Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfa07786-4d85-30e0-967d-c30014edb829.roa
File:                     dfa07786-4d85-30e0-967d-c30014edb829.roa (raw, json)
Hash identifier:          BT77zPStd0xapcijQrKVFwga3EqxfpnUj6JN/BRDIKU=
Subject key identifier:   02:08:FE:0A:DB:D5:06:52:E3:E3:E3:C6:C2:38:B5:4F:F2:A6:47:39
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B8EA4CFF45A5D09199F00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfa07786-4d85-30e0-967d-c30014edb829.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:8e:a4:cf:f4:5a:5d:09:19:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=9cf88e2e-d37e-4b96-85ec-13d23bc2b5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:dc:70:39:cf:f3:a3:10:e3:5d:da:3c:87:17:
                    9f:b8:15:de:2c:77:bc:9b:4a:35:ce:6c:66:c0:27:
                    f5:03:a6:99:41:5d:e4:2f:d1:0f:bc:23:9c:75:c0:
                    e3:c4:2f:7b:87:73:af:31:90:a0:45:98:a6:e6:58:
                    3b:be:8d:14:db:11:63:ab:07:0e:6c:6e:b6:c3:96:
                    82:ad:c6:d2:26:52:0d:ca:05:2a:85:d7:a0:ea:b1:
                    ad:29:83:95:cb:84:d2:37:64:ab:b4:2a:51:c3:3f:
                    2a:10:1f:f5:f5:c9:95:95:5a:ef:4f:03:e3:9a:51:
                    6d:17:97:90:4a:32:e4:14:29:62:5e:57:28:30:bb:
                    74:f1:fd:a6:3e:b9:84:51:87:7d:34:08:c6:40:55:
                    55:61:94:a1:d8:b8:15:39:74:d0:9e:23:96:d1:08:
                    64:4d:b1:5e:56:13:37:39:14:46:bc:bc:2f:11:ce:
                    e6:eb:01:f2:d8:a1:71:35:c2:83:48:19:8e:fd:65:
                    38:de:59:c5:05:59:1d:be:bb:90:ae:ae:8c:01:7b:
                    8f:e4:71:ab:cc:83:f4:bb:83:e5:93:17:6e:bb:bd:
                    f4:60:6b:4d:b7:a5:0f:f1:ef:5c:21:6c:b9:a9:b9:
                    3a:00:10:05:7a:bf:99:e9:8e:de:d3:b1:18:1b:5d:
                    af:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:08:FE:0A:DB:D5:06:52:E3:E3:E3:C6:C2:38:B5:4F:F2:A6:47:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/dfa07786-4d85-30e0-967d-c30014edb829.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:cd:55:12:71:47:9f:0b:f0:5c:41:aa:7b:b3:01:f7:c8:6a:
         60:99:9c:aa:d7:6f:d1:ba:6d:bd:3a:2b:e1:01:c6:c6:86:f5:
         83:62:93:0f:a3:9e:3a:7e:3f:20:8d:e3:b8:90:2f:e0:53:02:
         44:12:b5:8d:4b:80:d7:67:b0:94:8d:a8:3b:3a:7d:5e:d0:d8:
         5e:b8:d1:2c:eb:ca:ce:07:9d:bf:c1:40:04:db:55:50:d6:dc:
         e6:d9:1a:06:43:dd:48:87:44:18:78:33:8b:6a:6f:41:57:c0:
         70:ce:07:c8:b1:14:c9:66:33:45:f8:56:5c:9a:3e:6a:df:2a:
         30:2d:24:db:c3:d7:22:39:fb:5b:8a:c0:bc:48:87:32:ec:17:
         dd:5c:07:fe:84:09:15:65:0f:70:fd:fb:5b:48:fa:4b:03:19:
         63:84:b8:eb:e6:26:72:97:08:12:34:21:a8:06:64:e9:7a:4d:
         be:0a:d5:9e:66:80:2f:61:84:27:20:47:5d:49:d6:f1:39:99:
         f5:ef:53:5d:fc:cc:12:12:9d:f8:fd:a8:a6:7b:3b:98:2d:7a:
         c4:04:89:a2:3c:b4:f8:2b:0d:36:f9:a3:d0:9d:bd:1e:5c:45:
         37:cd:75:b9:9b:4e:15:84:96:09:1b:88:2f:e9:77:47:00:7e:
         4e:51:11:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:14:19 2025 by rpki-client