Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/377c67cf-0a40-3a13-a0cd-4c33512de5cb.roa
File:                     377c67cf-0a40-3a13-a0cd-4c33512de5cb.roa (raw, json)
Hash identifier:          y7KxY0IyD2w54OIt4gwa2kLq1f9wAoY+2MZZ8EJW5SQ=
Subject key identifier:   BC:CD:AF:3E:78:3D:B7:F6:18:18:88:B5:70:30:06:7F:A4:D0:70:F4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBCDDE37C61C312B81E040
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/377c67cf-0a40-3a13-a0cd-4c33512de5cb.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        104.134.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:cd:de:37:c6:1c:31:2b:81:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=3a30b8e8-0c09-4b20-b3de-d6eaf35a3246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8f:7c:02:01:ac:d2:34:be:1b:14:89:46:5f:
                    01:cb:7e:bf:fc:c6:0a:60:86:e0:a1:49:ee:c1:71:
                    66:37:87:92:3a:b0:75:c3:e7:6d:f2:44:1e:07:1f:
                    9e:21:40:ed:28:09:2f:89:f4:65:c4:c0:ad:75:e3:
                    5a:04:6f:f7:91:3d:ce:ee:4a:9b:04:3f:4c:d6:28:
                    c2:a1:46:4b:61:30:4d:8c:df:a9:c9:ff:05:e4:7f:
                    94:bd:09:da:10:f9:ba:80:ef:c3:b3:25:6f:c4:14:
                    f9:0e:8c:da:cd:e2:49:fc:15:d9:72:cc:8b:07:7d:
                    1f:e9:22:8e:43:e4:cc:04:9d:4b:f8:5b:fe:26:98:
                    08:52:e5:b3:7a:78:05:2a:4d:c8:77:a0:58:68:b1:
                    0d:b4:73:2d:2d:89:d2:10:06:d3:71:7a:1b:c5:73:
                    3c:de:2a:cf:b9:29:15:ea:d0:e9:3f:f8:cc:0d:c3:
                    d1:b7:ca:28:54:91:40:29:45:52:a7:34:9d:58:e2:
                    26:a3:28:33:64:2f:b3:fc:02:e8:74:67:69:17:93:
                    00:fa:97:5c:61:79:c8:80:bd:61:15:6f:b6:cf:bf:
                    de:08:d3:44:95:60:6d:7a:0d:27:5d:11:a1:02:d3:
                    cf:40:27:ea:a1:54:47:f5:c1:2e:55:fc:3e:d3:24:
                    d8:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CD:AF:3E:78:3D:B7:F6:18:18:88:B5:70:30:06:7F:A4:D0:70:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/377c67cf-0a40-3a13-a0cd-4c33512de5cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:23:e0:7a:86:21:24:08:ff:24:20:6a:5e:f6:a3:e5:8a:ed:
         c4:2f:2b:10:1b:4e:45:6d:d7:3f:c6:64:3c:e9:17:5a:d3:6b:
         7b:e4:f0:7b:79:a9:65:d0:2b:68:ff:73:87:cd:b0:cf:36:6a:
         94:5d:83:84:1e:e3:cf:fb:25:81:e5:2f:ad:0b:06:5c:8c:fa:
         0d:9f:58:38:db:f8:1e:7c:d3:cb:fc:73:65:df:88:19:78:84:
         ca:b7:9a:98:60:e4:6e:bf:61:8b:c2:f6:cb:ae:14:77:da:29:
         c6:09:20:ae:38:ef:5d:1b:db:2c:5f:74:0a:d2:08:b0:57:b2:
         b0:1f:26:4f:a7:07:84:7f:08:88:52:eb:f3:a1:b9:33:19:09:
         54:eb:46:ae:16:56:e3:93:12:ad:f2:db:15:75:34:0c:7c:fc:
         a6:de:bc:f9:61:34:ad:16:d9:64:b5:21:99:ac:12:37:7f:d2:
         07:81:0f:8c:a5:bf:6f:c6:b8:98:5f:b9:6a:d5:94:da:a7:11:
         d7:b7:77:4f:10:75:f1:b0:11:49:7f:30:35:bc:b3:4f:5d:dc:
         d7:9f:4c:c2:ce:51:2d:f2:97:3f:e7:1d:59:b0:6b:67:4a:7a:
         31:eb:da:71:1e:77:7e:fa:c7:8a:d2:3d:8c:8b:51:1d:55:9a:
         5a:54:4c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:34 2025 by rpki-client