Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/950d1e58-7e2f-3c3a-94fc-602dd6903988.roa
File:                     950d1e58-7e2f-3c3a-94fc-602dd6903988.roa (raw, json)
Hash identifier:          mar1fakBpCdU5r3b4gwdnPk1E1imZyEWhmNbF3pmmf0=
Subject key identifier:   D2:0E:79:E5:D8:DC:02:5A:59:1F:A5:97:DA:63:3A:EE:18:7C:49:17
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B6F00C076D935D0273900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/950d1e58-7e2f-3c3a-94fc-602dd6903988.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:6f:00:c0:76:d9:35:d0:27:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=32b57ea8-dcee-4e68-b7cc-e72026c466f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:e8:be:71:90:94:7d:cc:24:f7:ed:8d:8d:
                    9e:1b:25:37:9d:ff:b6:3c:b4:e8:b2:38:73:33:dc:
                    d5:a3:14:23:f7:fb:a1:5c:01:bb:78:19:74:c8:66:
                    b8:73:c9:06:05:d1:35:8c:10:96:6c:21:3c:47:18:
                    6a:8d:70:88:22:a6:d3:67:26:26:a1:e3:35:ec:9c:
                    7f:45:de:f6:b8:38:33:43:11:ba:c3:d0:2e:22:6f:
                    8f:a6:ad:94:91:1d:9c:1b:36:b5:43:3c:e9:07:4a:
                    69:df:7d:3a:94:61:06:1e:bf:35:b3:2b:5d:88:e1:
                    48:46:c8:90:f0:16:d2:80:c5:d9:36:90:57:18:19:
                    a8:8e:ff:88:62:7d:17:15:ba:61:bf:35:2b:e2:ce:
                    37:ad:17:ef:bd:8f:60:c1:5b:22:83:52:d7:a3:86:
                    92:e7:32:21:05:78:02:f2:07:33:4b:74:e2:60:e6:
                    b6:5c:f3:97:b6:11:41:af:d8:09:87:67:33:76:77:
                    54:06:96:44:c9:be:85:15:1b:69:ae:15:98:26:95:
                    b0:5e:c7:23:ac:f7:44:da:96:70:85:06:b3:00:53:
                    1e:19:79:e5:ae:4b:a6:7c:f5:a8:30:30:54:46:be:
                    95:77:d1:7a:c8:cb:40:44:c4:21:3c:6f:1e:15:e6:
                    91:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0E:79:E5:D8:DC:02:5A:59:1F:A5:97:DA:63:3A:EE:18:7C:49:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/950d1e58-7e2f-3c3a-94fc-602dd6903988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:68:f3:73:86:07:0b:46:e2:d6:54:9d:1e:8e:27:32:b1:7e:
         70:d3:0e:36:a4:fc:bd:cf:c3:f5:6a:75:ec:88:76:0e:aa:7c:
         15:11:22:97:c3:42:21:1f:8e:b0:b9:c0:82:32:b1:1f:ca:c5:
         86:a7:e9:5e:48:f2:34:11:4e:98:89:d8:c2:3f:aa:95:94:41:
         5f:b1:91:f0:08:88:85:df:a1:6a:98:cd:c9:ff:8f:54:44:14:
         88:09:2b:d5:26:34:79:b1:40:f5:f1:3a:b6:a3:2e:61:e2:20:
         d7:26:15:2f:2d:71:05:e9:58:64:28:27:85:b9:f7:9c:cb:bb:
         3f:f5:52:fd:4f:a6:7e:54:ad:93:c0:15:76:21:34:86:b9:4e:
         65:a9:d1:9c:7c:82:b7:49:b4:94:68:1a:14:fd:45:49:8f:47:
         c8:45:2f:f9:df:d2:a0:b4:8b:b4:0e:27:12:e0:bc:81:80:bf:
         12:6d:50:2e:52:77:41:87:a1:ae:db:79:6d:5c:a9:d7:b7:9a:
         c1:7b:8c:28:c9:4a:2e:aa:a0:bf:b8:61:09:cb:00:61:63:15:
         dd:e1:78:93:f3:13:c3:e4:83:b2:41:f7:c5:46:25:44:1e:48:
         92:28:e8:5f:a4:dc:63:8c:13:66:c9:c1:1a:a3:8e:8e:a8:80:
         c3:22:90:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:21:06 2025 by rpki-client