Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7e9185d4-7c76-3a43-8a18-dc2a483f028b.roa
File:                     7e9185d4-7c76-3a43-8a18-dc2a483f028b.roa (raw, json)
Hash identifier:          x+RzbGY50RohSTOJDk9cT+Kj2i5wLX4MonePezTz65Y=
Subject key identifier:   13:90:6D:92:65:AD:72:99:E2:7D:0F:EA:B8:91:E6:22:0F:5A:E1:17
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A70860DC9957AAAD9D42ECD20
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7e9185d4-7c76-3a43-8a18-dc2a483f028b.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     41264
IP address blocks:        104.132.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:0d:c9:95:7a:aa:d9:d4:2e:cd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=0c5fef91-21ff-47b8-af47-e9d1a318a728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bd:51:f0:37:e2:99:74:27:0d:44:33:e7:b7:
                    93:e0:40:06:9b:70:b3:a6:8f:a9:75:4e:a8:62:b0:
                    41:26:fc:e2:c7:6e:fd:35:28:5c:97:d7:81:08:08:
                    35:81:a0:4a:27:e6:a0:86:49:a1:12:19:59:3d:a9:
                    47:d8:52:ed:d7:3c:fd:71:a3:03:95:d2:4b:07:8f:
                    dc:c8:20:26:57:be:4d:73:4f:ca:f9:e5:c3:ef:0c:
                    aa:c8:9c:80:d9:66:72:1e:66:d0:ff:06:ac:b9:b9:
                    d6:01:80:54:3d:f3:ca:80:97:72:4d:91:a4:f1:c7:
                    7d:e0:13:7f:9a:d5:84:4c:9a:1c:b3:c0:34:a4:2a:
                    8a:ce:d4:b3:6d:4a:eb:2e:6d:41:a8:7c:ea:19:6d:
                    6f:99:ff:00:6a:b7:22:59:6d:83:8d:f0:e4:e1:6c:
                    8d:59:9b:aa:7b:d3:d9:18:7d:bd:d8:a9:ae:83:86:
                    bf:88:18:01:ed:2d:b4:fa:a7:b3:b5:0f:af:91:68:
                    31:32:66:d9:ae:9d:16:ec:7f:7b:99:b9:c2:79:49:
                    32:22:d9:e0:8c:a2:33:d3:d0:50:13:0d:39:aa:70:
                    47:f4:31:11:92:83:d2:db:a9:35:fb:81:b7:c7:62:
                    56:0e:75:de:c6:df:f4:70:bc:e8:25:8f:7e:14:05:
                    1d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:90:6D:92:65:AD:72:99:E2:7D:0F:EA:B8:91:E6:22:0F:5A:E1:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7e9185d4-7c76-3a43-8a18-dc2a483f028b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:52:bc:30:98:ca:b9:c6:d3:f7:ce:bc:0f:63:7e:21:e9:74:
         03:83:d8:9d:f8:da:02:c3:ff:cd:5a:5c:8e:99:44:a3:fa:d1:
         db:7a:55:0d:cf:4f:33:54:1b:ce:78:63:d7:7a:77:69:cc:23:
         ee:4d:dd:66:73:ad:a3:50:e3:a5:8e:03:99:ce:8a:24:e3:10:
         f0:62:a8:2a:e9:de:24:7e:7b:ab:a3:a1:fc:b4:39:15:1b:64:
         ab:1f:6e:62:b4:7a:4f:fd:e5:06:ef:38:76:a2:37:af:11:55:
         1c:c6:ad:d9:64:37:7a:0d:63:04:69:1b:d2:02:16:d7:e7:64:
         4b:52:d9:9b:6d:f3:94:91:82:79:64:4f:63:e6:a0:a7:95:a9:
         6a:ae:83:d6:9f:c5:f9:a0:fe:04:62:0e:66:c1:25:16:c2:ab:
         a2:1b:51:dd:8e:c4:b0:88:30:7d:7b:cb:55:6f:cf:73:37:4f:
         af:b9:2b:14:0d:9c:38:1b:60:a5:2c:fc:27:e2:c2:37:18:08:
         4b:7f:bb:63:c7:1f:d9:e0:48:6c:7c:13:34:ee:b3:c8:9e:c3:
         62:1c:ed:eb:99:0a:1f:af:70:90:c4:6f:f4:df:15:17:92:f0:
         97:0b:6d:97:19:c0:4c:39:58:47:b7:7a:cb:5a:2b:09:44:73:
         d6:37:f3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:38 2025 by rpki-client