Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3bbb784b-e80f-318c-825e-055fa628a787.roa
File:                     3bbb784b-e80f-318c-825e-055fa628a787.roa (raw, json)
Hash identifier:          uXVz5LIXetD4Qq1arx4T0JFhQrwnjvRFXqKcVhH/AOM=
Subject key identifier:   20:63:A0:42:77:1A:78:77:80:56:56:0C:5D:8F:F3:6A:1F:91:A2:80
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBAB5C2DE531D8B401CB80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3bbb784b-e80f-318c-825e-055fa628a787.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        104.134.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:ab:5c:2d:e5:31:d8:b4:01:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=b1229e02-bb79-432e-b171-d98db4a82e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:44:c9:22:b2:d4:f1:14:23:fd:ce:67:cf:55:
                    46:cd:81:fd:e9:2e:a8:21:fe:44:ad:55:f5:e2:83:
                    dc:d4:97:89:da:0a:49:96:80:13:15:9e:3b:b4:fe:
                    1a:17:e7:23:ff:1e:01:a6:58:62:67:d0:be:48:e1:
                    57:c6:02:db:7d:2b:9a:bb:fa:a7:78:e8:db:0a:9b:
                    8c:e2:8e:fc:4b:9d:f9:18:1f:d3:40:81:c7:9c:0f:
                    5c:9f:79:d0:59:be:80:f2:0e:18:a5:8f:9a:6b:c5:
                    fe:06:0f:e9:09:5f:88:ba:5d:2c:60:43:b0:dc:e0:
                    dd:eb:47:ff:b8:c7:19:40:e7:47:5b:35:91:8a:18:
                    b1:5f:a0:57:67:57:9d:60:93:ea:44:98:32:68:b0:
                    b3:b4:f1:db:e9:0a:95:df:b4:73:09:5a:ee:49:90:
                    70:ff:f4:78:6f:0c:77:5a:a8:1b:ba:ec:9d:38:f5:
                    84:67:6b:d0:85:ae:51:77:9c:6f:b6:ab:a1:7c:ef:
                    04:97:73:07:59:9d:b9:5b:d1:c9:18:6d:6f:58:87:
                    73:f8:20:b9:b0:af:cd:84:9e:4a:0d:e7:15:f9:9f:
                    e1:83:9c:b2:12:14:24:0a:4c:d6:60:74:a1:f2:cb:
                    be:f6:b2:67:14:06:33:be:68:a0:36:db:55:fc:78:
                    f8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:63:A0:42:77:1A:78:77:80:56:56:0C:5D:8F:F3:6A:1F:91:A2:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3bbb784b-e80f-318c-825e-055fa628a787.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:99:ef:d1:5a:ee:97:42:fc:8a:45:ed:91:10:b1:86:45:e7:
         56:17:c5:c2:8d:31:ed:23:0e:86:ab:48:c0:6b:df:f4:2a:87:
         de:fa:84:e0:f4:55:29:f4:c0:ef:96:3f:7a:a6:c9:7c:da:37:
         dc:60:01:b1:87:d6:b4:ae:ce:91:ab:b9:aa:fc:35:1e:00:5f:
         66:7b:55:fd:f9:b1:aa:66:6c:c2:8b:78:d1:1b:82:1c:d6:be:
         c6:a0:7f:54:15:ab:ef:ae:c1:da:66:37:3f:fc:2b:f6:05:1f:
         0d:a4:4d:12:dc:da:59:49:6b:ca:84:dd:a9:16:a2:f3:3d:6a:
         36:91:81:48:b3:e6:15:ea:f0:b2:4e:40:bf:65:bc:f9:67:45:
         c9:0b:38:4e:ee:44:64:0b:b9:52:ee:2a:30:16:3d:80:c8:3d:
         8d:85:55:45:b1:65:e9:4b:60:80:98:d0:88:2f:b7:60:bc:bc:
         1f:f5:1a:9d:ca:33:fc:08:01:f6:fa:3c:21:21:c4:a5:47:f6:
         b9:a0:14:6c:a3:d5:c9:a9:f5:b5:cd:7c:56:f7:51:ba:18:fe:
         83:04:51:95:28:d4:7b:18:58:0f:a8:2d:c8:ec:5e:4e:49:db:
         c3:7d:5e:4a:27:ff:f3:b5:22:30:eb:38:e8:74:d2:62:24:c5:
         f7:22:9a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:50:04 2025 by rpki-client