Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3a0cfbb-e99d-333e-9381-b4f668b2aaf3.roa
File:                     e3a0cfbb-e99d-333e-9381-b4f668b2aaf3.roa (raw, json)
Hash identifier:          yNTarigbTGg1vIoD5fQe+b09xmzhmNZIS+ecLWmJf1s=
Subject key identifier:   E7:51:88:8E:7E:13:2E:6A:A6:0D:A2:1B:ED:59:3D:5D:FC:F9:46:9F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0E6229C2D118AC537ED00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3a0cfbb-e99d-333e-9381-b4f668b2aaf3.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     395973
IP address blocks:        104.134.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:e6:22:9c:2d:11:8a:c5:37:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=5abb8ca9-d257-45f0-8f9b-23b0d72d9095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8c:90:a1:20:06:57:1c:d0:49:b2:be:80:89:
                    12:39:2f:d2:36:be:c8:c1:0e:f9:02:94:4f:4c:f5:
                    55:34:a7:37:48:06:52:80:d0:62:02:78:5a:80:32:
                    20:b6:30:49:79:3a:96:52:a8:4f:29:49:e2:b1:63:
                    ad:bd:0c:19:b2:ac:45:8e:56:56:3f:91:53:ea:92:
                    80:ba:7d:7e:8e:ae:49:27:d9:4e:80:bb:04:57:d5:
                    6e:e7:33:c8:6a:15:3b:26:ff:67:22:6c:32:c3:ca:
                    6a:6f:cb:95:81:c7:72:0b:c5:2f:c6:2a:d2:66:2e:
                    4b:23:0e:7b:7a:4b:43:48:97:3c:0a:d4:55:7b:fd:
                    a1:b5:f3:cc:d7:31:21:42:af:59:ce:d3:78:ea:0d:
                    e6:4f:6a:f3:bc:e9:6a:0a:ff:17:45:07:cc:d8:59:
                    c9:05:81:cc:41:0b:89:9d:a4:77:80:a1:3b:ee:11:
                    5f:b9:b0:26:35:fa:bd:24:7f:f7:3c:50:71:19:9a:
                    da:ef:66:7c:d2:fb:89:e3:40:a3:22:f1:fc:cb:f6:
                    9a:cf:cc:0b:5c:3f:f2:90:b2:49:8d:c5:70:8c:78:
                    ca:df:7a:a7:9e:da:97:fe:08:db:a8:76:ea:ac:20:
                    42:67:d8:9d:59:e2:2f:c9:62:c4:ae:4d:b3:a6:9b:
                    fe:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:51:88:8E:7E:13:2E:6A:A6:0D:A2:1B:ED:59:3D:5D:FC:F9:46:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e3a0cfbb-e99d-333e-9381-b4f668b2aaf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:e6:36:2f:c4:44:b3:25:da:81:fb:5f:a4:70:1b:c2:95:bf:
         4d:2b:c0:e2:01:ff:2e:bb:83:fc:16:3c:f0:76:bf:87:2f:a4:
         10:48:27:73:96:75:6f:ed:f8:08:ae:c8:a6:b0:13:5e:b0:26:
         80:75:02:fd:44:91:7c:01:53:3f:2f:7f:a6:6c:f5:b7:52:7a:
         a7:87:41:27:c4:68:de:8c:f0:b2:27:e3:92:37:ff:75:01:3d:
         64:80:be:21:96:ce:aa:84:c2:86:3a:36:5e:67:a0:61:2a:a5:
         3d:69:b6:c1:fc:5e:ee:b2:81:7c:d3:47:50:6a:58:cf:8e:b6:
         aa:13:fd:dc:56:72:53:85:32:7c:0c:5f:8a:8d:b8:6b:46:0b:
         c0:73:d9:4b:08:46:2d:e9:3f:21:f9:92:83:f0:2a:74:6e:c9:
         dc:f7:95:5c:0f:78:2a:94:92:ee:26:14:ee:e8:7a:8f:1b:3a:
         2e:70:65:cc:6f:da:9a:51:89:97:8f:03:c3:75:79:e0:cf:ea:
         57:55:f7:58:ca:f3:67:3c:f7:bf:8a:52:5b:40:bc:7e:fc:fe:
         43:07:c9:68:02:58:34:26:f9:4a:a8:36:ac:a7:92:49:d9:29:
         b5:81:2b:1c:ee:6d:fe:bf:ca:1a:5c:56:41:a4:c2:5c:ce:7a:
         9c:c0:db:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:28 2025 by rpki-client