Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/651378cb-418c-34cd-8b5e-20ab9dfbc12e.roa
File:                     651378cb-418c-34cd-8b5e-20ab9dfbc12e.roa (raw, json)
Hash identifier:          kVlk5DAMo4vlNBeXN8LPRpFi0Gpsk3ds0nK0otgp6vc=
Subject key identifier:   26:8D:1A:0B:4D:17:9A:9C:A3:B5:79:AD:EB:34:C9:A7:FB:97:8C:B6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A6DBB52F07E17CC331E503C00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/651378cb-418c-34cd-8b5e-20ab9dfbc12e.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     41264
IP address blocks:        104.132.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:52:f0:7e:17:cc:33:1e:50:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=7ee648ad-5bc6-43aa-837a-84be955dc888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a6:f1:b6:24:6e:9e:a7:a1:06:b4:cc:57:e8:
                    30:d5:d2:d8:b0:b5:e2:28:44:7e:ab:31:99:6f:79:
                    21:e6:1a:4f:b1:a0:96:f2:08:cc:8a:6c:fb:a9:58:
                    08:0a:1b:4e:96:0a:70:d6:84:a6:f7:24:34:c6:09:
                    b6:ca:5b:cd:4f:98:4a:f3:70:24:b8:3b:86:e7:91:
                    2a:e1:21:44:4a:d3:95:67:53:d8:fa:b0:f8:a9:98:
                    d8:da:ed:b4:08:60:23:a2:1e:65:11:5f:ea:f6:81:
                    ee:f0:f2:a3:37:64:a9:f8:ed:5b:9e:56:b8:16:c9:
                    01:61:63:85:4f:8a:4e:8d:92:60:e5:9b:27:4d:aa:
                    00:17:ac:f4:73:aa:5c:6e:47:8d:86:e0:e8:19:60:
                    18:4b:8b:62:36:3d:54:eb:c6:ae:1d:6d:5f:b4:92:
                    ab:60:a0:92:01:1a:ef:17:c2:1b:78:dd:4d:59:40:
                    5c:ef:26:3d:ff:0f:ef:7b:60:f1:ad:b9:be:ef:d0:
                    55:4a:57:02:0e:26:c6:91:3f:56:73:7f:17:19:4a:
                    ce:47:7e:e7:f3:94:d7:bd:95:f8:8d:37:23:ac:52:
                    fc:86:89:8a:8e:e9:16:6b:65:90:ac:5a:d8:20:2a:
                    fc:c4:1d:8d:f3:9b:79:5a:2c:72:e7:eb:30:05:a2:
                    13:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8D:1A:0B:4D:17:9A:9C:A3:B5:79:AD:EB:34:C9:A7:FB:97:8C:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/651378cb-418c-34cd-8b5e-20ab9dfbc12e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:96:10:54:61:16:52:43:fb:fa:b7:17:2e:c5:0b:45:62:c7:
         68:28:f9:43:14:f7:b8:7a:ea:48:f3:12:8b:97:81:d3:d7:0f:
         a2:d7:7f:30:92:8d:c9:d0:2d:b8:8b:08:eb:4e:25:1e:38:ea:
         36:ba:18:fe:f8:1e:87:51:0c:69:24:96:b3:f8:d1:c9:6b:aa:
         cb:52:a3:8a:d5:85:c0:1d:13:6f:61:ff:84:21:49:96:e0:2b:
         d7:01:a1:76:10:1e:88:7d:1d:6f:37:41:5b:67:74:b6:14:15:
         fb:f6:26:89:e6:3b:4d:b5:e3:d6:94:d8:4d:2a:da:e5:2d:81:
         13:dc:79:7a:1a:ad:fe:db:a5:b0:02:dd:1e:59:d5:41:84:d6:
         28:01:b2:6f:e2:d7:32:a6:ba:c4:83:1b:92:81:5a:5b:a5:aa:
         64:24:89:fc:ae:ec:d0:2e:ba:2f:0b:d5:a0:86:d7:27:4c:dc:
         84:42:94:84:96:9d:db:e4:0d:e1:27:02:6b:b8:0e:50:e0:2a:
         d9:f5:05:d2:2d:dc:83:d4:ae:19:d6:a4:2a:6b:2d:2f:27:d2:
         0b:4e:e1:a6:32:1a:e2:ac:2d:47:6d:41:4a:f0:3d:e9:50:3e:
         bb:34:cf:e8:ac:90:66:c1:8b:15:1b:61:f7:dc:d6:7b:7c:e1:
         16:5f:7d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:09:13 2025 by rpki-client