Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/602d67d4-0ed4-3531-bb95-c6715296097b.roa
File:                     602d67d4-0ed4-3531-bb95-c6715296097b.roa (raw, json)
Hash identifier:          LcKJNhlwR04GteuiCHbT4KGSV1Nm5gHRAbgy6EgaTc4=
Subject key identifier:   FE:D2:26:E9:32:77:6F:81:4A:E8:4A:2A:F0:1D:B6:08:84:8E:C4:24
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBD5CE8C6BE31D659190D0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/602d67d4-0ed4-3531-bb95-c6715296097b.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        104.134.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:d5:ce:8c:6b:e3:1d:65:91:90:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=b937773a-081d-4192-858a-229138edef73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:21:67:76:a3:8c:f4:39:ec:91:b9:60:d9:
                    d0:ca:9d:56:c8:59:e1:cd:42:96:93:b0:26:f1:ed:
                    59:94:58:ae:4d:be:8c:82:9a:11:c9:10:e5:37:25:
                    72:f5:1a:34:da:07:85:07:bb:a9:d2:be:b8:e8:fe:
                    b4:73:3a:db:69:1d:2f:a5:2e:34:e9:17:71:8e:40:
                    f0:ac:00:81:52:18:14:d8:50:c1:2c:b4:d5:9e:3a:
                    d1:3b:42:fc:52:b2:96:e2:ce:c6:72:37:09:70:0f:
                    eb:fc:59:3b:b2:fb:2b:f8:66:54:25:ab:34:0d:95:
                    f7:72:f7:87:a1:5b:15:4e:8d:62:4c:df:ea:fc:b9:
                    74:3b:4e:cf:47:19:59:d3:b0:03:c4:31:a1:32:d4:
                    07:4e:0b:69:d0:96:7e:c2:eb:02:02:d6:8c:26:e6:
                    9f:f6:09:3a:b6:6f:9f:58:d3:a9:0f:49:09:0d:c0:
                    18:7f:46:0d:87:50:9a:9d:3f:2f:47:7a:42:d1:01:
                    14:8e:5b:64:41:d1:cd:01:d4:d3:58:bd:10:ed:63:
                    1d:6f:a8:9b:19:7a:f0:11:9f:7f:6e:fe:2e:34:51:
                    aa:4d:01:40:7b:a8:1a:bb:f2:97:c6:62:48:46:49:
                    3e:1d:a0:e2:7d:d7:fa:a3:43:4e:b8:18:8f:7e:30:
                    1c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D2:26:E9:32:77:6F:81:4A:E8:4A:2A:F0:1D:B6:08:84:8E:C4:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/602d67d4-0ed4-3531-bb95-c6715296097b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:47:82:fb:38:6e:da:63:7c:b1:71:87:87:6c:7d:e8:17:f7:
         2e:39:10:1a:ff:72:c2:e3:f3:a8:68:72:7c:c5:b2:47:cf:d8:
         77:fa:f9:f3:8a:be:6e:c9:24:7a:2d:d8:09:46:46:7c:f2:1f:
         7d:f4:ad:09:a5:31:26:3a:e2:5e:7b:1b:e4:a6:ab:ca:a6:26:
         3d:da:bd:04:16:0b:93:8a:48:4f:69:7f:80:38:4b:c3:34:08:
         b2:67:12:92:66:05:e4:1e:89:96:5a:e6:0d:9d:20:c5:1d:88:
         e0:a1:c6:63:3b:4e:cf:b4:08:ac:c5:c3:de:22:31:df:86:c7:
         33:c1:0b:2d:9e:77:4d:f0:ff:2f:01:fc:de:b0:b0:55:ac:61:
         ff:50:a1:40:c7:58:cc:42:70:2a:df:e4:62:b5:da:80:94:b6:
         4d:89:28:4b:25:8d:e4:53:fc:02:e7:af:e0:f2:ce:d9:bd:8d:
         b0:37:8f:7c:f1:dc:b8:21:95:4a:02:67:8f:a3:59:2e:6b:c7:
         2a:f1:b4:84:42:e7:72:af:d9:4b:f5:ec:bd:4b:aa:e5:ef:1e:
         e1:28:0f:f8:9c:ed:28:43:07:a7:90:1d:11:d2:9e:5c:c8:58:
         5e:fa:7a:06:c9:28:f7:ce:65:e8:6a:5c:8d:e3:80:c0:20:d9:
         7b:2b:04:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:02:57 2025 by rpki-client