Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1427e528-f452-3110-b7f2-4df85627aea8.roa
File:                     1427e528-f452-3110-b7f2-4df85627aea8.roa (raw, json)
Hash identifier:          s8GKysIMd8agQI27efqKbZEMMvyyBeLF5diVUHKh2Wo=
Subject key identifier:   4F:1A:73:31:99:A3:F2:44:19:90:B7:EB:8D:5D:91:03:68:03:D9:E6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0E3B9AE96EE9CF82C8620
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1427e528-f452-3110-b7f2-4df85627aea8.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        104.134.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:e3:b9:ae:96:ee:9c:f8:2c:86:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=f79dc2f9-bdd0-4dd4-b3cf-3efe6315edff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:df:72:20:1f:5d:cb:1d:2e:cc:fb:30:be:9f:
                    b7:31:00:b6:ef:c4:21:1f:e3:db:e9:99:bd:4e:2e:
                    e6:dd:68:e6:27:93:1b:78:36:e4:e9:2a:08:50:56:
                    66:a8:07:94:f2:78:a3:60:0f:17:08:cb:7a:57:ca:
                    45:57:73:d1:15:f4:a5:dd:03:13:b3:05:80:23:c8:
                    b0:9f:e0:85:dc:be:dd:4d:ad:97:f1:60:61:b4:3f:
                    ba:28:91:6d:0f:2c:83:ad:3b:c0:2f:0d:29:db:c3:
                    3c:38:bf:cc:7b:dd:b6:53:06:97:25:ac:e2:de:bb:
                    00:f9:f9:9f:37:5a:30:0d:ef:65:fa:dd:14:99:b1:
                    c9:f7:d7:bc:36:bf:35:91:48:25:ac:13:e7:9f:cb:
                    ed:4e:de:75:c5:9a:90:4e:91:64:04:77:23:6b:07:
                    60:85:4e:ce:01:87:dd:f5:02:85:a3:4e:3c:57:a3:
                    3b:8e:02:12:6b:81:d2:c3:fd:89:ff:13:72:78:41:
                    1b:b7:d3:68:f4:b6:b5:97:d9:d0:c3:19:32:b3:58:
                    88:9a:20:b6:5b:b2:b4:a1:ef:26:44:ae:fa:fa:5c:
                    82:0b:69:6e:f5:69:f2:46:ea:aa:6b:9e:05:05:ea:
                    73:b4:57:a7:c7:62:ed:b7:99:6e:dc:a3:60:79:fa:
                    a2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1A:73:31:99:A3:F2:44:19:90:B7:EB:8D:5D:91:03:68:03:D9:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1427e528-f452-3110-b7f2-4df85627aea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:66:f4:2a:1d:6b:19:02:6f:9b:e5:34:5c:b2:ea:b7:b7:a6:
         f1:f9:0f:0f:2f:4d:d6:c4:de:ad:1c:ff:49:64:85:7d:96:9a:
         e7:02:37:68:b6:4a:60:5c:bc:25:56:d7:45:1e:e0:6c:33:da:
         9e:43:b7:e3:47:f4:84:ed:90:ab:38:1f:04:97:19:e8:44:7b:
         12:5c:40:0c:5d:1a:df:fe:02:44:0d:1d:23:b6:4a:39:25:71:
         f1:b9:33:ce:ef:de:4e:c4:82:bf:1a:d2:02:ce:a8:a8:c2:48:
         4b:80:00:79:68:b5:3b:8e:84:92:f6:67:56:04:62:69:63:b0:
         ca:06:ce:b6:34:cf:04:1d:16:9c:62:cb:c2:07:94:1e:c9:e5:
         42:b7:7a:23:c5:7f:54:3c:5e:f3:b8:a2:b5:8a:01:8b:22:b2:
         03:54:0e:2f:c1:b9:1a:2d:9d:82:56:e2:a1:4e:d2:43:24:75:
         1c:4c:c9:12:40:0f:29:96:66:9f:08:dc:26:90:33:fe:56:9f:
         44:37:6f:80:75:e8:ca:b2:70:54:ed:fb:53:d6:37:a4:fb:c2:
         3c:46:2f:62:cb:47:7e:aa:f2:72:e1:c4:00:69:d5:63:69:c0:
         47:ec:4a:a4:29:83:10:09:7e:10:61:e3:8d:df:d7:42:d4:7c:
         40:d7:60:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:54 2025 by rpki-client