Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/78aa25ab-4848-3826-ae32-d1bc1fd0cc0d.roa
File:                     78aa25ab-4848-3826-ae32-d1bc1fd0cc0d.roa (raw, json)
Hash identifier:          uyEi3g1dMIYo2P4TbkdV07e7ODYxxv215GKeuacuI3A=
Subject key identifier:   8C:69:AF:00:0D:5A:1F:39:90:33:C7:8C:FC:80:46:80:AE:EA:9B:EB
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0DFA964DA2166151AB000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/78aa25ab-4848-3826-ae32-d1bc1fd0cc0d.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        104.134.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:df:a9:64:da:21:66:15:1a:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=94e38e79-3d65-426e-9d5d-3a8cc1c0bc1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0a:03:ac:25:30:7e:ea:9c:07:ad:d5:2a:0b:
                    58:e8:34:e0:3c:ca:64:ed:71:e1:4a:a9:6f:21:46:
                    5b:b5:05:ce:6c:df:99:f7:2b:ef:97:9a:cb:07:01:
                    f3:e1:84:46:37:78:80:06:2b:34:7e:c2:3b:2e:47:
                    7b:86:50:6e:45:2f:e8:21:71:e9:5e:55:61:70:28:
                    34:49:c8:24:85:0f:e8:93:40:2a:79:62:85:32:ee:
                    78:bd:c3:01:48:81:59:95:fc:2f:dc:2a:6c:53:02:
                    61:4e:38:92:18:42:ef:1a:cb:14:9d:88:28:b5:d7:
                    3b:a2:c9:b2:d9:d5:38:75:e5:a8:21:80:02:38:d6:
                    fe:25:f2:d5:4d:cf:79:fe:bd:e9:e9:ae:dd:61:6b:
                    79:9f:47:0a:56:ed:e8:11:20:d7:f5:67:6a:eb:6f:
                    6f:4b:c4:36:6d:a9:77:61:ba:0c:17:b6:f7:36:e7:
                    32:7d:dc:6c:f5:b0:da:d1:a3:5e:8b:97:be:16:97:
                    68:2f:4b:79:48:e9:f5:56:0a:70:64:ce:dd:e4:53:
                    76:b7:6c:e6:ce:30:33:ac:99:31:fd:65:4a:1d:9d:
                    97:b4:ca:0f:5e:8b:e3:ee:2f:63:3f:a7:27:70:08:
                    49:ba:df:1d:43:0a:04:ff:f7:ca:9d:a4:10:a1:52:
                    05:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:69:AF:00:0D:5A:1F:39:90:33:C7:8C:FC:80:46:80:AE:EA:9B:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/78aa25ab-4848-3826-ae32-d1bc1fd0cc0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:ed:86:63:43:c0:ae:4b:d7:05:e0:6a:b6:68:68:a4:94:9a:
         11:5f:5b:58:b8:c7:24:11:f0:12:49:d7:15:4a:c6:68:a3:84:
         85:4b:31:af:a0:e4:67:68:8d:ed:f0:54:82:0c:9b:ac:5a:8a:
         78:91:7e:66:83:d1:ea:d7:5a:b0:c3:ee:72:c3:df:e5:d3:d8:
         6f:7e:30:ad:4e:93:06:e1:23:31:98:23:18:33:8a:0b:a6:a0:
         9d:1e:70:c3:e3:01:a7:55:9a:bc:25:09:1f:0c:b4:f6:10:f9:
         f8:6e:bf:22:ae:26:2e:ed:19:7b:c9:b5:55:2b:a9:1e:1c:8a:
         8a:c2:b1:e8:52:9b:53:40:fd:0c:0a:f0:d5:ef:9f:93:06:d3:
         0a:e1:0b:50:36:1c:ae:f6:46:8a:8a:82:a3:ee:c4:06:2b:27:
         f0:d2:4d:f6:0e:53:c6:a0:1d:1d:a6:83:c1:6d:e8:71:d8:59:
         85:f5:79:96:2f:09:81:e7:40:0f:7a:37:84:52:8b:e1:0b:ea:
         64:05:d4:fd:8f:81:99:40:73:0b:12:84:13:3e:38:b1:26:e1:
         3b:07:d6:54:b6:13:47:f5:2d:fd:3b:f2:2f:f9:b2:00:fe:14:
         00:96:f3:fd:26:94:fd:2d:5c:52:f5:0a:04:11:40:78:08:23:
         92:5b:58:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:56:06 2025 by rpki-client