Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8d3d99d-2a4f-3135-9688-b435c171d84d.roa
File:                     c8d3d99d-2a4f-3135-9688-b435c171d84d.roa (raw, json)
Hash identifier:          g9F9NF4HRo4UaB76iQtsYnYOhgbN8ZcrdHQsPw4YsYM=
Subject key identifier:   85:43:B5:BC:16:82:AC:00:2E:DC:5A:97:59:7B:E5:46:63:DC:AD:27
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B6EB929C821863E1A5F00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8d3d99d-2a4f-3135-9688-b435c171d84d.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:6e:b9:29:c8:21:86:3e:1a:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=d9d46388-909b-4aed-9427-eba78f7500cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2c:47:dc:ef:8d:33:69:a1:bd:bc:e5:ce:80:
                    fc:ce:4c:80:28:ba:ad:f2:89:39:ed:00:f3:98:59:
                    11:95:c3:9d:91:26:d3:f2:ef:73:cb:cf:9c:8b:74:
                    63:29:f5:94:eb:98:d1:0b:94:e5:2a:d0:6a:1f:17:
                    dc:75:9e:b0:f6:c4:15:74:14:76:36:46:e2:2c:f9:
                    42:8a:76:39:c1:8d:f6:76:de:db:92:0c:dc:84:f7:
                    4d:4e:c4:be:70:68:11:4b:49:36:b7:34:ec:68:58:
                    f1:bc:55:18:0c:bc:7d:12:19:ac:f2:b8:78:33:f2:
                    ca:16:3c:43:fc:fa:14:15:12:82:3b:34:20:af:7b:
                    f0:35:de:24:3c:52:a9:ad:66:a4:0d:99:2e:8f:68:
                    a9:e9:ae:eb:3a:8c:f3:cc:73:f6:35:21:e4:e1:d6:
                    3b:36:85:e3:b9:81:5e:ed:ad:c5:b3:3d:34:70:c2:
                    5b:f0:2a:d1:59:99:e1:86:50:ef:59:be:0d:34:42:
                    18:e9:96:67:6e:ea:20:b5:e1:a7:6b:95:40:1a:99:
                    90:9f:ef:6b:95:d2:53:be:c8:11:ba:97:bc:6d:7f:
                    ae:3a:22:99:b7:36:84:2b:cd:b9:f2:47:ed:65:e8:
                    ff:d3:dd:9a:b6:51:0e:6c:37:1a:bc:6a:1e:d5:90:
                    65:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:43:B5:BC:16:82:AC:00:2E:DC:5A:97:59:7B:E5:46:63:DC:AD:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8d3d99d-2a4f-3135-9688-b435c171d84d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d7:16:4b:99:28:0a:99:60:08:67:fe:b1:a2:7a:30:79:5b:
         20:d2:92:96:33:57:71:e7:ed:2e:23:4f:1d:4e:b3:0e:3e:f8:
         13:b6:b4:cf:55:8e:08:73:2f:c6:ab:40:f9:b2:b0:c2:74:6a:
         85:a2:17:a7:77:1a:87:88:7e:f2:1d:05:ac:4f:28:d6:74:ee:
         05:e7:b8:3e:f1:35:63:56:7b:23:89:a4:12:6f:75:07:97:f2:
         e3:4c:da:36:e8:8e:c0:65:e8:1c:83:74:d8:5a:53:9b:85:62:
         f5:78:93:08:92:7e:b1:2b:88:00:97:19:e7:be:84:bd:52:bf:
         88:2d:63:af:d9:36:5e:ae:f5:92:a1:b2:7f:ed:74:1f:44:a7:
         55:21:8e:75:15:01:15:30:89:ed:6b:71:55:85:c9:47:20:57:
         68:fd:67:c1:21:4b:c6:77:b0:9f:17:31:d7:d5:db:47:ab:43:
         e3:14:df:c3:c2:ad:bd:e9:13:dd:7c:41:c7:83:b3:b6:5f:82:
         3a:bf:57:78:39:91:a3:d4:1b:8f:59:81:b5:bc:62:c1:df:5c:
         29:84:f9:e9:2b:6c:9b:a2:95:79:71:4f:8f:af:5b:08:b9:b7:
         c5:76:e5:84:ca:dd:a3:ea:89:74:10:95:63:36:7f:f4:3a:25:
         e4:51:b0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:21:28 2025 by rpki-client