Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/561eda92-cdf3-37cc-8c56-60ff4bef7921.roa
File:                     561eda92-cdf3-37cc-8c56-60ff4bef7921.roa (raw, json)
Hash identifier:          zueghpbX2pLosL0sC+I3e+IoQWOBR6KiyohXeNqLow4=
Subject key identifier:   4F:11:1B:55:FB:5A:C1:D9:4A:E1:00:06:69:2F:41:54:C4:AE:8B:A8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0F9661EB432A65E081F00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/561eda92-cdf3-37cc-8c56-60ff4bef7921.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     395973
IP address blocks:        104.134.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:f9:66:1e:b4:32:a6:5e:08:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=bb82df64-a15c-4bf8-a25f-bbacb3bd9d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4a:e6:e1:04:c2:9c:f7:14:c7:9e:58:d2:19:
                    de:e0:29:b5:a1:9c:ad:01:da:ef:84:28:00:41:02:
                    4f:8d:16:e3:de:72:43:4c:c9:16:4a:0a:ff:be:01:
                    5b:26:9a:06:d2:62:d3:c9:ff:f0:1d:5b:a7:e6:dc:
                    c5:b1:ac:00:7b:fc:88:13:00:1b:c8:61:c6:c1:19:
                    70:c5:9f:03:08:68:88:1e:68:d6:e3:47:55:3b:fc:
                    31:a5:0c:22:b5:12:e3:39:11:1e:9b:a0:30:a8:27:
                    36:e9:47:df:32:2b:91:c1:c1:ab:53:8c:8f:3a:9f:
                    22:5c:51:36:e6:96:f7:8f:b3:e2:b4:e6:b1:c7:ef:
                    7a:ed:65:5f:23:bc:22:af:0b:59:cd:76:28:85:28:
                    e6:d6:9a:14:31:5d:63:5a:74:75:60:50:12:4f:e4:
                    5e:fe:23:85:64:55:12:78:4b:20:56:2d:8f:f7:23:
                    79:2b:da:dd:0e:9b:0f:15:18:ea:f0:4d:50:09:eb:
                    2d:c2:c9:c7:18:a6:e9:fe:77:83:ce:d0:2f:e7:d2:
                    93:8a:43:36:8a:92:b6:c7:95:76:48:b4:4e:4a:00:
                    78:33:ee:d4:f6:b3:c1:26:dc:30:c4:5a:94:5e:98:
                    a0:5b:88:99:78:f0:08:86:64:8d:8f:45:f4:f3:6a:
                    4a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:11:1B:55:FB:5A:C1:D9:4A:E1:00:06:69:2F:41:54:C4:AE:8B:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/561eda92-cdf3-37cc-8c56-60ff4bef7921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:eb:43:52:92:29:43:32:b7:9a:aa:df:6c:47:96:39:c4:f3:
         99:a0:3c:a1:1c:72:b0:68:88:74:4e:61:7c:16:c7:cd:bf:71:
         c3:ae:5f:23:08:74:12:bd:68:6b:6f:89:68:a2:d4:cd:c6:d8:
         5b:c8:35:97:b5:17:f8:6f:a0:c8:6f:b8:42:80:4a:43:09:f1:
         ab:4a:59:e8:f2:72:e8:c3:9f:8d:d2:93:c8:79:30:f2:ee:77:
         17:61:fe:55:bb:d3:45:b5:f7:12:36:aa:e9:08:08:f7:28:7c:
         c5:df:b0:49:f8:65:43:17:cd:b7:96:92:49:13:74:d9:80:d1:
         0e:55:64:32:dd:fc:73:7d:d7:1c:93:fc:8f:dd:8e:b6:1f:c5:
         fc:cf:03:90:c9:63:cb:07:6d:5d:82:66:04:78:0c:dd:8c:37:
         cd:f6:be:0f:4e:63:ed:35:6b:80:1d:47:8e:46:d9:42:39:37:
         09:71:bc:2f:0a:2d:0a:5f:81:e9:ef:ec:63:33:fa:92:5d:18:
         a4:71:30:f9:8a:68:71:ea:79:be:97:1c:bb:5e:42:f7:65:0b:
         30:ac:e6:a3:74:27:f6:45:ad:76:75:70:74:50:ae:32:4e:65:
         01:97:4a:69:9b:17:62:56:21:87:01:b2:b0:30:4d:9f:7f:8d:
         5d:b7:aa:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:44:04 2025 by rpki-client