Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9009554-e10d-3f67-9b1e-0b89a6446c32.roa
File:                     c9009554-e10d-3f67-9b1e-0b89a6446c32.roa (raw, json)
Hash identifier:          hGMYpqqpBEn5HMDxtuGHdZW1u1BlsHIEKcGmTTK7I/E=
Subject key identifier:   AB:3C:0D:BE:AB:17:97:3A:B3:72:98:91:B2:B3:8F:1B:9D:08:87:79
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A70860F2DCAE6D2D6DE5AB500
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9009554-e10d-3f67-9b1e-0b89a6446c32.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     41264
IP address blocks:        104.132.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:0f:2d:ca:e6:d2:d6:de:5a:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=f9c42f44-eae3-4f88-80f9-c2415dda8209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9a:a3:0d:ed:3c:51:3b:75:be:b3:a5:53:ea:
                    c9:cf:12:56:b8:7b:6d:66:06:51:26:c7:4a:cb:9b:
                    03:38:fb:52:85:3d:fa:e6:d5:c2:ba:15:8f:7b:a6:
                    7a:36:6b:36:58:25:05:25:a9:03:6f:9c:a2:02:41:
                    fc:42:b1:dc:f9:c5:ea:f6:63:53:6c:5e:c9:27:67:
                    35:37:6a:ad:94:bd:8a:1a:a5:d5:d4:06:eb:cd:3e:
                    63:b9:d7:fe:44:8f:e5:58:b7:73:e8:da:f6:82:86:
                    c9:e1:32:57:e7:4d:06:59:e0:ad:6c:72:33:5e:0c:
                    f7:80:6f:70:5d:8f:ce:10:06:8b:72:a3:4b:d5:a2:
                    11:18:86:bf:36:a4:14:0b:76:79:b0:97:0d:f5:67:
                    ac:4c:27:98:60:16:30:2a:e4:d8:3f:bd:82:a2:eb:
                    b9:e6:0b:88:b4:87:94:2f:2c:90:96:be:57:c8:56:
                    98:70:e3:c1:cc:4e:4b:ec:6d:aa:b0:94:ac:7c:00:
                    1e:58:57:ac:31:c0:99:d5:3c:0e:5e:51:f5:d1:f1:
                    72:61:1c:23:9c:ad:41:d7:8e:01:ea:3a:de:a4:3d:
                    b0:1f:eb:59:16:92:2e:56:70:f4:44:2a:2b:99:81:
                    de:00:58:7c:8b:25:a5:52:53:b4:6d:07:24:37:dc:
                    74:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3C:0D:BE:AB:17:97:3A:B3:72:98:91:B2:B3:8F:1B:9D:08:87:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c9009554-e10d-3f67-9b1e-0b89a6446c32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b0:d8:09:b3:30:4e:e9:94:6b:e5:1a:4f:1f:5b:f9:5c:4f:
         a4:cb:4e:da:bb:4c:95:e6:07:9c:01:70:e2:55:92:fd:66:a1:
         93:e9:66:a2:19:21:0c:06:fd:b9:51:76:d7:2d:1e:d6:62:f7:
         ee:b3:53:44:be:2f:44:bf:5e:dd:e5:9f:f6:a8:d2:4d:79:46:
         cb:f4:42:ac:97:e2:86:c7:55:5d:21:3b:50:a9:d4:e0:9b:9a:
         a7:70:57:84:4c:b8:08:29:3f:8d:62:85:0e:e0:ad:3a:9a:bc:
         53:03:96:af:71:4a:98:8d:9e:7f:94:aa:1f:0d:94:cd:70:fc:
         df:a2:dd:3b:64:cd:fd:91:ac:2e:b4:bd:4f:99:1d:db:e6:85:
         a2:76:c1:cd:0f:fd:bc:a5:40:2f:34:62:5d:ed:06:7a:c1:2b:
         fa:2d:2e:14:19:83:61:8b:98:95:f5:f1:12:78:bb:06:dd:bd:
         93:0e:cd:b9:e9:5e:48:c0:64:39:9a:6b:97:94:83:01:cf:2b:
         22:0d:84:dd:0c:fa:55:de:b1:4a:be:03:47:3d:a5:20:e8:87:
         af:85:cb:d2:e0:ac:ce:cb:28:6d:a0:4c:49:8e:0c:12:22:50:
         7d:04:46:5f:fc:5f:72:43:a9:57:b2:ac:86:3a:b8:94:fd:ec:
         39:b0:11:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:15:35 2025 by rpki-client