Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2c2462db-9830-37e5-b3c0-b743a8d54064.roa
File:                     2c2462db-9830-37e5-b3c0-b743a8d54064.roa (raw, json)
Hash identifier:          PjyaftJem6Wq9RJwdEvsd4i4HZx/Y8/jrTaTUJptSr0=
Subject key identifier:   D6:6F:E7:48:D8:25:64:E0:1D:64:65:78:A1:63:01:26:A6:7C:28:8C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A9636883043A4C94EF3516140
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2c2462db-9830-37e5-b3c0-b743a8d54064.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     36411
IP address blocks:        104.134.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:88:30:43:a4:c9:4e:f3:51:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=74815c14-ce28-44fe-903b-8232382adb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f5:71:84:d5:6c:c3:bd:95:9c:5c:50:e1:d0:
                    ff:eb:9f:ac:b3:11:2a:fc:c6:21:40:7f:32:91:18:
                    d5:4c:61:86:1d:59:5e:75:33:ad:86:9f:04:8f:57:
                    f6:69:7e:1d:cd:6d:80:1c:a9:fe:b1:32:06:6e:1c:
                    82:f0:7c:fb:c9:43:cd:15:f2:e2:47:12:fd:d7:76:
                    d1:1d:99:7d:c2:ae:a0:24:20:b3:b1:eb:f4:2a:b5:
                    e1:48:3d:59:94:c5:6b:18:96:19:dc:81:ab:26:6d:
                    d0:b0:4d:0e:2e:a1:74:56:56:c7:a0:2f:cf:60:94:
                    ee:fa:c1:82:c7:49:e7:0c:c5:ad:50:17:0b:ac:21:
                    2a:c6:09:35:73:1c:a5:b4:91:56:8c:ee:fb:28:a9:
                    bf:12:28:db:b5:06:96:49:93:6a:ef:92:97:15:1e:
                    12:0a:69:f6:3c:4f:80:eb:84:65:09:80:a2:63:c6:
                    21:bd:46:b8:3f:12:69:c5:81:9c:a5:14:77:2a:1f:
                    c6:e5:4e:7a:0e:a2:07:42:75:98:74:cc:15:25:77:
                    e7:18:60:fe:37:30:a4:3d:cf:2b:be:80:24:a3:61:
                    2a:89:c8:63:e6:f3:50:b6:f6:c5:b1:47:fa:ca:c6:
                    3c:91:50:9b:29:8a:ef:04:f0:66:45:f4:2f:50:ab:
                    00:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6F:E7:48:D8:25:64:E0:1D:64:65:78:A1:63:01:26:A6:7C:28:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2c2462db-9830-37e5-b3c0-b743a8d54064.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:07:e9:7f:1d:36:f1:6a:d1:5c:16:bc:19:2a:bc:12:d6:15:
         59:9d:a7:94:c3:73:2d:7c:89:a6:c8:21:25:b5:da:ac:14:da:
         cd:56:e9:d4:42:6e:8d:b5:21:3e:18:68:8a:7c:8c:69:27:f5:
         f0:a9:06:17:9d:66:35:c9:33:54:29:b5:a4:af:f5:47:ac:3e:
         d1:ee:41:73:49:7f:41:da:74:75:69:aa:47:6b:6d:a2:fa:f6:
         65:65:28:a2:01:dc:65:37:3c:ce:e7:5e:73:ab:c6:36:3c:3d:
         73:e5:86:2f:26:cc:e7:2f:fa:d3:be:fa:15:50:de:6f:f7:27:
         91:03:61:08:61:86:3e:c8:aa:92:a0:7e:e1:03:52:58:11:04:
         ef:26:bb:9d:25:87:80:36:d9:a7:44:83:81:04:4c:8a:5d:b2:
         4b:62:e6:49:13:27:f1:62:d2:aa:e7:d4:6f:44:f4:3e:91:27:
         da:15:7d:f5:75:3e:d1:9d:8d:6d:43:1c:4d:e9:fe:e8:cc:f1:
         fb:66:82:b4:ee:84:57:1d:52:f5:05:aa:e5:f0:cb:5d:e6:4b:
         2d:bf:6e:39:84:bc:46:dd:5c:1c:01:4e:11:4c:98:75:27:40:
         09:e9:93:2c:ca:b1:7e:bb:21:37:07:e1:8e:0d:cb:8a:ea:48:
         b8:90:a6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:01:54 2025 by rpki-client