Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd8071dc-d868-3f91-a4bc-822224a2e269.roa
File:                     bd8071dc-d868-3f91-a4bc-822224a2e269.roa (raw, json)
Hash identifier:          m4tFgJstUWFHA8PDxr0bhTAks8atrzcmQHI8Ztlr2cY=
Subject key identifier:   3B:96:F6:59:70:EE:1E:CC:12:61:6C:AA:57:7F:CF:71:47:A6:7F:93
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584900216B77BE70503282336C00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd8071dc-d868-3f91-a4bc-822224a2e269.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     395973
IP address blocks:        104.134.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:6b:77:be:70:50:32:82:33:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=90840c40-d471-4793-95cc-5010d343e69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:99:70:f8:b0:b7:8e:1b:8b:db:df:d2:45:ed:
                    f9:d3:a8:42:a4:c1:6d:be:16:ac:53:c4:b8:2a:93:
                    e2:7f:19:2d:7b:66:d6:99:6b:e0:96:03:90:ee:c7:
                    65:48:f1:2c:3d:82:f6:68:48:c5:cd:94:f2:ea:fd:
                    23:9e:24:4b:fe:2e:0d:2f:66:8e:eb:27:34:0c:98:
                    b0:2a:54:3b:ad:c4:76:2e:ff:52:0b:14:54:c2:bd:
                    97:41:3b:89:a5:0f:90:f3:0d:cf:fb:38:00:65:4c:
                    9a:98:79:7f:9b:fc:d9:ae:ce:24:fe:60:f1:40:1b:
                    8f:22:2b:5e:d5:bd:a1:9f:6b:3d:46:dd:ff:f6:ad:
                    e1:17:81:65:4d:64:d1:4d:ae:64:44:6b:8f:b2:92:
                    ce:bd:e9:b5:3b:fc:54:37:4b:ec:af:30:d4:08:7d:
                    8f:53:05:58:b7:57:d1:ea:d5:57:25:14:d7:54:ee:
                    a0:13:2b:c4:f8:01:87:af:78:93:ed:0a:94:cd:37:
                    68:c0:fb:57:aa:e8:a4:a0:36:d6:d2:0a:14:cb:29:
                    72:cc:84:2c:2a:5a:16:1e:30:d2:6d:43:08:23:ae:
                    dc:a0:6c:9b:64:bd:41:c0:ee:0e:0c:df:51:d9:6b:
                    30:44:14:fc:71:9c:49:be:9e:0a:d1:90:85:87:82:
                    05:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:96:F6:59:70:EE:1E:CC:12:61:6C:AA:57:7F:CF:71:47:A6:7F:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd8071dc-d868-3f91-a4bc-822224a2e269.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:78:ee:2d:df:7c:53:e3:b3:97:6b:35:c8:0e:8e:8c:57:58:
         ef:ca:35:fb:b4:06:80:bc:c9:19:e5:63:59:b9:c0:83:13:3c:
         86:05:a4:ae:e6:ef:07:72:f1:a6:76:61:82:60:5c:05:76:21:
         ee:b8:0a:18:fb:30:c9:03:a2:bf:b4:6d:90:6e:24:2e:20:9b:
         10:55:f0:99:3d:9c:cb:7d:18:72:53:67:f6:bd:ed:af:fd:24:
         ef:47:e1:56:44:82:59:2d:a8:e2:7a:fa:b0:dc:a3:a0:e2:e6:
         3c:b6:40:dc:4e:49:4a:a3:7c:58:70:a6:cf:03:4d:a7:5e:de:
         12:9b:66:ae:06:ff:ff:73:b6:42:a9:2a:f2:d4:00:96:cf:77:
         e3:b8:d7:b6:5a:ea:18:50:cb:62:1d:ca:0b:5a:77:d1:8b:60:
         8f:3c:6b:85:70:5f:84:c5:a1:83:19:1f:33:7e:15:4b:9d:53:
         2b:5e:c4:73:06:db:31:ba:1a:7d:54:9b:58:c4:76:43:4f:72:
         04:05:a6:d8:11:56:6a:24:46:f8:c8:9d:55:01:8c:bf:2e:6d:
         af:b0:dd:02:1e:f3:65:d6:c7:7a:38:a6:28:90:03:1e:10:74:
         da:d5:de:46:93:04:6f:39:34:0f:3e:d2:4c:09:94:3f:c7:1b:
         a5:1e:c3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:04:49 2025 by rpki-client