Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecaabea1-e500-3e96-9c46-0dc0b9fe97e0.roa
File:                     ecaabea1-e500-3e96-9c46-0dc0b9fe97e0.roa (raw, json)
Hash identifier:          gcG1D1r11TsOSTd0D/yQpwQO/0wsR4Lufz6NYGdWOvM=
Subject key identifier:   D2:FA:23:56:62:49:3A:24:11:E8:C6:9D:5A:CD:1B:26:D5:63:2F:01
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350B36451466B820407C1B0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecaabea1-e500-3e96-9c46-0dc0b9fe97e0.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b3:64:51:46:6b:82:04:07:c1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=dd975b4b-3edb-4a7a-ad25-45bdbfca6b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:01:26:41:4c:51:d2:b8:e5:32:3d:d1:db:81:
                    85:1f:b8:91:08:7d:f6:ac:f7:d7:6e:ef:35:83:13:
                    bb:12:9e:e8:95:30:9e:da:e0:f5:72:3a:ef:47:bc:
                    51:26:b7:88:38:a7:28:28:ed:08:ed:46:e0:0e:d0:
                    3f:fb:99:77:72:dc:10:3a:69:e8:c7:37:2e:bc:e2:
                    99:ed:7c:c2:4f:99:87:0d:c0:39:af:2d:b9:fa:b1:
                    df:2f:b2:89:36:f9:f2:f3:f5:4c:a2:e3:75:3e:b0:
                    c0:36:f0:6d:3e:0d:5d:0f:e9:0e:f2:7e:ee:af:fd:
                    c7:48:f6:f3:ad:6b:ec:64:25:f5:2a:3a:44:4f:43:
                    88:43:60:fc:b9:cb:02:66:5b:55:2b:4a:72:68:10:
                    d1:11:5f:85:cb:e1:f2:3e:37:4d:78:c6:0d:df:e9:
                    73:7b:49:2f:b9:4b:ae:82:d6:f9:18:8d:fd:46:f2:
                    70:1d:42:04:71:e6:47:13:93:63:c7:1b:60:35:47:
                    c7:24:3c:fa:22:98:4a:3f:df:75:0a:d6:59:1c:29:
                    00:2f:b0:77:a2:9a:18:4d:76:a9:c1:db:04:90:f8:
                    80:60:28:02:1a:54:26:94:0b:55:f5:0c:30:ad:ee:
                    0e:1f:db:fa:fa:9a:29:be:af:2c:a5:51:6a:21:21:
                    c7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FA:23:56:62:49:3A:24:11:E8:C6:9D:5A:CD:1B:26:D5:63:2F:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ecaabea1-e500-3e96-9c46-0dc0b9fe97e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a3:07:db:e2:67:1e:52:aa:24:48:23:d5:b1:5d:cb:e2:d6:
         fd:2e:e6:01:da:c8:6a:0e:55:78:be:ea:26:13:94:d5:be:5f:
         ea:50:18:fa:a9:19:a0:9b:5d:a3:5c:d5:26:72:fc:86:1b:c3:
         28:cf:3d:1c:65:a7:a5:58:74:c8:02:6a:0e:c3:ab:32:95:d7:
         fe:af:7a:34:ca:9b:2f:44:61:8f:ba:70:fa:17:04:49:82:43:
         7a:aa:1d:8b:6b:0f:6f:cf:18:49:9d:65:98:f2:b4:a1:63:7b:
         4d:ad:fe:cc:15:08:59:cc:b0:38:5b:dd:d2:d1:16:b3:23:fb:
         ce:62:b4:5f:97:cb:59:e0:61:19:43:77:bf:d2:91:48:fd:21:
         c5:61:54:ed:c5:96:86:ee:96:4d:d9:aa:48:b6:d8:fa:32:dd:
         db:0d:15:74:0b:8b:c9:67:89:ee:44:34:e3:c0:6d:13:9d:85:
         37:a7:90:fe:5c:d8:e1:06:73:53:d5:fe:8b:6d:d0:bd:35:41:
         4f:bc:7e:37:12:13:40:15:f1:b5:cb:b8:be:21:99:2f:33:ab:
         02:63:d3:f6:7b:11:77:61:14:6f:9f:3e:99:f7:78:06:73:42:
         52:7f:50:60:04:1e:ce:fb:fb:10:66:8d:f4:fb:eb:c4:01:58:
         8e:9c:2a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:32:46 2025 by rpki-client