Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9bf48ac1-703c-3af3-8f05-6803d3f10791.roa
File:                     9bf48ac1-703c-3af3-8f05-6803d3f10791.roa (raw, json)
Hash identifier:          OQlhIz60TkApVnzTuSvenjmNTrVb3aWN5ZzucARQIQs=
Subject key identifier:   6E:FB:27:80:3A:A3:42:40:BD:7E:52:57:98:B1:85:C2:AB:DD:F2:10
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A6DBB707CFE726870D24E6A40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9bf48ac1-703c-3af3-8f05-6803d3f10791.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     41264
IP address blocks:        104.132.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:70:7c:fe:72:68:70:d2:4e:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=e4058231-c5d0-461e-b6e8-fbb3b50a664d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:93:7f:43:1a:b1:b5:90:ab:39:1b:1c:f3:e6:
                    be:a6:ca:1e:d8:42:0f:ae:1a:82:7f:53:42:4c:ae:
                    64:7e:40:f5:37:75:cd:fc:80:d8:51:ca:1a:90:9b:
                    20:c1:90:52:f7:bc:4a:d6:f0:ee:76:31:29:42:70:
                    c1:d0:d5:13:0e:6d:41:d3:b9:44:99:1c:cf:d8:ac:
                    01:15:5c:33:6f:fd:b6:67:3c:01:8f:4b:3b:dc:81:
                    65:10:04:3a:03:30:9c:6e:c5:48:5a:c1:6b:2e:9d:
                    48:35:da:80:62:b0:8e:42:38:82:dc:06:9c:28:2e:
                    0b:d5:f0:ec:7c:07:50:3a:18:a1:87:52:43:4e:42:
                    82:51:bb:0f:0d:46:e8:4f:12:fe:20:e3:f7:6b:5a:
                    c5:80:c3:54:c9:78:71:e3:05:f7:8e:ad:9a:01:0a:
                    8b:00:17:04:b7:4c:4a:f8:3d:4f:03:f3:f9:cc:25:
                    1b:24:83:92:2d:ec:60:b4:8a:a2:1d:5f:ce:d3:b1:
                    36:bb:ea:1e:96:50:8e:41:87:2d:37:e0:3d:f6:d5:
                    ef:03:ba:34:6d:66:c1:40:d9:55:df:b1:a9:bd:c8:
                    90:7d:b9:cb:03:68:99:54:97:46:8d:14:92:9b:ed:
                    04:59:5a:13:7e:5c:25:17:20:72:c2:4b:6d:86:ec:
                    95:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FB:27:80:3A:A3:42:40:BD:7E:52:57:98:B1:85:C2:AB:DD:F2:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9bf48ac1-703c-3af3-8f05-6803d3f10791.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:81:21:7f:68:84:90:15:cf:2c:ac:04:f6:ff:de:81:e9:43:
         c1:54:58:5f:05:95:5d:6f:a9:d2:d5:64:72:1e:e8:cd:d4:c9:
         3c:e2:f1:f1:bc:a5:78:fe:70:7d:b0:ab:74:5c:cc:93:23:3f:
         56:1a:7b:93:1d:d8:07:94:2b:b3:95:f6:e0:36:65:54:5c:66:
         7f:2c:54:1f:49:9d:d3:63:07:85:7c:dc:f4:55:60:7e:0f:c9:
         f5:31:77:ff:81:96:e9:ae:60:e8:11:39:42:e4:54:46:1a:f9:
         62:3b:ef:47:54:df:d2:8d:cf:ac:67:0a:90:27:02:35:91:7c:
         b8:01:d6:fd:c9:43:cc:07:f6:e4:94:56:dd:10:09:03:ee:ee:
         69:4c:6f:65:3a:a1:72:ba:15:11:b9:3d:52:c1:ca:1b:b6:44:
         c2:a7:83:62:a8:68:61:64:f0:5b:23:49:09:21:07:59:3d:29:
         ed:87:21:96:b2:31:27:fd:80:ac:eb:90:36:7b:df:b9:d9:d9:
         0d:82:3e:65:95:f5:4e:ca:7b:99:d5:e2:e0:b4:ea:b5:a8:ca:
         3e:4c:81:93:ab:fd:ed:c0:98:ed:81:f9:eb:3a:f5:20:87:21:
         a8:d4:66:86:2e:8b:95:ae:51:e3:5a:7e:64:73:5a:3b:bd:cf:
         25:f5:a0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:15:42 2025 by rpki-client