Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79bde90e-377c-3fd8-9173-8b73b176fc69.roa
File:                     79bde90e-377c-3fd8-9173-8b73b176fc69.roa (raw, json)
Hash identifier:          Qk4MUwqPpC/SSVhvvc6Fv0IPZ+ql+Rxe39qBRCSZls4=
Subject key identifier:   70:5E:55:06:C1:16:51:F0:B7:42:02:A4:AD:33:1A:2D:F6:7A:C1:5A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350AF48ABEF4622AB9D5880
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79bde90e-377c-3fd8-9173-8b73b176fc69.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:af:48:ab:ef:46:22:ab:9d:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=136378b0-9492-49e9-b982-991048c2c1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:72:75:e5:8f:18:c9:dd:21:3c:9d:d8:7b:f5:
                    c8:b4:2d:fd:62:85:07:e0:15:e4:c7:ca:6f:bd:e2:
                    fb:25:14:20:39:97:f2:62:35:d0:b7:13:6a:0d:bf:
                    fc:24:67:69:c5:3c:de:f1:d5:21:88:83:c3:c0:45:
                    78:bf:9a:fa:5e:be:5b:c8:22:cc:df:53:23:5c:f4:
                    aa:bc:b7:8c:28:22:32:8f:32:c5:dc:c4:8b:fd:09:
                    af:9a:30:3e:86:de:9e:68:ec:73:9c:4d:ee:08:29:
                    8f:28:1f:fe:8b:26:96:bf:08:e3:d1:64:ae:ee:6f:
                    7c:dc:11:be:49:1f:e7:60:76:d4:d8:7d:55:cf:bf:
                    92:06:68:94:cf:3b:35:d5:6c:06:88:f8:3e:21:ab:
                    be:01:8f:75:83:4d:6b:2a:a3:ea:c5:8f:01:e4:d4:
                    7d:6c:81:50:1c:c3:0b:a5:80:15:3a:06:56:e8:6c:
                    08:67:b9:8e:8a:75:43:fe:d9:a0:84:7e:26:21:4c:
                    77:cc:6c:4f:19:62:ed:2c:27:c7:7a:65:13:56:c9:
                    07:2b:48:1b:9c:a9:b2:84:51:47:b7:6b:a9:3b:26:
                    1a:b7:11:06:15:ef:31:b5:7b:e4:ce:81:2e:e7:53:
                    0b:26:06:ac:71:0b:0d:72:53:67:60:9c:b7:af:82:
                    66:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5E:55:06:C1:16:51:F0:B7:42:02:A4:AD:33:1A:2D:F6:7A:C1:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/79bde90e-377c-3fd8-9173-8b73b176fc69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:4d:63:e2:63:30:04:5d:f7:b8:31:77:37:5b:f5:2f:01:5f:
         53:0b:b4:62:76:f1:67:70:e5:29:40:8a:8d:b8:77:ea:d0:a3:
         52:65:6b:e8:ca:0d:f2:06:99:42:c6:26:01:04:fc:86:d9:c4:
         ba:43:34:41:ea:e1:84:d7:f0:0f:2b:c2:18:4a:07:9e:fa:e6:
         0b:a7:ce:1c:d2:68:1b:dc:12:66:0f:71:74:97:a8:eb:ad:1d:
         01:13:3b:56:d6:d5:0b:4b:b5:62:77:49:65:22:8a:ef:11:18:
         a5:ab:57:fa:d4:8c:e6:bc:ef:2a:30:24:81:25:c7:84:8a:d7:
         c2:ec:2c:eb:5a:2b:0e:1f:a8:b9:d8:ee:53:d1:6b:41:36:28:
         a5:11:41:bd:d8:fe:05:3f:38:91:0e:24:08:8a:54:c7:cd:27:
         54:38:e2:8e:94:13:fc:e2:b0:f7:54:a3:26:ea:5e:75:93:da:
         66:92:07:5b:84:ca:13:1b:62:1f:8d:7c:6c:76:0e:3f:8d:4b:
         28:b8:31:78:9f:e9:ce:94:60:93:78:79:f3:e0:a9:7a:97:fc:
         1a:58:17:f8:7e:57:92:6b:73:83:13:1c:b1:f7:2f:2c:75:ba:
         1c:9b:be:19:03:75:c3:b8:e9:91:4e:24:45:09:84:6e:b1:7b:
         43:99:4b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:49 2025 by rpki-client