9b:e8:
                    39:3b:f0:fe:80:fd:60:78:3e:2f:c4:ab:c1:82:4d:
                    a9:af:66:92:11:5c:30:a3:69:03:b8:77:59:eb:bb:
                    10:67:8e:78:e0:84:89:7a:9c:11:3a:8c:c0:cb:58:
                    6f:aa:f4:b6:73:4a:91:4e:4d:4f:a0:2c:12:70:cd:
                    ff:8b:9f:90:70:6f:c7:e7:17:bb:59:7d:b1:f5:ea:
                    5b:5c:f3:37:80:7c:27:15:ad:36:f8:83:8e:c5:c4:
                    00:a8:44:39:8a:f3:4a:3d:9b:46:51:27:92:51:32:
                    6f:a7:7d:c0:cd:d8:e0:28:df:51:c6:75:9c:ca:32:
                    82:82:2b:73:b6:b6:1a:d1:b1:b0:82:61:cf:c6:48:
                    9a:e9:aa:28:9d:b1:06:b2:cf:39:96:a2:b5:29:00:
                    39:d9:ab:50:88:42:a2:03:d4:92:a2:58:fe:ac:e6:
                    d9:40:41:d1:4a:30:fb:4f:b1:e0:b3:98:58:16:fd:
                    10:79:90:be:80:61:30:db:b6:f8:a0:76:80:20:b6:
                    2f:a2:62:2d:95:8b:91:03:af:d2:7c:56:7e:05:a6:
                    6d:bf:fb:6e:ab:e7:1a:d0:60:57:56:ae:ac:be:fc:
                    7c:2f:03:9e:7f:ac:8a:f6:c1:7a:04:92:6c:19:54:
                    63:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:60:B9:55:F7:7C:96:F8:3F:30:64:BA:96:36:15:06:83:D6:25:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e886ad7b-2ef9-3a09-99a0-1bb45d9dc5e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c5:ec:8d:4f:69:cc:6f:7a:a0:63:e4:59:07:64:41:5e:77:
         b5:9e:e3:66:00:91:0b:0d:f1:96:41:02:39:fd:e1:43:65:70:
         04:7b:99:3a:9d:b5:98:4f:9e:98:07:47:fa:c8:4b:63:8b:9e:
         2e:61:a0:5a:9f:fd:98:ea:f6:d7:6a:12:ac:d3:e6:78:1a:ce:
         6a:b3:3f:06:f6:a7:85:6d:76:32:81:26:f2:d8:46:a1:d2:f6:
         35:08:9a:48:08:85:17:20:6d:40:85:67:cf:f2:be:9e:cc:8a:
         d6:ae:2f:53:92:4c:55:b1:72:05:53:3f:a6:83:30:ab:3c:a8:
         fa:cb:84:7f:16:34:a4:88:8b:39:86:1b:69:bd:50:2a:e4:5c:
         ca:82:72:10:aa:b7:6d:8c:39:93:ae:03:24:09:56:a7:59:ad:
         9d:30:f5:09:8b:39:df:1c:8b:af:07:e4:26:fb:10:f2:06:69:
         70:93:61:24:a0:0d:5d:be:dc:a1:b9:44:6c:41:05:94:b0:e0:
         29:24:7f:30:a1:ce:71:f8:ef:c3:7a:ac:6b:23:57:73:1a:3c:
         19:27:36:31:75:42:10:d3:b2:7b:35:2d:3f:39:15:7b:df:11:
         1b:b9:18:dd:e7:65:a4:e0:7f:8b:d0:44:e4:fa:d3:ca:f2:2a:
         55:5b:87:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 10:35:14 2025 by rpki-client