Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c2193405-319f-3d20-a5b1-91e0f0779a92.roa
File:                     c2193405-319f-3d20-a5b1-91e0f0779a92.roa (raw, json)
Hash identifier:          GRIWq31uFL5coT4kP3EphiyO/4C+rPztI9L5zaJYW5U=
Subject key identifier:   77:16:69:3E:BF:33:1B:00:76:43:8D:F4:DA:3A:0E:E4:E6:38:5F:4B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A70860E35803EB3EFE9A19F00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c2193405-319f-3d20-a5b1-91e0f0779a92.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     41264
IP address blocks:        104.132.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:0e:35:80:3e:b3:ef:e9:a1:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=bc29e0bc-0271-419d-b29a-0bc5a7588c23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:46:db:81:52:5c:57:a1:5f:26:8b:f7:23:e8:
                    a7:d3:43:87:44:c3:6e:08:60:5e:72:d7:df:b3:9f:
                    f5:21:f3:00:ea:d6:18:02:6f:88:3a:bb:6c:b7:70:
                    22:79:45:74:29:26:49:f7:18:52:05:59:98:b6:2c:
                    0f:f8:4a:2b:20:da:85:7d:fa:14:4d:bc:ec:eb:83:
                    7c:ef:42:4b:64:65:a0:09:85:ad:42:4b:07:b6:4e:
                    d6:45:87:ef:eb:67:4b:ab:95:63:d0:1b:a0:dd:fb:
                    e6:2e:aa:51:47:ad:e7:f7:0f:79:8f:7c:96:95:2b:
                    76:e9:e6:f6:95:ff:84:07:fd:be:dd:72:3c:1b:e2:
                    b4:0d:30:9b:83:7a:9e:c8:3a:33:25:99:ea:36:4b:
                    88:dd:07:f5:18:7c:cc:53:7d:29:60:06:94:c4:38:
                    97:cc:60:62:a3:35:83:a3:f4:80:d6:56:f2:3c:31:
                    cb:d8:19:e8:65:5e:4a:b6:40:cf:31:39:7e:93:31:
                    28:d2:26:dc:2b:52:ab:4d:ae:96:2e:d7:92:12:9f:
                    09:9b:16:1b:a7:4d:7f:bb:c7:9c:e5:f8:7a:e3:d7:
                    ca:5c:fe:e0:5f:4f:f4:55:0d:a6:dc:4a:08:57:17:
                    82:21:bc:69:09:c3:11:2f:fc:fe:90:34:86:5d:77:
                    24:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:16:69:3E:BF:33:1B:00:76:43:8D:F4:DA:3A:0E:E4:E6:38:5F:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c2193405-319f-3d20-a5b1-91e0f0779a92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:34:a8:37:c6:55:d6:ae:46:a8:60:55:40:b5:70:94:8d:c9:
         05:a0:24:73:7b:b1:da:dd:02:50:e4:9c:55:d1:b5:a2:b7:51:
         f3:7a:a1:da:6c:29:db:fb:63:11:35:88:f3:74:93:34:d7:eb:
         00:44:2e:b8:a0:95:30:3a:5c:fc:26:77:cd:32:9a:05:9f:85:
         72:e8:0b:b7:2d:85:59:ea:15:46:c6:d9:f5:4d:bd:fd:47:53:
         92:7b:5f:09:2b:e3:57:3c:e2:09:5a:e0:cb:10:f6:95:91:98:
         88:2f:ee:f4:1d:9d:d1:b0:3f:1f:a8:4d:ab:eb:f3:1c:5e:37:
         71:88:b8:df:ed:6e:13:53:25:11:68:b7:3e:96:ce:c3:37:eb:
         27:d5:32:82:2f:b5:65:3e:20:29:12:ef:e7:82:c5:41:59:c2:
         9a:e9:a3:06:40:bd:56:e8:ec:ca:39:29:1b:b7:95:44:cb:bc:
         b1:2d:e7:41:01:86:a6:b0:4d:59:13:13:54:8b:9c:a6:bc:df:
         5e:41:57:26:76:4e:1f:94:ed:7c:16:1f:b9:80:97:ac:67:e2:
         3a:e7:ac:68:33:61:4e:d4:d1:94:32:cd:4e:6f:3e:17:79:7e:
         9a:bd:b6:a7:e4:d4:41:ba:11:5e:03:2c:ee:1f:5e:bc:5d:99:
         b9:1b:45:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:13:03 2025 by rpki-client