Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/637e4e7e-5fd1-3423-aeb7-ccdcbda58c82.roa
File:                     637e4e7e-5fd1-3423-aeb7-ccdcbda58c82.roa (raw, json)
Hash identifier:          FJZxohoqVyZlsn0ETQNHjUSqXucppcUM7zZZQLPjbxY=
Subject key identifier:   C5:28:BE:C2:A7:DE:38:6F:71:8E:D6:75:CB:52:A7:96:4B:BA:E8:40
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B9472AF3104BCAC3071A8
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/637e4e7e-5fd1-3423-aeb7-ccdcbda58c82.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.135.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:94:72:af:31:04:bc:ac:30:71:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=95e302d7-4a85-469d-abc3-e98823cae6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:03:be:c0:a6:3b:08:98:60:12:58:60:78:98:
                    83:a0:44:a4:86:0a:1d:71:3e:80:35:c8:89:4f:02:
                    02:51:64:24:93:75:20:54:4c:29:57:15:28:b2:c0:
                    c3:15:5f:5f:84:7a:83:9f:e7:65:c4:86:d0:a6:0d:
                    d4:0f:a3:1d:81:37:0d:ea:23:88:1b:7a:1a:3a:97:
                    7a:95:7e:83:5a:5b:39:c1:4e:54:7f:9f:d3:aa:23:
                    e2:1f:3c:df:1d:e3:b5:3c:04:fd:f1:20:45:1c:91:
                    70:a6:b6:0a:1f:e2:9f:1b:3b:60:29:3f:7b:4b:3a:
                    6d:e5:76:96:bd:19:23:cc:16:5a:22:d8:88:8e:cb:
                    b1:03:0f:8d:fa:ce:85:b6:a9:08:4d:86:86:8b:98:
                    dd:72:40:e7:32:87:8f:09:ae:27:f1:b9:13:1b:d7:
                    21:ff:b0:03:02:02:2d:db:2d:1f:4e:60:5d:1a:c1:
                    89:7a:fb:5b:25:7a:47:c4:95:51:22:6d:bf:77:96:
                    89:21:93:b2:93:3f:fb:36:fd:03:7f:8b:1f:f2:b3:
                    7c:c2:d0:f5:89:34:f4:ea:33:d6:4c:09:97:6d:09:
                    02:d8:c9:ad:0f:d3:6c:81:2d:c5:55:d4:aa:cb:5a:
                    0a:e7:67:84:84:de:d2:48:f2:a3:10:4f:af:ec:c2:
                    8e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:28:BE:C2:A7:DE:38:6F:71:8E:D6:75:CB:52:A7:96:4B:BA:E8:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/637e4e7e-5fd1-3423-aeb7-ccdcbda58c82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c5:a8:80:b0:c4:14:df:ba:27:3d:2a:e3:d1:d3:3d:45:fd:
         13:e2:56:12:5b:9b:a8:fc:76:98:a7:21:9a:7e:19:1e:72:17:
         f5:f1:4f:f0:d0:5c:1b:b6:63:bb:80:ef:94:58:1c:39:59:cf:
         b1:8f:7e:23:98:69:95:72:8b:f4:83:70:d8:64:b9:fa:93:cb:
         fa:43:eb:f3:e7:00:1b:5a:79:5d:47:64:0b:0c:ca:f9:90:ee:
         a6:d6:10:e5:d2:e4:b3:9e:5c:ad:4e:ec:ef:0d:42:01:0b:aa:
         a4:f1:a2:c0:f2:80:df:63:ac:6c:9f:6d:eb:c5:00:3d:6c:07:
         91:14:54:e5:75:f3:6b:0d:22:37:10:26:ab:4d:ad:09:93:90:
         d2:61:c6:5f:e5:9f:2a:74:00:fa:81:9f:84:ea:74:07:ad:26:
         f5:55:86:08:2e:2a:16:97:e3:16:07:c4:8a:53:e4:f6:9b:67:
         49:3c:40:a8:ad:1f:64:b1:80:e9:18:32:5a:06:61:68:fe:ac:
         e8:23:5a:ab:41:bd:31:50:10:ba:c6:cd:b6:b1:f3:51:a1:83:
         8c:7d:ff:15:f2:2b:23:87:62:a0:31:82:d8:3a:25:4d:bb:f4:
         c4:33:8f:8e:d2:0b:b7:72:a9:3b:73:44:f3:bf:20:03:51:1d:
         d0:0e:05:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:09:12 2025 by rpki-client