Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/85e0f795-f714-39ef-9689-ec20f48d1107.roa
File:                     85e0f795-f714-39ef-9689-ec20f48d1107.roa (raw, json)
Hash identifier:          AQ/E467YuCF18+aEZTGTus4iplFPMz7/qqhxOhyKBcY=
Subject key identifier:   01:13:78:C7:E7:5F:8C:7D:2C:B6:42:DD:80:ED:E1:58:13:4F:69:93
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B79FB019D0D481180EF00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/85e0f795-f714-39ef-9689-ec20f48d1107.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     395973
IP address blocks:        104.134.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:79:fb:01:9d:0d:48:11:80:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=2153c46d-b674-4bc3-ab59-71835810cb15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:9b:5f:b1:76:bf:89:41:5d:9f:c2:8f:4c:
                    fb:55:7e:8c:17:80:37:af:5c:3e:5b:aa:04:07:b8:
                    26:44:fa:b7:0b:7d:d1:0b:b9:9d:81:98:b6:61:d8:
                    0c:b2:c7:a2:ff:f2:c2:63:ad:08:bd:a3:7a:ed:8e:
                    07:1b:fe:fd:97:b4:f9:13:3b:49:49:9b:7b:82:8c:
                    57:96:c0:9d:de:07:d9:db:43:c4:f6:2c:7f:b3:57:
                    de:1b:f5:6f:3f:18:c0:ae:77:11:8b:5b:db:6b:77:
                    05:c0:56:91:7c:59:be:77:db:41:85:57:7e:49:cb:
                    e0:af:fc:be:9b:74:16:03:26:cd:0b:c8:a4:96:0e:
                    33:1c:fb:9a:94:26:94:54:02:2e:95:bb:34:06:eb:
                    32:b5:f5:84:03:3e:ff:36:a3:4c:0f:ce:02:4d:45:
                    7c:ab:38:d9:39:b7:28:9e:71:e0:a6:1a:75:d9:b5:
                    4b:77:11:f2:bd:46:c3:f8:6d:60:b0:7c:b5:7f:ce:
                    73:e4:c9:42:31:aa:9f:7f:6a:cb:32:d2:1d:22:10:
                    6c:9a:9c:69:3a:10:13:c4:32:23:6b:52:bd:31:67:
                    bf:be:25:3e:03:e3:11:3c:bc:76:bb:45:8f:49:25:
                    ef:85:11:e9:1d:2a:03:87:c4:8f:47:bf:9f:88:5f:
                    8c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:13:78:C7:E7:5F:8C:7D:2C:B6:42:DD:80:ED:E1:58:13:4F:69:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/85e0f795-f714-39ef-9689-ec20f48d1107.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:27:9a:bf:70:94:db:bf:c2:4e:3a:3c:30:ad:9e:d6:aa:ca:
         53:a7:1e:6f:9c:a8:92:ad:1d:e0:c6:ce:4b:cd:78:a2:3d:7a:
         19:7b:f5:e7:46:48:cb:1a:33:07:e9:3a:10:46:c7:e7:c7:52:
         d2:34:db:54:d8:59:f3:bf:9d:be:6a:ae:8f:a5:5a:98:ec:90:
         3d:d0:01:09:2d:83:3a:a9:97:b8:44:a9:11:bf:56:8a:bb:88:
         74:48:a7:22:82:49:6f:ad:3d:e0:1e:1d:e5:49:89:61:03:d0:
         81:71:db:69:45:11:76:b9:6b:8a:3a:e3:b4:10:4d:e6:be:66:
         d2:c8:a3:e5:e2:c3:19:26:e5:05:d1:82:0d:2c:62:e2:a7:ac:
         64:dd:d8:1e:45:9d:62:7d:09:52:6c:d4:7c:15:35:a6:ca:ed:
         96:b1:d9:51:69:1f:4b:42:87:2a:6b:da:27:cb:83:8a:e5:67:
         34:cd:82:1a:84:86:ee:18:39:0e:16:c4:c2:80:55:5c:91:66:
         c3:6c:5b:40:40:a1:82:9c:2e:fa:ea:e5:ad:70:bf:21:e7:c9:
         28:d9:25:12:73:11:40:e6:86:e7:64:e3:43:91:3a:94:84:b0:
         9e:cb:23:16:58:ab:cc:8e:2a:e0:22:88:8a:63:54:e7:f9:1f:
         04:4e:b3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:55:10 2025 by rpki-client