Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/afc589e3-c1c9-3fe7-bc5c-aa02ab07d6d2.roa
File:                     afc589e3-c1c9-3fe7-bc5c-aa02ab07d6d2.roa (raw, json)
Hash identifier:          EcFCrt9qzcyoxfl6DKpR1d+mRMMSM2zYO9y+G+jiEUE=
Subject key identifier:   FB:F5:80:5A:3F:6C:9E:14:93:73:5E:BD:F4:68:2F:97:07:71:BF:C4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B9462FF555D0DAA91F200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/afc589e3-c1c9-3fe7-bc5c-aa02ab07d6d2.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:94:62:ff:55:5d:0d:aa:91:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=f820fbe6-59b7-4e98-a419-aa1d1106d0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:34:ef:d9:5a:02:7e:83:a2:02:d8:19:ff:67:
                    62:36:35:4a:26:06:f9:0d:4f:10:82:9d:a7:0a:96:
                    80:96:b7:5d:7b:0c:66:18:e5:d7:53:5e:45:6e:be:
                    07:91:6a:ae:53:c2:61:86:55:60:3a:61:02:24:48:
                    80:2c:5c:2d:d5:a7:b2:d3:f2:3d:95:16:ce:51:07:
                    52:28:03:9b:c4:c8:09:25:eb:d3:2f:f5:e2:89:28:
                    22:85:7f:19:11:e3:f3:71:60:1d:c7:65:b5:e8:87:
                    71:ab:fc:00:18:d6:84:51:32:f8:90:b2:f7:e3:00:
                    88:8a:b6:15:28:57:0c:09:1f:f2:f5:85:d1:7c:f2:
                    1e:d7:ef:e3:f1:c5:3c:99:aa:99:5d:bd:1d:12:03:
                    be:6c:30:83:36:8a:50:7d:e3:41:5b:22:59:c0:47:
                    17:cc:07:4d:c3:81:34:58:62:89:3d:96:da:d7:81:
                    cc:83:65:81:64:9a:ea:b3:08:3b:54:1b:93:ca:71:
                    21:ea:ee:ed:38:b3:61:ad:ea:ea:6c:8c:5b:be:4f:
                    e8:09:03:74:5a:33:2c:72:49:45:b5:f4:9a:e7:9d:
                    f2:54:e0:d0:1e:f1:f9:1c:f0:f0:26:22:6c:08:00:
                    63:42:16:60:d8:24:9c:fc:74:f2:47:5f:54:00:cb:
                    53:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F5:80:5A:3F:6C:9E:14:93:73:5E:BD:F4:68:2F:97:07:71:BF:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/afc589e3-c1c9-3fe7-bc5c-aa02ab07d6d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:4f:28:a0:bf:a4:1a:e8:dc:2f:18:ba:3e:bc:8f:6e:6d:16:
         1b:a3:ef:e9:19:be:cd:ef:3e:0c:bb:aa:01:3f:f5:c5:60:f3:
         5a:15:bd:53:3d:43:86:a5:e8:e6:24:15:ae:7c:d6:9d:b4:df:
         96:90:fe:bc:ba:0b:41:8e:83:62:17:17:37:00:12:47:63:96:
         bf:fe:6f:29:53:c8:b9:81:ed:61:dc:88:08:ae:4a:2d:12:d6:
         b2:4a:89:72:6a:f6:26:cb:9b:1c:f7:ec:19:d0:3f:4e:cd:53:
         ea:57:14:57:32:7b:7a:62:9e:47:d9:2e:d3:0a:07:12:0c:43:
         c3:34:27:b9:e4:49:9c:11:67:7a:97:ec:42:69:83:d4:bc:18:
         b3:2b:94:ac:18:b9:9a:37:64:27:a4:71:f7:d2:b9:60:21:b4:
         b9:b8:61:77:00:c8:8d:31:7e:72:05:9b:0f:0e:73:ea:9e:d6:
         a4:75:2a:8e:b4:17:b6:de:d3:95:d3:37:53:0e:57:1b:dd:ba:
         b2:bd:e9:68:69:cd:6d:94:fa:e6:99:e7:5d:f6:d9:5b:f8:7a:
         0f:8b:e8:df:e4:6d:9e:fb:74:d7:55:73:6e:36:da:56:bd:31:
         44:f7:fa:65:85:61:b0:94:97:f9:9b:36:17:87:25:92:6a:31:
         97:ca:1d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:19:13 2025 by rpki-client