Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/86dff020-27ca-310b-ab6c-15c2deb468c9.roa
File:                     86dff020-27ca-310b-ab6c-15c2deb468c9.roa (raw, json)
Hash identifier:          hNOgotdWELktgmHWsKVCM6DSAChz8MmrJ4/r532UpQM=
Subject key identifier:   6B:DE:24:5A:60:FB:3E:D8:CA:06:3F:5C:BF:1C:B8:70:33:36:8A:E2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350C1F56D0A808F0E5CCC28
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/86dff020-27ca-310b-ab6c-15c2deb468c9.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     395973
IP address blocks:        104.134.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:c1:f5:6d:0a:80:8f:0e:5c:cc:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=b01ee126-13ca-4f0b-a14c-5a0c48a5a50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:63:84:6b:d4:ce:ad:b7:24:06:ed:fb:62:7c:
                    d6:a1:64:6a:3b:02:b2:a4:38:92:86:9e:c8:83:02:
                    d9:e8:08:e3:51:24:a4:fb:97:dd:78:df:9a:1e:f2:
                    59:9d:c8:03:7e:06:07:a1:c3:e2:8c:bd:eb:8a:7c:
                    2f:2e:13:f2:92:4d:0c:b1:1a:14:35:5d:91:ab:86:
                    8f:2d:bb:77:1c:6a:bc:0d:4a:b5:5e:ef:c8:3e:ed:
                    65:8d:a0:47:77:32:3a:bd:09:f2:e8:6e:6e:2c:b1:
                    56:94:b5:65:3d:68:0c:f7:68:16:65:c3:bf:8d:b7:
                    bd:d2:59:8b:5c:97:c5:5f:88:a4:7d:7f:9a:b6:38:
                    15:f1:ba:53:17:aa:d6:f8:00:02:09:de:fd:3f:0d:
                    a3:3b:44:f2:78:04:28:5a:3d:98:3a:d4:c4:4c:48:
                    87:ae:c3:a7:ec:e5:2c:07:3d:4c:37:b6:20:99:43:
                    62:ad:bb:66:d8:ce:5c:53:30:d3:37:e7:50:1d:7c:
                    46:8f:13:42:7a:6c:7f:37:96:72:ed:57:df:5b:b2:
                    23:20:7a:f6:ec:68:cf:a4:20:10:75:44:47:4a:8f:
                    a8:a2:73:22:66:ad:32:e4:d8:ef:f1:b5:58:8f:97:
                    d3:06:80:9b:4a:16:a2:cf:01:21:63:33:28:c3:14:
                    02:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DE:24:5A:60:FB:3E:D8:CA:06:3F:5C:BF:1C:B8:70:33:36:8A:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/86dff020-27ca-310b-ab6c-15c2deb468c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:dd:10:84:31:0b:eb:6b:09:ec:da:69:80:a9:7c:93:fd:72:
         37:65:22:ed:27:a1:c6:bd:7d:16:ab:94:d0:c9:0e:aa:7e:f7:
         47:fe:88:54:fa:d5:34:0b:74:2e:40:5d:14:e6:6f:e0:94:c2:
         92:5d:7f:d0:77:ae:86:7e:d7:8f:b6:1b:65:52:25:3c:7f:50:
         36:b5:3e:7c:4b:e5:e7:34:15:7e:36:b8:f1:a5:c6:e9:50:58:
         94:43:32:3e:22:31:c0:5d:4c:7f:56:46:3c:68:c2:0d:07:f5:
         6a:58:a0:0e:1b:87:96:82:49:4b:86:a4:fd:92:95:a6:02:e5:
         4a:cb:be:d4:f8:f7:38:a3:34:f2:5b:cf:64:a0:f2:32:ad:e9:
         8c:1b:6e:7a:74:7b:99:88:89:10:e4:7d:d2:e3:5e:97:ab:8f:
         ae:ba:13:99:87:6c:90:fc:34:c4:e3:2b:ca:10:43:24:80:88:
         29:e4:46:83:25:12:fe:85:d4:73:ec:ad:dd:5f:e1:b5:28:35:
         a7:d6:a1:e3:cf:58:90:cd:c7:18:9c:0f:df:2b:ab:0f:14:21:
         6d:e6:2f:6a:ac:87:62:22:4e:b1:1c:88:a7:3b:41:ef:c4:50:
         c6:7d:e4:6f:1b:03:d8:2e:11:0f:8b:a4:83:2a:a5:b0:be:cd:
         04:a1:f9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:04:38 2025 by rpki-client