Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f2e0bf6c-cef5-30de-ba1e-95211f495167.roa
File:                     f2e0bf6c-cef5-30de-ba1e-95211f495167.roa (raw, json)
Hash identifier:          kFkvzNNz/EdJCrq5BZFBo7qJUWZE0hVlzz7+F0AKCik=
Subject key identifier:   F8:0F:F2:75:B6:8C:CE:E8:3D:39:61:E1:EF:88:BA:41:4A:E4:EF:88
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBD9575C6851442B3F2B80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f2e0bf6c-cef5-30de-ba1e-95211f495167.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        104.134.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:d9:57:5c:68:51:44:2b:3f:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=62ddcfaa-4912-4142-9375-089039d3acc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bb:c4:a8:18:53:e0:a0:bb:4d:7e:9a:2e:72:
                    81:de:21:67:4c:80:09:02:ae:83:fa:00:af:26:a2:
                    d0:35:b5:c7:cd:97:0d:80:cc:de:8d:7d:bd:23:74:
                    70:27:a5:f4:ce:13:30:e4:f5:b0:35:23:31:8e:a3:
                    af:6f:81:f2:20:17:9c:94:97:30:cd:1b:a7:e0:a3:
                    10:55:10:1e:3e:d9:ab:46:bd:0c:d0:b3:90:5f:4b:
                    ea:ce:e7:a0:47:79:21:e8:f5:7a:9e:12:99:8e:eb:
                    82:2b:04:75:97:23:85:db:b1:37:61:b3:c7:94:6c:
                    12:fc:4d:b3:81:a5:99:32:24:e7:ca:a9:a0:e1:82:
                    80:72:86:de:9d:73:e2:ec:2a:3d:da:02:cb:65:a9:
                    21:d4:c8:8a:bb:af:5a:b0:49:3c:9f:63:e8:50:d0:
                    b3:a1:76:1d:0d:6c:6c:51:c1:20:bb:0c:75:73:f7:
                    6d:88:7e:aa:80:56:b6:ca:4f:5f:91:a3:d6:62:74:
                    be:58:38:78:2b:87:47:38:7d:e4:cf:b3:71:60:91:
                    fd:13:4a:08:5f:c8:0b:17:07:f9:5b:36:ed:29:9c:
                    8c:a4:9f:22:14:48:b8:21:38:2b:51:28:4d:3f:e7:
                    c1:62:20:07:d9:eb:c7:d6:fa:bc:48:87:db:04:91:
                    ad:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0F:F2:75:B6:8C:CE:E8:3D:39:61:E1:EF:88:BA:41:4A:E4:EF:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f2e0bf6c-cef5-30de-ba1e-95211f495167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:6b:a7:dd:56:17:f3:26:28:49:a0:da:8d:7c:39:62:a4:6d:
         02:0b:22:da:1d:48:aa:2f:7b:00:8b:23:23:81:24:54:ed:81:
         83:6a:0d:ac:b0:d2:a4:07:b9:53:f9:17:ab:0f:47:b8:fe:c1:
         31:31:89:b5:b7:a0:ed:c6:33:36:65:3a:7d:68:fc:19:07:f4:
         0a:c9:a2:4e:a2:f1:4c:69:a8:78:f1:6a:bc:fb:46:93:cf:e3:
         1e:83:d7:c6:05:d8:7f:46:9a:03:eb:e0:4d:55:b0:08:b1:c3:
         92:74:4d:92:fe:3e:48:3c:ad:37:25:64:55:db:8b:67:53:eb:
         79:33:84:ad:6a:71:c2:2e:4d:0b:5e:58:0c:a7:be:fd:b5:8c:
         62:5c:b3:34:cd:ee:fb:e2:64:ac:d4:b0:9f:d8:12:bd:4a:0c:
         29:74:1b:4c:40:a7:7c:cc:20:3e:37:da:53:43:01:be:22:90:
         02:db:f0:a1:b1:f2:08:66:59:d8:b9:00:09:a1:26:34:3e:65:
         df:a2:e6:af:63:d6:0c:b8:ee:e5:45:0a:39:69:65:0c:94:29:
         22:0a:be:a1:97:51:93:0d:86:81:c1:e4:27:32:77:b9:fa:3b:
         73:f8:b7:fc:e4:0f:d9:65:15:4c:0b:68:45:a6:07:9a:2a:01:
         e9:e3:bd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:45 2025 by rpki-client