Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/06d6faa0-7be4-3e9f-8bf9-606c40bd73f7.roa
File:                     06d6faa0-7be4-3e9f-8bf9-606c40bd73f7.roa (raw, json)
Hash identifier:          d39y4lLTNyEi/VXg2FEyI5DAyfGefwn0yjCiB1uY0tg=
Subject key identifier:   68:F1:C4:73:78:1A:80:C5:84:28:12:D1:BA:7F:CF:13:DC:77:ED:18
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B685FF1DD845CBED58F00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/06d6faa0-7be4-3e9f-8bf9-606c40bd73f7.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     395973
IP address blocks:        104.134.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:68:5f:f1:dd:84:5c:be:d5:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=b9180e4a-9aff-475c-bcbd-e71ae590efb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bb:05:95:2f:d1:05:f0:36:ba:b4:3c:fa:5a:
                    9c:47:8c:00:c9:9e:79:a5:cb:e2:3a:42:21:88:49:
                    c9:87:62:0d:26:04:08:ed:ab:62:51:dd:2c:82:e2:
                    15:11:2c:89:db:90:23:8a:de:2a:c3:e2:f1:6c:6d:
                    22:77:13:c7:07:0f:dc:67:89:c3:56:14:47:f2:80:
                    75:6d:6f:81:16:5b:a3:22:23:2b:63:d7:a7:16:09:
                    c6:9f:9d:5b:0e:a6:c0:74:82:d6:8c:86:ee:91:3f:
                    dd:90:33:16:35:d9:b8:b2:2f:c8:b7:c3:b1:c7:2c:
                    4b:ea:78:ac:40:01:d4:f0:e4:56:2b:ae:25:05:85:
                    2f:75:02:d1:6e:6b:fc:5c:f2:d9:2d:0e:76:84:6a:
                    e7:4c:20:86:36:a5:35:bd:a5:42:bc:3d:a8:de:19:
                    7a:6f:75:13:24:56:e7:7a:03:b8:02:f6:55:03:79:
                    d0:9f:a9:0d:06:45:e8:f3:00:19:71:65:05:58:ef:
                    6e:dd:8e:05:23:4b:6f:e5:8e:f5:3f:56:27:8a:0a:
                    a6:81:98:4c:87:26:19:32:53:53:0c:1a:54:26:cc:
                    9f:e2:c8:bd:68:22:07:18:48:8d:c2:65:f7:3e:03:
                    02:9b:3d:d9:ce:9e:bb:6d:8e:c0:7a:6c:b8:2b:2d:
                    ae:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F1:C4:73:78:1A:80:C5:84:28:12:D1:BA:7F:CF:13:DC:77:ED:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/06d6faa0-7be4-3e9f-8bf9-606c40bd73f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:dd:1a:4b:0a:f5:fd:75:17:9e:3d:ae:5d:bb:ac:07:b7:39:
         d9:d7:e8:60:48:75:75:75:95:8d:ff:21:0e:62:75:32:7d:b1:
         09:02:18:f1:8f:5f:b5:56:eb:b8:7b:98:8b:bf:09:89:80:00:
         46:14:55:1f:09:19:b2:ff:64:9b:c2:db:e6:10:30:ce:36:37:
         e5:bf:30:c7:07:6a:d2:9e:33:47:c8:23:2a:44:21:b4:c1:1f:
         3b:67:0a:7f:56:26:b5:56:5e:f6:cd:12:04:11:7e:49:0d:30:
         3b:d5:1b:ad:04:7c:11:8f:01:30:49:9d:eb:bf:a7:22:e8:20:
         2e:59:b7:e7:44:84:d7:21:64:82:77:14:36:2c:03:48:59:d4:
         1d:2a:00:0e:69:cb:c3:ee:ec:f6:b2:26:e8:36:1a:45:fc:04:
         92:90:98:31:be:d1:aa:21:27:79:79:2a:8a:91:1f:8a:41:55:
         42:fd:b8:0a:d7:f1:3b:44:ce:f0:b1:0f:61:69:53:11:19:37:
         eb:c7:7a:89:32:91:56:e4:01:26:e6:4a:ed:15:3a:53:e3:e4:
         7d:32:5e:3b:17:e5:7e:de:11:64:00:ee:f2:89:78:75:99:81:
         87:be:24:e2:29:ba:2d:91:33:fc:cb:af:ab:1c:6f:7b:fa:26:
         46:77:fe:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:56:32 2025 by rpki-client