Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/388a0483-4e30-3ba3-b6e6-4b48b37342c8.roa
File:                     388a0483-4e30-3ba3-b6e6-4b48b37342c8.roa (raw, json)
Hash identifier:          HhUVtFBzCbFm1wAIgGeN6WCDPkETfUlqYGoBEP1XYwA=
Subject key identifier:   B6:0B:DF:BF:B8:AD:E3:06:28:E0:BD:5D:05:76:8D:04:B7:75:FF:F7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350B5A0C8539CC1FEA8BB00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/388a0483-4e30-3ba3-b6e6-4b48b37342c8.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b5:a0:c8:53:9c:c1:fe:a8:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=9e12547b-3892-47bf-baac-64f3c84cd298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:55:a2:d4:dd:3c:42:77:58:02:20:2c:81:
                    d1:d0:39:a7:79:23:29:73:b0:0f:8f:c3:6c:7b:bd:
                    4e:50:3c:a4:32:a8:1f:e1:c4:e3:9d:b9:d7:ac:49:
                    09:63:dc:61:26:c5:4d:c7:08:20:e4:5f:8d:28:17:
                    b9:0c:ab:fd:6a:92:0b:35:b1:77:b6:7e:fb:36:ae:
                    40:70:b8:ba:84:aa:cc:4e:b8:55:83:62:36:40:8d:
                    96:14:17:12:ad:59:d0:f3:f8:47:56:c3:58:22:aa:
                    dc:ea:69:a4:8d:f1:52:dc:4f:b0:91:c7:ad:af:a2:
                    bb:b3:02:03:72:07:ca:7a:f0:e0:91:8e:ce:9b:ca:
                    de:7a:10:9b:2a:a5:c7:3e:45:0b:59:18:b2:f3:49:
                    06:24:3b:17:52:3b:41:4b:9a:39:10:64:e8:29:bd:
                    dd:23:34:8b:28:80:4f:c2:2a:42:6e:d4:88:f2:20:
                    ff:9d:e1:ab:e1:d8:5b:38:0d:28:cf:9a:ca:53:2b:
                    7b:6c:3a:9d:ff:b3:5a:2c:3c:80:fd:25:0a:61:51:
                    7f:89:a6:71:4b:8a:0e:76:12:f4:27:c7:d0:24:86:
                    53:a6:a2:21:4d:3d:cf:cd:a0:24:15:20:75:c6:a3:
                    42:73:56:ad:31:3b:c3:79:c0:05:bd:2f:18:09:81:
                    59:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0B:DF:BF:B8:AD:E3:06:28:E0:BD:5D:05:76:8D:04:B7:75:FF:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/388a0483-4e30-3ba3-b6e6-4b48b37342c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:23:34:6d:08:b3:02:08:2f:6d:6f:79:07:ab:63:69:de:90:
         c4:ac:25:a3:b1:4f:12:e4:38:af:00:9d:75:70:c8:d1:2c:23:
         5d:d3:0f:65:cb:e3:a7:c8:17:a8:56:ab:e4:e9:7d:0f:2d:cc:
         25:ca:a8:53:f3:ea:04:3f:5b:4c:c9:48:fb:be:6a:f4:a6:cd:
         c9:a5:ac:ec:29:8f:a6:43:29:cf:53:35:75:d6:6f:ff:3a:d7:
         1c:b0:a5:42:4e:b6:7b:78:b5:55:a3:16:2c:00:d6:97:50:9c:
         b1:cc:ff:b1:7b:1c:0e:6a:eb:7c:75:f4:02:0f:30:ca:1b:40:
         72:12:65:76:8c:a7:59:46:ff:bc:42:51:dd:02:b5:61:9e:55:
         aa:2d:bc:e6:3e:c1:7d:35:50:95:32:50:ae:6d:cf:b9:5c:ad:
         da:ae:36:5f:9a:a5:a9:fb:a8:df:f2:53:72:42:f0:63:83:e3:
         eb:d0:55:0c:0b:47:07:bb:e6:79:bc:cb:b3:cb:cc:7c:bd:59:
         af:5a:81:82:49:9d:84:74:2e:a2:c4:32:25:be:f1:2e:8f:5c:
         cf:a4:ca:87:14:39:57:98:4f:30:69:ad:fa:da:02:16:9d:35:
         9d:b2:d6:3b:46:a0:2a:d3:b9:50:aa:74:ac:70:ce:7f:ef:8c:
         12:ec:1f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:30:22 2025 by rpki-client