Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/757474c0-a2a7-39e1-8790-73455f880c57.roa
File:                     757474c0-a2a7-39e1-8790-73455f880c57.roa (raw, json)
Hash identifier:          1GgprYeXxVz3hqWfkvsGEAfYccmyDhLxxOk/xwsbMw4=
Subject key identifier:   0B:91:AB:D6:B9:BC:01:6B:E7:70:A0:62:AB:96:C0:0D:27:C3:A8:4D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350AE6A6AF2AE99BE19AE00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/757474c0-a2a7-39e1-8790-73455f880c57.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:ae:6a:6a:f2:ae:99:be:19:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=7d90cb92-bb10-45db-b5cd-e517b463a012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3b:8a:5d:a7:43:2c:14:f9:8e:48:a6:2e:28:
                    09:bf:68:6a:24:0a:fb:58:2e:ab:84:85:af:4e:ad:
                    86:2e:d2:75:2b:60:f0:3b:2d:2c:27:49:4e:49:81:
                    f4:c6:aa:86:f9:1e:2a:54:d9:32:72:e1:2d:d5:90:
                    f9:c2:d6:29:73:50:2f:3c:65:7d:48:9a:77:d6:15:
                    53:56:4d:76:9f:d4:3d:0e:02:a0:85:54:cd:19:d3:
                    5f:76:03:2e:b2:04:7a:6b:44:df:d1:34:d4:68:13:
                    fd:53:c8:fb:d4:ee:d7:20:23:a2:94:05:74:91:55:
                    43:0f:43:59:f8:bc:bc:ba:32:98:63:ea:3f:82:c1:
                    80:e9:c8:20:d2:a5:04:0c:5c:d3:2b:5a:85:1a:70:
                    11:7e:27:28:bc:ec:91:a9:34:0f:ca:32:7c:e1:7c:
                    45:f8:6b:51:d9:f1:0a:a3:f4:a9:18:f7:43:11:26:
                    af:38:1f:54:36:d9:a1:40:ea:2e:cb:3a:d1:a2:8b:
                    42:86:56:16:24:72:eb:bf:ae:9c:8f:6f:ba:ba:e3:
                    8e:38:17:bf:dd:85:b2:49:33:a4:92:3b:55:6e:92:
                    07:97:82:1f:8e:09:76:7f:82:73:b1:fa:44:9e:79:
                    d3:0a:f0:4c:ac:91:36:97:e8:b8:66:1a:41:3e:f6:
                    5d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:91:AB:D6:B9:BC:01:6B:E7:70:A0:62:AB:96:C0:0D:27:C3:A8:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/757474c0-a2a7-39e1-8790-73455f880c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:af:d3:71:54:67:d6:f9:de:51:d4:b2:b3:0a:bb:80:14:eb:
         d0:09:8c:13:fc:98:ce:b4:99:a2:cb:50:11:9c:d0:d6:a2:f7:
         c9:75:d2:52:7e:51:2c:2b:75:4a:36:67:ae:05:24:e2:49:10:
         07:06:a0:75:e3:05:33:64:fd:f0:4e:47:4c:ad:1a:69:a7:40:
         d2:f8:1a:24:7b:5e:45:5f:c6:ec:a0:d0:e1:12:3a:02:0f:ff:
         63:f4:34:b6:d5:97:10:30:be:a5:fb:0f:ed:43:5f:4c:c5:af:
         73:02:5c:ec:14:da:3e:d4:0c:05:0b:58:2b:5f:69:92:4e:48:
         19:d6:75:52:b6:83:0b:b9:1f:e0:68:26:6b:d6:4c:2d:7c:de:
         ec:3c:16:7d:6d:52:46:8c:0e:1e:87:0b:62:f5:56:c1:88:d8:
         7e:ec:5b:3a:08:79:3e:71:c8:36:74:2e:2d:d1:e1:67:38:9e:
         4a:b3:d4:02:97:fc:24:1e:e1:7b:7f:79:53:b1:61:d4:b0:e0:
         f4:3b:88:75:23:11:d8:99:8a:bb:52:e6:14:b8:ce:8c:5f:3c:
         a0:9b:e9:f5:4f:25:85:01:0c:2b:d5:b2:ef:74:fc:e6:dd:b3:
         61:52:d7:d8:76:f2:74:38:aa:1d:59:73:de:f3:e9:3d:75:d3:
         6f:05:d1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:54:25 2025 by rpki-client