Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd0f6463-b89d-3e92-8405-a5746d601a6a.roa
File:                     bd0f6463-b89d-3e92-8405-a5746d601a6a.roa (raw, json)
Hash identifier:          efTq58sT5DoJU3M/5H9ThJieDtssmXqvpAz6w6ul/U4=
Subject key identifier:   B0:8C:DF:CC:D2:57:89:7E:8D:04:31:67:8B:89:64:61:16:54:2E:EE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350C3FCC39DB899A1B4B590
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd0f6463-b89d-3e92-8405-a5746d601a6a.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:c3:fc:c3:9d:b8:99:a1:b4:b5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=66a7f92e-9972-410e-a280-539a5f27717e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5a:37:68:f4:b4:76:3a:9f:77:35:12:0d:7d:
                    ba:c1:98:08:e2:2d:25:ab:ed:34:98:5c:cd:19:c2:
                    54:6f:a5:2c:6e:69:b2:29:48:b2:25:2c:cb:95:b5:
                    d9:6e:e9:01:e1:6f:3b:72:38:07:2f:86:2c:74:0e:
                    5a:a1:35:10:a6:c2:26:58:0d:40:dd:97:4a:6c:ab:
                    ff:2d:d5:7d:cc:ba:a9:1c:d9:f3:98:ce:90:ed:56:
                    dc:44:0d:ac:db:75:02:dd:6a:b2:80:ca:a1:69:72:
                    92:07:7d:4b:e9:a6:14:6e:e1:16:26:10:ff:8b:91:
                    25:ba:ac:5d:db:71:3a:ca:bd:57:cb:80:bf:d0:73:
                    3c:45:a1:4b:b7:78:7d:5b:25:2c:45:3b:19:ca:a3:
                    c6:32:f4:d9:d7:7a:6a:cb:2b:7e:48:30:54:f6:3e:
                    27:03:31:e1:7a:b0:3a:e3:cf:09:d2:f7:07:04:0d:
                    b4:1d:22:07:fd:84:29:19:75:26:62:1d:c9:64:52:
                    fe:13:5e:62:21:94:e7:f7:bd:6f:4b:f9:4c:b0:3e:
                    a6:0d:df:84:1f:ae:63:c1:05:de:77:fa:80:0d:19:
                    3f:68:00:72:7d:be:8c:43:ed:f7:90:4f:fd:4f:e8:
                    40:c5:d9:2a:6a:c2:e7:ea:32:9e:2a:3f:66:89:b5:
                    b0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8C:DF:CC:D2:57:89:7E:8D:04:31:67:8B:89:64:61:16:54:2E:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bd0f6463-b89d-3e92-8405-a5746d601a6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d4:f2:17:e7:f9:7a:4c:81:ca:73:aa:eb:29:7d:2c:00:84:
         ce:50:7f:42:97:fd:12:5d:e6:dc:55:fc:99:5e:94:38:67:0b:
         49:a1:de:b1:3e:78:62:39:4b:bb:d0:d4:c2:7f:6b:9b:52:ed:
         fb:08:3a:ee:f5:27:cf:01:b2:4a:7a:5b:80:e0:cf:f1:ef:86:
         6e:04:dc:e9:12:b7:b3:26:04:5b:8d:d3:30:e3:79:5a:7b:36:
         19:66:e2:05:89:d4:e3:21:3e:e7:f8:89:23:83:fe:9d:60:d1:
         ba:fb:ff:1d:3c:b7:43:8b:af:0f:31:6f:0e:44:f2:fd:96:af:
         8a:85:00:8f:4d:28:2e:71:31:a4:d4:5f:0b:2d:48:c5:a3:94:
         42:c4:b5:3a:41:da:0a:90:ce:a4:34:60:7d:80:77:c6:fa:b6:
         86:66:ba:4c:54:f3:52:0d:7b:f9:0a:f8:1f:6e:c5:6d:90:21:
         6b:8e:c7:c1:49:3d:9a:54:73:83:8f:96:b8:62:0c:47:af:19:
         44:17:7a:24:31:2f:b0:8a:52:a1:5e:f0:e9:f7:67:97:72:00:
         f7:b6:6c:7a:31:03:29:3d:48:28:a8:d7:e0:39:6f:00:c2:a5:
         c9:04:b9:06:05:72:2f:4e:08:15:ec:ee:d9:4e:08:da:4f:bc:
         fe:a1:3d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:11:58 2025 by rpki-client