Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e07177a9-71d7-395b-bc4f-94f805c43e1a.roa
File:                     e07177a9-71d7-395b-bc4f-94f805c43e1a.roa (raw, json)
Hash identifier:          dEMFLU8YieAACkcnYQ9P0/3abydqC/fwn5rTfak5hHg=
Subject key identifier:   72:70:BB:E2:EC:89:2E:8C:ED:7A:51:D7:03:6A:8F:9B:61:7B:78:E6
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B73A0247D81BE0A582600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e07177a9-71d7-395b-bc4f-94f805c43e1a.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36411
IP address blocks:        104.135.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:73:a0:24:7d:81:be:0a:58:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=16e2c42d-cb07-4538-9927-690220c3cc25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c1:54:4a:0c:5c:94:ad:2c:35:b5:94:c2:99:
                    28:99:4c:7c:14:6c:a5:9b:b6:ee:ed:37:53:f9:9d:
                    0c:15:d9:ec:b3:7c:9e:90:e5:b2:b8:0f:56:ab:90:
                    83:a6:9a:dd:8e:91:3d:fd:b1:ea:db:55:c0:8d:ef:
                    dd:0f:6b:f2:70:ca:68:b2:5e:a5:d0:0b:c7:8d:c2:
                    9b:e5:e7:c7:a6:c1:05:95:33:a9:32:86:75:98:cd:
                    fe:84:0f:18:51:9c:ce:31:42:1c:b6:88:25:dd:3b:
                    0f:dd:18:17:6d:2d:03:34:99:49:19:ad:ad:8d:84:
                    da:6e:ee:80:45:c6:66:c1:75:a6:77:50:0f:eb:aa:
                    79:ec:a0:13:27:40:fc:4f:d8:3a:33:10:c8:4e:d8:
                    cb:8e:2a:88:63:33:d9:5f:61:23:3d:4e:68:d7:9e:
                    23:62:83:c2:0d:e0:66:2f:6f:9e:58:d4:48:aa:9f:
                    c1:bc:d7:9d:66:c1:46:a6:bf:33:d8:11:cf:a8:0c:
                    87:78:dd:92:cf:fd:11:03:41:a6:2b:ce:07:e0:9e:
                    05:cc:16:56:5b:00:20:9a:cc:dd:17:d0:ca:28:30:
                    38:12:ea:26:b0:33:09:a3:ef:dd:cf:ff:9d:39:80:
                    7d:56:44:32:2e:b6:ed:e8:af:e9:6b:fc:97:35:c9:
                    3e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:70:BB:E2:EC:89:2E:8C:ED:7A:51:D7:03:6A:8F:9B:61:7B:78:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e07177a9-71d7-395b-bc4f-94f805c43e1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:64:67:89:73:12:fb:3b:c1:a4:f3:4e:92:50:21:1d:d4:68:
         e8:24:6a:9b:73:52:b5:c8:d5:16:c9:28:04:bf:75:3c:07:16:
         07:77:79:3a:c8:4e:09:f7:29:05:4b:06:0f:bb:9d:8c:22:c1:
         90:03:a0:8b:48:f2:18:0e:f6:82:c5:5e:61:64:1e:65:a2:8a:
         c6:4c:4c:c2:b7:e4:f1:c4:33:0c:da:01:0e:dc:a2:8f:f3:19:
         a4:6a:90:ae:91:37:42:6c:84:d5:4a:2d:c4:8d:46:0c:0a:3a:
         ce:ea:85:70:31:81:9e:b2:d5:2e:f4:a9:b2:2a:36:55:51:fe:
         b6:6f:a5:73:ac:c0:7b:3c:b8:95:2c:52:35:7b:94:74:b2:57:
         19:cc:2a:08:6d:10:2b:d7:6f:ce:df:ab:22:82:c2:6a:e5:f8:
         88:83:03:a6:1d:bf:5f:24:96:aa:75:34:b8:e0:4d:36:60:c4:
         5a:f1:a8:e7:22:85:00:b5:15:69:ea:ac:23:19:69:fb:9c:3d:
         bf:7e:7d:a7:a1:a2:55:b8:48:fb:6d:17:ee:14:9d:db:ce:43:
         bd:5e:ac:e8:f1:2e:45:0e:fb:b5:90:0b:3c:de:f0:b1:fa:de:
         dd:24:63:2a:d1:89:8b:53:fa:6b:e0:dc:88:87:b8:02:e9:df:
         cc:be:56:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:09:08 2025 by rpki-client