Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a244f040-9023-3bef-ad5b-22a7d67c8fb7.roa
File:                     a244f040-9023-3bef-ad5b-22a7d67c8fb7.roa (raw, json)
Hash identifier:          a3KVk2IYOfbzIr7Lwb28I94TUJU/rrsfYu0lvHVeB3I=
Subject key identifier:   7B:E4:59:CB:AE:00:2B:17:5E:EC:3E:6C:47:3D:9C:A7:C9:A0:88:D8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBCADD85E6FF39F12B8840
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a244f040-9023-3bef-ad5b-22a7d67c8fb7.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        104.134.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:ca:dd:85:e6:ff:39:f1:2b:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=7457d1e9-d389-4564-978f-f9ae269af891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9c:37:ab:ac:eb:f7:e3:c0:53:1b:ed:68:fc:
                    51:98:d3:69:6e:38:20:89:44:56:43:d7:cf:2d:6b:
                    24:89:8e:f1:85:c7:81:91:b3:73:0a:eb:3c:c9:50:
                    9b:d2:9e:7d:5e:1a:e7:2d:57:78:ce:0d:c4:89:fd:
                    1e:d7:07:dd:67:03:82:f4:a1:31:6c:06:a9:0a:cf:
                    16:85:03:72:c9:f3:fc:6f:bb:74:4b:c1:01:30:c6:
                    38:fb:11:8f:22:db:a5:59:3e:1b:26:c5:70:e6:e7:
                    c9:6d:9e:f6:2e:d9:0b:74:5f:9e:48:b2:04:0b:8a:
                    f8:21:6c:d0:43:73:f5:a5:aa:78:c3:ba:39:11:3b:
                    40:55:bb:87:f8:23:02:a5:ae:e8:59:e0:8e:2b:22:
                    1d:f1:10:4e:e2:07:aa:7b:67:bd:17:60:fd:da:23:
                    8a:0b:2f:b6:65:c0:52:7b:d9:cc:c5:d2:bf:4a:8b:
                    4f:2a:12:8f:98:5b:d4:b5:78:f7:59:c5:8b:0c:09:
                    97:fd:75:5d:70:07:6b:59:2c:b4:3d:76:66:f9:cf:
                    d9:5e:b8:fa:1c:9b:49:75:e2:6c:dd:f7:38:64:05:
                    2f:c5:11:db:4f:c4:37:80:34:bc:d4:a3:33:03:58:
                    4e:12:b6:0e:a9:e7:9e:28:32:b9:3a:b2:29:43:3f:
                    7a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E4:59:CB:AE:00:2B:17:5E:EC:3E:6C:47:3D:9C:A7:C9:A0:88:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a244f040-9023-3bef-ad5b-22a7d67c8fb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:f9:c9:85:36:17:2d:63:fe:08:6b:4c:1e:1a:df:da:75:0a:
         14:0c:2f:15:1e:63:8f:2f:dd:9c:b9:96:71:e6:5b:e1:55:05:
         d6:1e:83:f3:22:25:83:03:c2:a5:c0:5a:2c:9c:5d:d3:9c:3d:
         08:60:9f:2d:71:de:d1:3d:6a:b7:8f:bd:81:74:50:a7:25:c4:
         b3:f0:3d:49:94:b3:70:b8:3e:16:30:70:c6:ed:bd:2b:78:0d:
         2d:ae:b1:f6:31:36:88:25:dd:7f:d6:4a:a3:36:be:ce:1f:3d:
         05:aa:c9:a9:ba:4d:ae:d3:ae:55:fe:41:16:18:4f:5c:51:40:
         85:55:e7:d4:6e:d1:9d:53:62:0a:84:6b:63:87:2d:11:69:8f:
         89:fe:8e:7c:31:9b:47:e7:d6:c9:d9:96:a2:2c:c9:a5:4f:74:
         6c:6b:84:3b:e9:d2:7c:d4:37:41:4f:39:a4:1b:bf:f2:04:3d:
         7b:90:de:b4:5d:2c:4c:2a:4e:f9:84:be:9d:94:86:21:82:2d:
         9c:32:7d:eb:e2:c8:5a:31:18:d2:f0:3d:85:6d:ae:bf:c6:1d:
         05:1a:4e:7e:0a:95:37:75:06:73:7a:ba:9b:49:6a:dc:16:dc:
         8b:50:4e:be:f2:9c:4b:bf:69:6b:64:58:ee:8b:d8:78:ee:80:
         96:d9:7e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:37 2025 by rpki-client