Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/94814c6d-3666-393b-b39d-7fdb5a8a2de7.roa
File:                     94814c6d-3666-393b-b39d-7fdb5a8a2de7.roa (raw, json)
Hash identifier:          GlMFbGXNFswdZCwH2/HNiRLNICdkBa1SiWmme8zmw24=
Subject key identifier:   7B:8D:A6:F9:BF:C9:DD:6C:6B:5E:10:5F:73:2E:1C:83:09:FD:4A:4F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBB8CA25C525C664B41200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/94814c6d-3666-393b-b39d-7fdb5a8a2de7.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        104.134.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:b8:ca:25:c5:25:c6:64:b4:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=dd17088c-2ee1-4975-ad4a-f36d807734b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b0:e5:23:11:65:bd:0c:e2:09:f4:d2:1e:72:
                    47:d0:1f:d5:28:8c:48:71:12:20:ea:5c:a3:c2:60:
                    79:d8:4c:9f:a4:69:cc:06:8b:99:1b:b4:a9:c2:80:
                    89:f8:a3:ff:48:1d:b0:4c:c0:48:ac:90:d7:35:82:
                    05:c7:5d:21:30:28:26:e5:3d:35:6f:4c:57:89:b7:
                    21:c5:c5:d4:98:f6:f8:78:10:a3:ab:ad:06:56:86:
                    f6:ef:a6:56:a7:9a:3b:ed:f6:e1:cf:72:a8:fc:32:
                    cf:20:3f:c4:2f:6d:5b:c2:01:dd:6b:2b:eb:b0:a4:
                    98:b4:8f:10:be:eb:97:fb:c7:3c:ce:ce:7d:ab:9c:
                    b7:07:c1:0c:fe:84:c2:1d:5a:52:7d:66:07:b6:bb:
                    6c:1c:3b:6b:97:27:e6:d5:58:c7:b7:cb:8f:62:f6:
                    63:e6:59:2f:a3:be:d2:5d:ac:3e:b9:99:e3:dd:38:
                    59:6c:f1:fa:59:d1:48:0f:8b:12:f9:51:c2:4f:a3:
                    3a:e4:48:32:2d:8b:b8:84:94:0e:b9:f9:28:bd:51:
                    a9:41:dc:98:60:bd:3a:10:00:55:88:fa:5c:3c:42:
                    94:01:0e:af:5b:df:d3:db:34:c4:79:7e:d3:04:21:
                    8b:55:c3:cf:64:56:55:d4:fb:e6:2a:86:f1:1d:30:
                    5e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8D:A6:F9:BF:C9:DD:6C:6B:5E:10:5F:73:2E:1C:83:09:FD:4A:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/94814c6d-3666-393b-b39d-7fdb5a8a2de7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:9d:7d:43:0d:d9:ed:58:eb:97:88:7c:b3:86:93:55:84:85:
         ee:a2:bd:a0:6e:fa:e4:20:04:1f:a4:00:54:59:33:84:a0:f4:
         89:72:40:bd:33:66:3a:cc:d0:f0:12:75:83:03:3e:ad:f9:f1:
         37:20:6d:c8:6a:35:2c:e5:d5:9c:d8:d9:36:84:cf:2e:1f:b3:
         fe:0f:80:37:32:53:c1:6c:bb:05:38:c1:69:d6:8a:b5:ca:0b:
         5f:57:16:04:50:54:a4:67:df:03:d0:56:79:5b:c3:96:8c:9d:
         26:69:cc:2f:1a:4b:7e:7f:80:06:c8:d8:24:d2:2a:54:ab:f7:
         c8:41:4d:73:25:28:59:cd:91:8b:c0:9e:98:09:eb:e0:96:07:
         1c:b7:30:7e:85:31:38:b0:b6:20:36:be:1f:f5:5a:52:a2:fd:
         09:c4:03:9f:c5:ec:77:9a:36:3d:17:6f:dd:1a:99:c9:bf:da:
         62:76:61:25:3e:7c:59:e1:52:74:d0:b4:23:16:c7:61:8d:7f:
         5b:7d:e3:e9:2a:e2:c9:b9:08:2d:3c:47:87:77:f9:0d:42:79:
         d3:bc:cf:ce:6e:22:2f:ea:1d:a9:ce:49:d4:04:74:e9:dd:ff:
         5b:56:11:2f:3f:8f:d3:b7:b8:11:d6:1f:58:d3:a0:bc:c1:81:
         5a:b6:b2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:50:05 2025 by rpki-client