Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3fd40259-6138-3dcd-bf02-54a31e8d37b2.roa
File:                     3fd40259-6138-3dcd-bf02-54a31e8d37b2.roa (raw, json)
Hash identifier:          6NNp/E7co+0C7VbHHWlodN1jSuoirqTFHEzEYnQ/lcM=
Subject key identifier:   48:FE:B6:A8:D3:4A:4C:4F:00:D8:CB:A7:8B:CF:03:D1:42:B0:EF:33
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350C11AFAAC74BD30C1E080
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3fd40259-6138-3dcd-bf02-54a31e8d37b2.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:c1:1a:fa:ac:74:bd:30:c1:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=ae864c12-3eaa-431e-a58d-d0db8025a818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:5a:0e:19:7c:27:b9:5a:2c:74:bd:3a:2f:
                    2e:66:93:78:3e:f8:c5:c3:b7:04:82:29:06:ba:0e:
                    5a:64:aa:9c:7f:4d:d8:56:6e:7b:47:19:8d:5c:af:
                    47:70:8c:3e:20:6b:c2:ad:98:76:d2:b1:a5:16:d0:
                    5b:56:8a:da:01:97:5f:08:d2:83:12:68:2a:50:3e:
                    c0:9e:fc:94:08:04:96:69:70:18:8c:05:a7:c7:0b:
                    f7:05:58:52:c8:44:7c:2d:b7:54:85:db:38:61:be:
                    52:b5:85:1e:e1:3c:96:f4:58:e7:f5:be:58:b1:2c:
                    2a:37:b9:8c:96:bb:20:bc:8a:b1:4b:98:25:b9:fc:
                    97:51:03:8f:ac:e5:b1:a0:f9:c2:0f:8b:84:7e:5e:
                    64:a6:fd:7d:a8:60:10:07:4d:9c:09:a7:e1:5f:f2:
                    60:12:bf:31:40:95:65:df:00:8f:07:05:9b:00:62:
                    84:0d:0f:c0:82:38:41:38:12:c9:ed:1f:ae:fb:b0:
                    ff:9f:0b:65:2a:c9:cc:16:dd:23:61:7a:65:24:a6:
                    8d:b6:32:e7:fd:29:d0:46:ba:74:5f:af:9f:bc:29:
                    57:04:c5:36:2f:30:ac:08:d8:ba:25:d7:9e:a5:66:
                    df:b1:70:3e:27:8c:1c:0f:77:3b:7a:42:2a:41:23:
                    f2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FE:B6:A8:D3:4A:4C:4F:00:D8:CB:A7:8B:CF:03:D1:42:B0:EF:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3fd40259-6138-3dcd-bf02-54a31e8d37b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:3e:5f:da:90:78:a6:92:25:a6:0e:77:be:1c:13:30:f5:5e:
         1d:a8:38:19:68:74:d6:08:65:68:bd:31:b8:5a:bc:17:5f:c1:
         c6:aa:27:83:3f:7d:e2:ff:7d:0f:a1:5b:74:d3:9e:da:49:2d:
         dd:46:2b:c6:b2:72:bd:47:3c:4d:39:8e:60:d7:58:5e:c9:03:
         f4:f3:b1:6e:20:dd:c4:bf:8f:6e:8e:f1:ca:dd:ad:66:87:ae:
         b9:3c:a2:24:4b:3f:ac:dc:d9:dc:40:f4:65:c1:45:48:f3:04:
         42:fd:b4:cc:ee:3c:8b:81:70:6b:ee:ac:2e:99:a3:34:f0:5e:
         9e:7f:42:cf:96:1c:78:bc:f8:5e:26:77:5c:89:90:eb:cb:6f:
         8b:22:43:6d:04:f5:9c:c7:60:19:8f:44:48:86:cd:ea:9b:31:
         0f:ad:21:e9:ba:df:62:27:1b:84:cd:3d:b0:be:bf:c9:fa:68:
         fe:9e:81:b9:80:20:03:98:e6:e7:89:9c:37:d2:ed:7a:ea:12:
         18:00:f7:47:2d:5f:8e:3d:5e:4e:6c:98:a3:78:f6:53:da:b8:
         f5:14:16:46:5c:85:e4:2b:59:ed:d9:f0:d2:8d:c4:f9:b0:e9:
         96:bf:93:d9:93:22:60:0e:85:d4:ba:39:35:b6:9e:b9:e7:e4:
         34:e7:75:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:22:27 2025 by rpki-client