Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3d8d8cb8-6dc9-3be4-9a54-a5ba85a4cf87.roa
File:                     3d8d8cb8-6dc9-3be4-9a54-a5ba85a4cf87.roa (raw, json)
Hash identifier:          rSX0lhcVwyhn50LcSj27r4croLV4blrBSK2rfO3xrro=
Subject key identifier:   8A:88:3D:06:DF:0B:19:F8:1B:39:53:E8:8B:CF:CF:DF:65:E7:6A:10
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBD2A0DC916B2D6FAF9DA0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3d8d8cb8-6dc9-3be4-9a54-a5ba85a4cf87.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        104.134.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:d2:a0:dc:91:6b:2d:6f:af:9d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=db6a52b6-5fcf-403e-a83b-c01b0f1406b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:03:f3:45:0c:c6:5d:b6:46:d1:23:72:c6:35:
                    f5:06:bb:30:fb:e3:ec:08:15:d0:2c:fd:0e:9a:3d:
                    f1:72:30:0b:df:bb:c8:50:c5:73:55:f4:af:bc:90:
                    5b:d0:63:9b:99:c3:00:0f:b5:a8:9b:c6:c1:8f:cb:
                    39:1f:f3:7c:49:ae:f3:f8:91:b6:2f:bd:6e:c6:06:
                    f4:14:8c:49:ed:b5:2b:98:c9:54:40:c2:35:e8:25:
                    dd:60:a4:b1:b4:7f:e3:3f:7d:ba:fd:d0:7a:d3:17:
                    02:52:5f:c4:5a:a5:c5:45:ac:b5:d6:4e:8d:58:81:
                    53:1e:04:0c:b5:85:61:60:de:22:51:ee:2e:ee:42:
                    9d:04:74:18:a0:e5:c2:8e:19:8f:63:ae:16:b6:16:
                    82:2d:07:ab:f0:c0:f8:7d:6b:d9:52:54:78:6f:0a:
                    90:b3:a5:f8:5e:c5:e9:56:fe:16:da:3e:d2:c7:a6:
                    07:84:3e:d1:ed:67:f3:ae:7a:6f:a2:f0:40:d3:69:
                    8d:42:ef:81:55:6f:99:33:4e:05:a9:ac:8f:e7:8d:
                    29:19:02:77:d8:ad:ee:be:0f:1d:e9:c1:c0:4c:68:
                    b6:10:27:8e:14:a3:2d:40:3f:5b:93:f9:f0:72:1e:
                    3d:6f:41:af:80:a6:21:ce:58:18:55:44:fe:cc:6d:
                    d6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:88:3D:06:DF:0B:19:F8:1B:39:53:E8:8B:CF:CF:DF:65:E7:6A:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3d8d8cb8-6dc9-3be4-9a54-a5ba85a4cf87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:3f:53:a5:18:1f:f8:67:4c:52:5c:65:25:a2:11:6d:18:4b:
         54:b3:29:25:50:32:94:a8:eb:06:45:d4:5a:af:70:32:be:ab:
         81:cf:16:7b:1b:6a:97:f4:01:dd:00:37:15:a3:ad:f9:ab:e0:
         ba:18:46:55:76:62:0a:18:c1:c6:f7:5b:55:53:47:f9:a2:e6:
         5a:fd:7c:8b:ff:5a:e8:bc:4b:5b:4e:80:a9:ac:4e:0f:7b:c1:
         5f:de:d3:11:79:00:7c:7e:aa:2a:af:62:9c:7b:1d:14:8c:0e:
         a8:a3:cb:af:38:c7:5b:98:fd:de:b7:50:91:d2:f6:e2:bb:e8:
         19:b2:da:7e:2e:62:85:ca:3f:bd:52:d9:a8:3d:54:46:46:cf:
         c4:95:a4:05:6e:82:bc:ef:ef:99:f0:1c:57:2f:3b:70:3a:a9:
         4c:45:cc:b5:0e:c7:76:c2:2c:ff:46:c2:7d:50:87:6a:e3:65:
         6a:19:71:19:4c:86:99:83:db:97:3d:f8:6f:a2:c7:b9:02:2b:
         39:64:79:be:d2:4b:b4:40:5e:69:82:76:3e:35:38:89:72:cf:
         12:15:bc:cf:de:8b:a6:9b:ea:d5:22:ae:6a:62:d0:60:37:5f:
         cc:2f:be:03:8d:82:c5:3e:a4:f2:59:a1:67:6c:54:b4:e2:cc:
         a3:69:ee:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:43:51 2025 by rpki-client