Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/83c450cc-3e54-3c73-98a9-5550187b1d91.roa
File:                     83c450cc-3e54-3c73-98a9-5550187b1d91.roa (raw, json)
Hash identifier:          Sqkctp+lGS3QojTAp8f8IeNXr7S7nZr8kFESwL+kRgE=
Subject key identifier:   55:3D:CF:93:D4:40:AD:3F:8B:5E:0E:14:0C:88:91:D5:64:95:6C:99
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A6DBB546D9A9203288416F240
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/83c450cc-3e54-3c73-98a9-5550187b1d91.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     41264
IP address blocks:        104.132.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:54:6d:9a:92:03:28:84:16:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=91b15f09-919b-40e8-a57d-332f600cc05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c9:10:68:f9:27:a4:ed:34:36:d1:1f:57:ab:
                    95:49:04:33:79:b3:0a:6e:cd:8e:a4:3e:b9:f1:a8:
                    8b:6b:01:0e:05:63:c6:af:c8:b7:0a:86:ba:e3:01:
                    ad:d9:d5:63:89:e7:6a:ee:e6:3e:b9:22:4a:3b:74:
                    fd:ff:02:14:b6:af:97:37:dc:b0:8e:f9:e4:fc:72:
                    51:73:e6:5d:a9:a1:14:00:49:73:f3:11:65:4a:48:
                    9f:96:4e:99:02:65:18:ea:05:28:33:93:e6:5d:df:
                    6e:fe:90:58:c7:58:15:e7:fe:d2:7d:ce:2f:c0:40:
                    05:47:1a:e5:ad:01:55:97:28:cc:fc:b7:a2:2b:77:
                    ce:04:77:42:8e:36:36:fb:0c:df:60:72:cb:4a:9f:
                    cc:d4:2a:31:da:0b:7d:12:ac:80:41:35:bf:a8:38:
                    6b:68:68:15:10:05:86:af:54:24:78:93:f0:75:9b:
                    18:cf:b4:48:dc:72:dd:bc:bf:59:19:c3:a2:00:73:
                    4e:e9:eb:d2:3e:7d:39:7b:47:b8:10:fe:c3:39:32:
                    7f:26:93:7c:00:ed:5f:f2:0e:4c:cc:f6:a0:a9:56:
                    1c:b1:c2:7e:7b:45:af:d7:1e:cd:d8:a1:c5:02:bb:
                    d9:5f:34:1f:b5:87:db:91:ca:cb:49:d5:0d:e2:3b:
                    74:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3D:CF:93:D4:40:AD:3F:8B:5E:0E:14:0C:88:91:D5:64:95:6C:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/83c450cc-3e54-3c73-98a9-5550187b1d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:94:53:3d:71:42:7b:64:41:f2:0b:34:d9:79:00:50:6e:4c:
         ee:5b:60:e9:69:16:8f:a5:a3:2e:d8:7a:7a:89:ca:ac:9a:95:
         9a:04:a5:0a:a4:df:62:4f:31:fd:a4:95:48:81:dc:c4:20:a6:
         39:c9:01:bc:ba:fa:c6:38:22:7f:54:6c:fb:cf:fe:d1:8f:63:
         2a:d0:a6:9a:a9:cb:94:0a:29:c4:6a:73:9c:87:1e:d7:8a:97:
         fc:64:c0:a2:8b:45:c6:cb:64:2d:13:81:3f:5b:e2:53:8f:58:
         1d:5a:14:ea:12:ba:2a:9c:2f:06:4f:e8:52:42:d9:90:ec:43:
         79:94:64:15:3e:89:5d:12:74:bb:b2:23:eb:0d:4d:3b:f3:70:
         2e:8f:65:23:66:fa:89:3c:f4:f0:67:c3:49:92:58:4e:6b:2e:
         59:4b:8a:92:89:12:a1:16:20:e0:af:14:89:49:96:b7:60:86:
         53:5e:26:62:dc:d5:94:a7:39:2c:c0:16:8f:dd:de:09:06:0c:
         c5:c2:37:f1:b1:0e:04:51:93:75:b9:78:de:25:58:d3:86:6c:
         29:96:1b:17:3d:d1:97:90:15:84:16:ec:b3:d3:fd:9c:be:52:
         82:c3:34:b8:34:39:09:d0:2f:5f:0f:3b:ad:84:0f:12:f5:0c:
         a8:d6:f9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:28:49 2025 by rpki-client