Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6f8c217c-c32f-315e-9b94-8f131e58af8f.roa
File:                     6f8c217c-c32f-315e-9b94-8f131e58af8f.roa (raw, json)
Hash identifier:          g/Z3ILzLu+kUbOMc79rDpxAEsDKlIiBwCMEO6WWiQ5w=
Subject key identifier:   89:D9:14:3D:78:14:E9:B1:46:83:C3:F5:6C:42:B4:C3:EC:E9:42:4B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B7216038452967B1DCF20
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6f8c217c-c32f-315e-9b94-8f131e58af8f.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     395973
IP address blocks:        104.134.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:72:16:03:84:52:96:7b:1d:cf:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=c3a58a3e-0886-49d0-80c3-8a38964dd6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3f:7a:25:a2:86:4a:60:cf:27:1a:16:2e:ba:
                    c4:71:d3:65:79:ef:88:0a:51:40:70:28:02:df:74:
                    39:c9:60:4a:9a:95:0a:14:ee:5a:73:77:29:22:83:
                    01:10:2d:9b:92:13:ef:f4:da:1a:82:f2:f2:c1:17:
                    2d:a7:35:9e:fe:c8:c8:a5:03:70:4c:cb:b3:59:f6:
                    58:27:05:5d:1b:dd:c7:b1:8e:d5:6a:09:1e:f6:90:
                    43:38:b0:f8:16:7f:74:be:0e:06:6a:d8:12:1f:68:
                    60:b1:e4:6c:2b:1a:55:0e:ec:6a:92:2d:e2:f1:cc:
                    5f:a6:2a:b9:37:b9:ba:e0:a1:27:9d:d1:64:61:fd:
                    d9:ba:3c:c5:0b:b7:4d:69:83:ef:65:ca:ed:11:e5:
                    3c:52:2b:04:7e:a0:d8:8a:04:d2:cc:8a:94:75:65:
                    e2:b9:45:32:68:99:d3:66:ab:d1:67:ac:54:54:f1:
                    ab:52:b0:36:3a:23:dc:97:80:52:b3:65:d2:64:a4:
                    69:5e:a6:d9:73:66:34:cf:6a:2d:4e:27:0e:65:f9:
                    e3:5c:64:1d:35:5a:fb:91:32:6f:cf:98:f0:35:67:
                    2e:b3:0a:e6:1b:17:96:a0:f3:fe:08:7f:ff:82:71:
                    f1:98:5f:ce:38:75:e5:3c:bf:61:ba:5e:92:86:1d:
                    22:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D9:14:3D:78:14:E9:B1:46:83:C3:F5:6C:42:B4:C3:EC:E9:42:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6f8c217c-c32f-315e-9b94-8f131e58af8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:01:18:8c:36:de:9f:7b:aa:46:fb:05:82:c1:3b:63:8f:ca:
         09:bd:88:75:fb:28:a5:5b:df:4e:d5:53:97:90:7c:08:4e:3b:
         bb:ba:47:a3:a5:7d:24:57:77:c7:2d:df:61:5c:3e:4f:6f:8c:
         f9:fd:d7:3c:a1:c4:33:e8:64:67:2a:20:b5:7f:37:1e:2b:50:
         5d:5e:fe:3d:c7:fc:5c:f6:fc:b9:06:9a:fe:8e:91:05:51:72:
         77:a5:e3:04:6d:4d:f4:49:c7:81:e3:a7:20:d2:1c:4e:82:d0:
         3c:86:a4:c4:95:76:1f:3d:15:74:d6:1c:a7:09:a7:76:6e:76:
         90:a2:94:d8:23:df:52:60:8d:4f:69:50:6f:ab:8a:0d:8a:8e:
         95:f9:0e:4e:0c:5b:87:d6:af:07:c6:ab:94:1e:c1:25:c5:f6:
         21:41:e7:fb:e1:3e:f3:dc:e7:5b:bc:2a:aa:65:cf:a3:0b:96:
         99:08:de:0b:38:eb:eb:31:76:59:fa:82:26:65:af:e9:f3:73:
         4c:de:d8:1e:86:3d:08:02:51:2e:c5:56:5f:8d:af:6d:e5:4a:
         93:43:21:d9:bd:98:06:68:31:17:eb:0f:80:f9:ed:15:be:ad:
         9a:b9:d0:6d:4b:22:6e:f1:52:76:33:aa:da:55:2e:b7:2d:26:
         db:73:7f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:12:46 2025 by rpki-client