Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/77fa70fe-29c8-3eb8-bba2-8dfa890d9179.roa
File:                     77fa70fe-29c8-3eb8-bba2-8dfa890d9179.roa (raw, json)
Hash identifier:          Xy9WVtBUzWKjbLWHwPW91in/uqu3e0tVVOqD7OSiALE=
Subject key identifier:   8B:86:91:2F:0E:1C:43:DB:F8:D5:1C:D2:13:F3:B2:B5:CA:B2:C5:01
Certificate issuer:       /CN=2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8
Certificate serial:       010D0C9F432858499DBF37B03251520734308300
Authority key identifier: B3:81:B5:75:94:35:76:B8:F5:24:28:4C:F7:C5:C1:BC:18:6D:F5:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/77fa70fe-29c8-3eb8-bba2-8dfa890d9179.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     3128
IP address blocks:        137.104.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:37:b0:32:51:52:07:34:30:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=84b3bf8e-3492-40b2-932f-b3ad8288337d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:92:9e:bf:5f:6d:78:e5:f5:8a:3f:f5:7a:28:
                    72:09:40:81:5d:a1:c0:00:87:7d:81:7d:ac:47:ba:
                    3f:90:df:ab:1a:aa:e8:88:cd:66:8b:fe:90:b7:1f:
                    aa:dc:ab:ab:45:a8:80:81:96:a2:d0:77:b8:20:ba:
                    7d:4b:41:91:6b:19:6f:66:5b:b4:cd:3a:71:d9:d6:
                    60:ef:76:8c:40:39:2e:53:df:be:2a:6d:33:37:56:
                    5e:c1:cb:a2:05:d0:ea:d9:2d:98:72:7c:60:3c:70:
                    aa:9d:b9:b5:73:0a:96:7d:01:1f:b5:f6:91:1c:51:
                    e2:dd:bf:bd:fa:0a:2f:86:78:7b:31:2e:4c:38:f5:
                    37:52:e2:04:a6:84:b0:f4:fd:e2:bd:d3:dd:a4:6a:
                    e3:2a:56:35:33:d9:23:aa:77:ac:46:40:b4:a3:f1:
                    b0:a2:d3:53:cf:c0:41:82:a4:13:33:28:bf:16:a4:
                    8c:a2:6d:03:43:0d:3e:49:fc:8e:16:dd:87:92:6a:
                    9a:80:a2:ab:63:e9:8a:78:c5:75:c7:18:c4:e4:50:
                    59:15:25:15:2c:05:2c:4b:28:5d:2f:fd:97:08:6c:
                    14:e0:3a:82:28:bf:13:9e:c5:57:7b:73:15:f1:05:
                    0d:98:e7:e8:7f:b7:6d:0d:99:5a:66:f6:fe:91:0e:
                    5e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:86:91:2F:0E:1C:43:DB:F8:D5:1C:D2:13:F3:B2:B5:CA:B2:C5:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/77fa70fe-29c8-3eb8-bba2-8dfa890d9179.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.crl

            X509v3 Authority Key Identifier:
                keyid:B3:81:B5:75:94:35:76:B8:F5:24:28:4C:F7:C5:C1:BC:18:6D:F5:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2d7acb69-21ea-4fd2-a25d-ffcbed2af8d8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.104.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:35:98:82:03:d7:0d:af:aa:30:da:07:3a:1b:ab:ae:d2:34:
         aa:50:6f:ed:b9:2f:62:3a:9f:d2:31:90:9c:f7:37:34:46:5f:
         ff:3f:1d:f0:14:14:27:87:9e:9b:45:a1:c2:ae:66:67:04:2e:
         9b:92:16:5e:51:3e:ad:c8:a6:16:fc:f7:c1:52:06:35:7d:c5:
         12:8e:fa:66:cd:54:06:92:61:20:8d:7c:4e:23:08:db:e9:ef:
         3f:cd:d4:45:8d:d9:95:b6:d8:d1:a0:73:af:e1:e6:6d:4f:1c:
         2a:b7:11:37:50:24:07:2e:00:a3:04:46:8f:c5:14:cd:e4:a7:
         ea:da:8a:6c:8d:3b:6c:cd:e7:4d:bd:c2:a7:7c:87:8b:2a:e8:
         9d:83:67:4b:99:c5:73:8f:f6:06:22:4d:4f:6a:57:ea:b6:49:
         d8:02:53:07:33:69:f4:f4:bd:6e:f3:8e:2b:6b:1c:f5:c8:48:
         b0:a3:d8:8b:72:d3:b5:b1:6b:09:4b:66:de:bd:56:f9:3e:2b:
         e2:4e:88:b9:e6:33:b5:c0:18:93:55:25:a9:ee:9a:48:8e:67:
         14:b0:98:de:65:1b:67:8b:1b:75:b6:3b:c4:5c:8b:41:72:41:
         c7:fa:3e:a8:c2:5e:02:5c:e6:fa:e2:9a:3e:6c:40:03:e7:41:
         b3:03:ed:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:50:22 2025 by rpki-client