Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2f53557f-9eb0-387e-8ee1-a9ccfbb21459.roa
File:                     2f53557f-9eb0-387e-8ee1-a9ccfbb21459.roa (raw, json)
Hash identifier:          64NqsxylbaNRlefuu2n1D3kS5Q8FdhedNca+2oitP5I=
Subject key identifier:   22:AF:1A:DF:5D:B5:86:17:68:90:AA:97:27:6E:A2:D5:9E:61:41:42
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A70860E6BB06DCB1EC79CD1C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2f53557f-9eb0-387e-8ee1-a9ccfbb21459.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     41264
IP address blocks:        104.132.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:0e:6b:b0:6d:cb:1e:c7:9c:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=00641f9c-8cb4-4e32-862c-424c72e4bc42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:aa:0a:3c:f5:ca:23:21:c2:6f:7d:1a:23:07:
                    90:09:a3:f7:1e:a7:37:e1:a7:65:f8:a4:05:a7:1d:
                    3b:55:77:86:a8:7f:a2:b7:37:71:42:bc:0d:fb:9c:
                    34:a3:85:5c:66:b2:3b:ce:03:59:84:24:41:18:b1:
                    ef:3b:29:db:49:c0:57:e4:b0:11:cb:3d:1a:08:1c:
                    87:d3:b6:c3:b0:fe:0f:34:d3:b1:97:ff:8b:ff:8a:
                    59:c2:e2:83:e5:5b:21:c6:0f:a1:57:d8:2e:a8:5a:
                    97:15:39:87:3f:92:92:fc:74:d5:ab:98:d9:32:1e:
                    46:ef:22:63:a8:91:de:d8:16:b1:61:b7:35:88:a3:
                    50:34:ae:9f:e0:81:d4:97:61:82:0d:b3:91:57:03:
                    d2:62:86:83:ef:a6:03:79:da:72:6e:98:c3:c7:0f:
                    7b:e6:76:67:68:0b:be:26:ce:77:cd:71:cc:5f:11:
                    96:3e:eb:0e:a3:c1:62:d6:fd:a3:40:42:2d:bc:17:
                    bb:1f:23:ed:20:48:c6:9b:4e:08:72:61:b1:97:e7:
                    07:c3:90:63:21:09:3b:87:8d:8a:90:0f:f3:79:fd:
                    86:82:21:c3:dc:64:d6:d6:71:5c:fc:2c:85:96:07:
                    41:43:de:7f:e4:5c:91:83:1c:60:a1:60:25:cd:1a:
                    e8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AF:1A:DF:5D:B5:86:17:68:90:AA:97:27:6E:A2:D5:9E:61:41:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2f53557f-9eb0-387e-8ee1-a9ccfbb21459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:e3:95:76:51:e2:39:a1:ad:44:71:90:4a:11:6f:7f:b6:9d:
         be:da:65:ea:66:5f:26:b8:29:4a:ad:95:0e:ad:1c:6a:a4:4d:
         8b:bb:bd:71:04:f3:21:ed:85:89:29:94:43:a5:9c:56:48:92:
         a5:4c:fe:0e:dd:ee:30:8b:c9:83:b6:53:9f:aa:d1:95:c5:1a:
         d3:39:d3:f0:17:8b:04:0e:6b:14:99:34:8f:0a:f2:b6:1f:73:
         93:ad:4c:f3:bb:df:7d:8a:ee:00:8a:86:bd:41:06:db:26:4a:
         f3:32:10:3f:03:b6:f8:ef:cb:18:00:e3:a0:1c:c2:03:ad:56:
         e3:78:3a:24:9f:a3:91:60:0b:bd:06:76:77:af:dd:11:5e:fd:
         61:a2:5b:a0:28:fd:89:31:3a:19:bd:a8:f8:5f:c2:e8:3e:d4:
         10:86:33:b6:6b:88:45:d2:7a:f3:99:d5:54:64:87:e8:e4:5d:
         a3:a8:a7:df:fc:5e:21:dc:b9:20:14:25:72:c1:02:47:fa:6d:
         91:59:44:97:5b:88:64:87:1d:6f:9e:d2:bd:37:dc:54:42:76:
         8a:5c:6b:b5:c6:c0:ea:3a:9c:23:bf:fd:73:84:73:df:50:11:
         54:bd:63:0c:36:a3:02:7c:1b:ed:15:59:14:16:aa:f2:e1:e0:
         16:92:51:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:34:00 2025 by rpki-client