Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47cc97f2-3c67-35da-93c6-4033da29eec6.roa
File:                     47cc97f2-3c67-35da-93c6-4033da29eec6.roa (raw, json)
Hash identifier:          gzAE4WRTz4fEn2VaNX3xu3kVIbv/65LagIZrt/zotiQ=
Subject key identifier:   16:48:4C:3F:97:5F:FC:C1:17:8B:CB:37:DB:64:B0:2C:DF:B3:6C:C9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B97CF9381DFB862B30280
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47cc97f2-3c67-35da-93c6-4033da29eec6.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:97:cf:93:81:df:b8:62:b3:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=2686e7b6-c634-49f4-8084-b56353ab07de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:54:6c:24:45:20:3d:ee:44:a5:15:bf:7c:
                    3e:c6:93:83:c7:a0:96:c0:37:0d:2e:92:54:be:17:
                    bc:58:cd:54:25:27:dd:89:99:7f:ef:2f:f7:6e:dc:
                    62:ca:fa:c1:b2:3e:8d:02:ea:7a:6c:cb:39:94:7b:
                    a5:f3:5c:6c:b6:b2:b1:77:cd:e4:62:b3:3f:55:2c:
                    12:83:71:6d:8b:bd:e5:27:fa:d0:ca:5b:f3:dc:62:
                    5c:57:d4:2f:b3:fd:12:3e:ad:5a:b6:06:ad:ce:f8:
                    44:57:71:a1:a6:cb:94:d0:13:7f:25:e2:60:5c:50:
                    da:25:0c:9b:75:d2:b6:36:03:b3:04:ca:0f:fb:eb:
                    30:9c:36:a1:c7:27:7d:48:40:bd:c6:cb:28:1e:73:
                    c1:d9:75:d8:70:73:d1:80:00:e4:59:35:91:a2:d1:
                    94:23:14:ec:94:a7:8c:7d:34:2d:76:0c:24:fd:15:
                    09:6d:c9:9f:58:59:b0:30:33:b4:30:9a:d8:50:a1:
                    cc:76:c9:ce:c2:40:cb:fe:6e:95:2b:fa:b3:ff:a5:
                    00:04:be:0b:00:a7:da:5c:20:30:cd:df:03:f2:cb:
                    91:d9:5d:b2:aa:07:25:c8:11:39:aa:ef:dc:60:17:
                    c7:71:85:e0:b4:30:91:d9:95:9a:57:95:cd:44:0a:
                    bb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:48:4C:3F:97:5F:FC:C1:17:8B:CB:37:DB:64:B0:2C:DF:B3:6C:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/47cc97f2-3c67-35da-93c6-4033da29eec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:7e:a8:ef:c7:da:8c:2f:da:8d:fc:ae:06:91:dc:dd:db:28:
         2b:14:74:0a:b7:d5:b8:30:58:91:a9:16:4b:4e:c6:1c:25:be:
         72:c0:be:d9:6c:33:1a:c2:d3:db:50:77:68:6c:5e:83:c2:41:
         ea:f7:96:c9:ae:8d:20:01:89:39:82:3d:8c:e1:08:f8:57:a3:
         e2:b2:d4:ab:30:66:75:3d:49:8c:22:8f:ec:be:62:00:89:64:
         43:0c:72:f4:33:62:87:84:9d:9f:b5:7b:0a:53:a7:7f:43:3b:
         ec:d9:9d:03:ca:4c:0a:00:6b:ee:19:93:0a:e5:d0:43:9c:c9:
         f2:18:e6:f1:c3:44:d2:a5:9e:7e:8b:8d:96:35:5e:84:69:0d:
         1f:73:d9:0f:39:c0:90:cf:68:28:59:f8:d1:6c:98:89:f8:53:
         83:c2:81:ba:a3:ed:63:74:4d:19:27:b2:d1:27:60:ce:9e:1e:
         93:e8:76:9a:6a:38:e2:27:24:0a:5b:b3:39:25:3c:6f:1f:18:
         36:a6:cc:1e:e9:77:77:5e:94:96:a5:de:a8:0b:10:cc:4e:74:
         1b:76:77:e9:2f:e1:f0:13:fd:62:70:12:40:40:ea:40:8a:bc:
         97:64:69:cd:38:02:61:78:9e:15:9a:c6:1f:05:fe:6f:0b:a6:
         8d:33:b5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:03:12 2025 by rpki-client