Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d8fe2a22-2754-3e01-9c3c-9c15436472c0.roa
File:                     d8fe2a22-2754-3e01-9c3c-9c15436472c0.roa (raw, json)
Hash identifier:          cYfPN2Xe4kpYz+PoAWL0OeNc9nP8hzfwiVDxo/2QIz8=
Subject key identifier:   9F:5B:E6:24:61:F5:EE:EA:1D:31:61:F2:E4:48:BF:24:C1:8A:D1:B1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBD05AAA2BF76B2ACCA780
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d8fe2a22-2754-3e01-9c3c-9c15436472c0.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     395973
IP address blocks:        104.134.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:d0:5a:aa:2b:f7:6b:2a:cc:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=2ea03674-761b-4384-becb-5cde89784b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:b7:bc:70:03:00:a2:7f:83:a3:7d:29:a9:
                    61:17:92:22:13:7c:4f:cd:ce:e3:cb:35:67:d8:95:
                    17:30:18:1b:d1:83:84:4b:51:c4:73:6a:88:fc:fd:
                    83:3b:2c:3d:f4:b3:a7:7d:c9:f3:cf:87:d4:bc:5a:
                    a3:53:bb:83:13:01:7f:2b:9c:58:d5:2d:a3:15:6a:
                    0e:26:7e:ee:8a:dc:4a:49:0a:b3:e3:7a:1b:4d:7b:
                    75:80:e8:15:45:23:8d:21:8b:f5:91:7e:0d:fa:99:
                    df:5f:64:57:14:17:c6:3a:47:a2:3f:a0:f5:b6:cc:
                    82:5f:0a:dd:1e:ad:01:e4:eb:f3:a8:f0:17:0e:99:
                    52:35:41:a3:0f:f8:8a:a4:03:12:7b:89:42:a9:9c:
                    6f:3c:51:eb:d6:85:0c:3d:ff:02:f8:09:fd:a9:e0:
                    a2:dc:e9:b7:9a:2b:21:74:fa:ff:ab:c1:1c:b4:41:
                    6a:4b:63:2c:b4:3d:88:ec:2d:9c:34:d8:ee:9a:3d:
                    e1:7b:51:57:fc:c6:f7:11:31:10:6f:6a:d8:40:14:
                    df:17:c9:4a:10:80:21:b5:1e:dc:17:b8:ff:18:65:
                    03:e3:ea:a8:0e:78:f6:6c:04:8b:75:f9:86:7b:ba:
                    a6:a5:5b:35:76:6e:08:60:f5:91:32:e5:ff:1a:b7:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:5B:E6:24:61:F5:EE:EA:1D:31:61:F2:E4:48:BF:24:C1:8A:D1:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d8fe2a22-2754-3e01-9c3c-9c15436472c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:d2:a2:64:ae:ff:30:f9:01:8b:c7:f8:af:24:18:0b:40:ab:
         b2:d0:71:ba:c4:1e:0b:92:7c:ea:0e:26:12:dc:e0:3b:c8:6c:
         cc:b2:cc:75:e8:f5:a4:18:fc:5b:78:f7:8b:7a:76:39:75:9d:
         2a:a9:de:43:83:ae:a7:de:21:10:03:9c:8a:fa:e4:9f:26:7d:
         bc:b8:11:bd:db:9f:39:1a:04:70:59:6b:eb:e0:5b:af:a1:52:
         30:95:2f:87:c0:f2:4e:d7:eb:74:bf:68:ea:c3:38:0d:35:b2:
         4c:04:a5:ee:04:1b:a1:35:fa:d0:a5:01:3d:db:4a:11:95:68:
         eb:9f:fb:48:58:33:14:42:b3:0f:5a:5f:e3:ad:2e:93:24:ee:
         92:52:6f:bd:dc:e5:8b:2a:f0:75:14:1d:3c:67:63:f0:d6:86:
         17:27:16:d5:19:e6:11:ae:31:e6:d1:89:37:58:fa:48:7f:59:
         fb:64:32:ca:7f:0b:7b:f5:3c:44:d8:b1:5e:cc:0e:a1:d7:84:
         df:e2:51:ed:d8:e6:ad:da:b1:ec:ab:42:a8:e0:66:64:43:2f:
         a8:15:4f:37:34:4e:eb:4b:ba:d3:84:45:9b:4a:b0:94:14:b0:
         bc:92:aa:b4:8e:7d:cc:56:89:83:66:24:e4:15:e2:c5:79:ea:
         17:d7:e1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:28:12 2025 by rpki-client