Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0420b0b8-286f-3424-a553-e98e12f985bc.roa
File:                     0420b0b8-286f-3424-a553-e98e12f985bc.roa (raw, json)
Hash identifier:          NCaggHQpLP5sdSC4kXdJqJh7k/UHk4BZV+YjUgdlClM=
Subject key identifier:   BD:48:A8:CA:2A:DD:AA:06:67:0F:BE:D6:84:D5:FB:47:FE:74:79:31
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5F3765BDE1CF0387FBC50710
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0420b0b8-286f-3424-a553-e98e12f985bc.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     395973
IP address blocks:        104.134.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:65:bd:e1:cf:03:87:fb:c5:07:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=eccb1171-a5f5-4620-913f-595e2c30c9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:51:8a:3a:8c:01:82:f2:be:69:93:ec:98:
                    66:df:d0:42:a1:b1:60:a6:d7:91:f5:d2:7f:fb:9e:
                    fb:0d:5a:40:fe:24:dd:bd:f5:b4:15:1d:70:68:48:
                    e5:5d:1b:af:d4:60:c9:c0:26:0f:c0:cb:2f:17:8e:
                    42:4f:e7:fa:ff:61:3b:e7:f4:bd:ec:5f:1e:20:50:
                    1a:47:a8:11:42:4d:f4:4d:96:4a:02:a8:4f:0f:85:
                    5e:69:8d:3d:f5:a8:7f:1c:71:ef:b9:28:ae:d7:f8:
                    6c:84:85:bb:69:7d:f8:28:80:bd:93:73:fa:b3:fe:
                    3d:a3:a1:1f:d0:98:b0:22:e5:65:6a:61:84:16:be:
                    69:fe:9e:b1:87:27:4c:d6:02:53:0f:a3:90:fc:7b:
                    b4:9c:e2:48:33:26:16:54:ff:a1:e9:25:57:a3:52:
                    7b:df:6b:ef:cb:ac:43:81:c1:c7:e9:48:81:ee:fb:
                    36:ba:91:5a:4c:d3:f8:b4:5b:c4:32:74:6f:57:5d:
                    5d:13:4d:c6:6e:6f:45:81:82:b3:0b:7e:02:d2:30:
                    1b:75:06:98:6f:df:b3:b8:c1:b6:63:82:81:73:f8:
                    ff:49:37:5f:ce:14:bd:db:2b:f2:77:85:97:ee:72:
                    0f:0e:02:c8:de:59:ed:4d:4c:87:9b:4f:37:f3:3a:
                    6e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:48:A8:CA:2A:DD:AA:06:67:0F:BE:D6:84:D5:FB:47:FE:74:79:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0420b0b8-286f-3424-a553-e98e12f985bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:1d:df:16:0f:e0:f3:e1:ab:ae:20:e6:37:dd:ff:27:74:42:
         c9:f1:37:5a:ec:e8:94:1a:3d:7f:2a:f2:0c:2f:c2:cc:89:8b:
         78:8d:0e:66:bc:13:59:bb:e9:c7:05:67:15:1e:60:e9:b7:51:
         65:68:07:4a:f2:b8:fa:6e:b3:f3:34:61:16:46:ee:79:00:78:
         98:75:3b:c8:a5:cf:30:5d:a4:44:16:8c:de:15:47:34:6b:10:
         95:5e:90:67:12:86:af:80:92:dd:f0:cf:24:c5:c3:a3:e5:9d:
         0d:32:8a:c8:8e:ae:cf:ac:89:1b:01:7f:9a:c7:df:9b:29:33:
         84:16:b1:a8:26:f0:f2:02:70:c6:a7:03:22:50:02:a3:fc:13:
         62:24:32:9c:06:d8:23:2b:f0:0b:3a:60:dd:1b:5d:47:2e:37:
         df:27:2a:b4:65:c4:03:aa:d6:af:ac:60:63:e2:05:5c:d3:e6:
         c0:80:a2:8e:09:77:b0:cb:94:73:35:fa:c4:07:9a:6c:95:f2:
         87:a1:76:0f:b4:b6:b6:01:ed:3c:55:fc:80:90:fa:2d:19:b2:
         f4:da:60:50:ec:63:69:b1:8d:f5:6a:2f:94:c9:28:76:a1:57:
         ba:41:10:e8:23:a1:5d:16:9b:83:98:25:56:24:4f:47:7a:d2:
         28:21:3e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:05:22 2025 by rpki-client