Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbc23896-de06-3c39-806b-499d05c366e6.roa
File:                     bbc23896-de06-3c39-806b-499d05c366e6.roa (raw, json)
Hash identifier:          xlkldDA5AKqhPColSJDHeYzUtgueYFRPKBgK9qIGiDk=
Subject key identifier:   EF:15:D6:40:91:53:72:A3:64:95:BE:7E:88:97:F1:BD:1B:8A:C6:30
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B91A94E8C6282288A8140
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbc23896-de06-3c39-806b-499d05c366e6.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     395973
IP address blocks:        104.134.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:91:a9:4e:8c:62:82:28:8a:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=217aa7bd-053d-4176-9753-0d4712d2238f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7f:a0:3d:34:ee:fe:28:c4:b5:c1:d4:59:b8:
                    3d:e5:67:59:d3:74:1d:6b:e3:8c:2c:87:a8:e4:e2:
                    2d:aa:dc:c2:3b:65:d6:57:8d:2a:78:d5:30:e7:42:
                    6d:24:cb:e1:f5:97:4d:f1:2a:bc:1b:62:5e:c2:0e:
                    15:d8:b6:20:4b:86:80:b5:b2:b9:b3:bd:cc:9f:5a:
                    e5:b5:90:7e:34:c9:e4:2a:49:ca:72:e9:35:5a:07:
                    d6:1f:1c:db:cb:c9:6c:8b:64:04:fa:10:f7:6c:b9:
                    1c:01:14:56:ea:b9:2a:b4:e2:38:2c:f4:af:1e:3e:
                    1b:7c:5b:dc:56:63:70:ce:45:be:24:42:af:cd:51:
                    08:69:31:59:2d:f4:af:30:8b:04:7e:8e:2f:70:24:
                    f3:f3:b5:df:77:b4:a0:fa:8b:f5:11:30:25:0a:d8:
                    41:3c:f6:14:c6:ca:d1:67:b1:8f:69:67:a8:94:cf:
                    ef:2c:c8:c0:59:f1:87:c6:ef:a5:fa:94:92:1a:49:
                    71:0b:cc:11:b7:01:9c:68:86:05:ac:be:7c:13:ab:
                    0a:77:61:18:e1:ed:b1:ac:8b:8f:5c:0d:d7:74:2c:
                    16:c4:66:a0:c2:27:38:da:0d:47:1e:34:bd:1e:ed:
                    fa:b5:be:82:68:77:7c:fa:ca:93:cc:57:9a:cf:9c:
                    3d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:15:D6:40:91:53:72:A3:64:95:BE:7E:88:97:F1:BD:1B:8A:C6:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bbc23896-de06-3c39-806b-499d05c366e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:d1:08:47:e8:d9:00:32:bd:3d:c6:4f:0c:67:9b:bf:61:7d:
         41:97:dc:1e:53:32:63:20:a9:72:48:f9:29:c6:28:20:cb:c6:
         72:26:9a:2f:84:3d:68:58:a0:f3:b5:5f:12:4b:b9:b8:31:9b:
         14:ab:0a:69:eb:31:41:c3:f3:89:51:8e:a0:94:2c:e0:b3:b8:
         6d:8f:5a:ba:3a:6a:36:68:c8:ea:e0:18:37:01:59:7e:93:49:
         c1:dc:a6:0a:2a:e0:04:8f:6b:7a:96:66:ab:91:21:f6:53:39:
         1c:ff:d5:5f:01:d8:ae:0b:c1:eb:37:89:b8:65:23:fc:0e:c4:
         2b:95:29:fe:6e:f6:81:74:40:e0:cd:5e:3d:c2:65:42:b1:8e:
         5e:1f:34:59:17:b6:2d:2b:c4:fb:c3:6c:ad:b5:bd:ac:93:06:
         d5:ea:22:e2:8a:b1:7e:20:ac:57:e5:a9:be:f4:15:79:2e:c0:
         b4:e3:18:22:9b:4c:1b:da:8e:12:c9:ce:e1:4e:56:41:d6:36:
         df:7a:cc:bb:63:23:a3:b2:17:80:ae:c8:e0:e2:eb:6e:14:a5:
         7a:66:0c:5c:29:f0:5f:5c:fd:25:31:05:99:b3:07:a2:3f:8e:
         a5:a6:c7:d5:ec:8c:48:ab:ce:64:78:98:a6:d4:50:78:af:0b:
         3b:23:46:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:10:27 2025 by rpki-client