Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bd6b89e-4bd1-3aa3-ae82-2561c1e5c5b3.roa
File:                     4bd6b89e-4bd1-3aa3-ae82-2561c1e5c5b3.roa (raw, json)
Hash identifier:          1kizClJIMotueOY5Uv+Bm4x1oQxmgU4V/rmfHc6+Ca4=
Subject key identifier:   1D:4D:09:A3:24:26:E5:73:59:AF:65:21:1E:EB:33:16:8A:B0:9C:A7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B94230208602FDC9BB000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bd6b89e-4bd1-3aa3-ae82-2561c1e5c5b3.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:94:23:02:08:60:2f:dc:9b:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=1ca2959f-79f8-4345-bd93-a06c371ff018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e3:7d:ce:d0:9e:73:0f:94:72:34:aa:2f:ad:
                    5d:ec:d0:20:52:23:e6:ff:99:0c:fc:df:82:21:ed:
                    55:32:f4:9f:70:0a:d8:41:f3:32:0b:3f:4d:47:c0:
                    0b:5d:98:e2:93:4e:fd:98:7e:26:e8:35:ab:4c:bb:
                    79:df:cc:78:90:44:4f:d1:d1:0b:ac:5c:9b:94:a2:
                    10:7f:fb:8f:8b:3d:16:98:a2:e6:fe:39:53:65:18:
                    ed:fa:04:44:3e:ec:12:ce:c9:0b:35:10:5e:99:62:
                    6e:aa:08:20:22:e6:f5:9f:74:20:38:e1:93:9e:6d:
                    e6:da:38:a5:6f:1c:35:5a:03:f7:d0:11:68:f9:a5:
                    50:bc:ca:c9:df:6e:23:b8:cb:0e:44:36:af:7c:b5:
                    8a:4b:da:30:cf:62:9b:47:4c:24:a5:21:d5:a2:50:
                    e2:3b:fe:94:8c:da:b0:06:53:88:1c:b7:21:bb:ad:
                    0d:83:ce:05:6b:17:76:6c:3c:a5:3a:4e:42:d2:50:
                    be:e5:08:7c:c9:3b:9b:6e:1a:b5:4b:48:9a:36:6c:
                    48:df:c8:be:64:b5:ef:0f:39:47:8d:99:2a:73:cf:
                    33:a4:8a:8d:26:5e:f3:59:8c:f5:80:86:97:4a:a5:
                    ba:f3:34:ee:a7:fd:73:e3:4b:6a:53:a7:d4:0b:4b:
                    39:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4D:09:A3:24:26:E5:73:59:AF:65:21:1E:EB:33:16:8A:B0:9C:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bd6b89e-4bd1-3aa3-ae82-2561c1e5c5b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e8:ef:17:a3:1c:ce:50:ce:64:76:da:db:9b:3d:9b:2f:1e:
         24:9d:4e:85:3e:b0:0c:75:46:5f:d4:b0:e6:99:df:90:a4:80:
         23:20:84:ef:f0:37:4f:d1:dd:2e:d8:be:3b:58:73:a3:8e:d0:
         ae:7c:fc:3c:5a:9a:0b:a1:2b:44:49:f6:ce:58:91:33:c7:b6:
         5d:a1:dd:84:b2:90:01:d5:65:78:2e:18:34:5e:15:f4:ab:f1:
         fb:d9:97:21:d6:cd:b3:3b:a4:45:8f:60:df:93:68:4d:33:f2:
         54:8b:53:94:e9:80:f1:95:b9:69:6f:04:9b:55:06:7d:29:08:
         74:94:87:0b:21:fa:cb:0d:39:10:cc:7d:46:ed:13:06:25:56:
         e9:68:0e:f8:cd:29:b7:59:0f:6a:6b:8a:fb:72:1f:c6:b0:cc:
         2d:6f:99:4d:f1:57:4f:9c:1e:66:23:f4:9b:6e:9a:9e:65:01:
         dd:3a:77:c5:97:cb:be:80:b4:28:af:81:a7:c2:35:8e:3a:63:
         b3:4c:ec:78:0a:36:65:4f:20:54:f7:db:3c:72:0b:34:22:a6:
         2e:66:df:25:4b:fc:28:00:aa:eb:d9:c3:f5:8f:eb:97:0c:28:
         de:00:fd:48:eb:1d:ac:2c:49:80:a7:90:0c:31:a7:99:66:49:
         d8:72:47:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:05:10 2025 by rpki-client