Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/08c7a8ea-45f2-36eb-b89c-5e8c7f35014c.roa
File:                     08c7a8ea-45f2-36eb-b89c-5e8c7f35014c.roa (raw, json)
Hash identifier:          ZfQxQkidNx387pVNqV5jd/ufwCDkcsUieYQQA9MMFsM=
Subject key identifier:   26:16:40:1C:65:A3:A9:E1:F3:3B:4E:DA:77:94:39:48:E3:D9:65:65
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B4E7729503267E5CC9E53C540
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/08c7a8ea-45f2-36eb-b89c-5e8c7f35014c.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.132.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:29:50:32:67:e5:cc:9e:53:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=b1539841-e5a7-4bf0-bc15-76f489253236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9f:cd:93:5f:f1:d8:2d:ac:3d:f4:6e:a1:ef:
                    e4:b7:a3:19:cf:f5:68:38:27:d5:74:fd:44:af:53:
                    b9:26:ba:e5:30:b8:23:80:71:2b:2a:74:44:dc:ca:
                    5f:20:27:b3:8f:84:4e:01:39:49:29:3e:03:b7:2a:
                    9f:11:5e:6c:bf:b7:51:2a:87:bf:05:97:ad:df:a4:
                    c5:a8:d5:ef:49:d6:4b:33:d3:3e:8b:82:89:87:61:
                    d6:90:f8:2d:31:53:92:15:88:3a:4a:ce:a4:2f:ef:
                    75:6c:6b:67:40:fa:ef:99:e6:8e:75:b4:1d:57:e1:
                    29:d5:eb:62:bb:1d:ca:6e:d0:66:4a:b5:50:f3:41:
                    9d:4e:24:09:57:ba:a3:9d:65:5a:df:4a:63:bd:70:
                    d2:c2:1c:3d:b1:ec:98:c4:ed:a5:e2:bc:c2:29:3f:
                    17:19:11:e9:a3:00:a5:23:36:eb:bb:58:72:fe:45:
                    84:15:52:c8:7b:35:10:1d:57:e4:c7:12:ee:e6:bc:
                    9f:a9:a5:12:ee:f1:29:bd:a3:83:32:f9:f1:ae:ff:
                    f2:d9:8a:0e:e2:5b:7b:51:b6:3f:79:fa:bc:06:2d:
                    45:e4:b0:57:ee:7e:90:92:7e:56:43:1c:6a:ab:22:
                    04:00:f8:d3:e5:1c:c4:bf:3e:71:e0:81:51:fa:d7:
                    f6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:16:40:1C:65:A3:A9:E1:F3:3B:4E:DA:77:94:39:48:E3:D9:65:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/08c7a8ea-45f2-36eb-b89c-5e8c7f35014c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:ca:01:8c:7c:07:18:eb:5b:cc:b9:09:0d:0d:79:e6:e2:21:
         ee:10:30:33:13:10:5d:74:89:3c:d0:3d:ca:e9:99:c7:61:25:
         9d:f6:a2:e4:6d:c2:7e:a1:a6:80:ca:c8:f5:d4:8a:78:4d:b5:
         41:34:07:2a:2a:3a:4f:19:75:e6:fd:15:6b:5a:e6:8d:bf:f0:
         e6:e4:ab:e8:36:86:2b:26:56:ab:c7:d5:25:4b:87:e2:20:2e:
         82:a7:f2:75:7d:85:e0:02:5a:f8:42:e1:2b:ae:3b:24:9b:40:
         85:20:6d:b3:4b:af:6d:16:b5:8d:06:1f:be:f9:a4:85:23:22:
         bf:0a:85:9a:bd:05:9c:f2:a1:84:69:26:c6:96:89:6e:65:dc:
         df:12:89:3b:34:22:f4:a2:68:d4:8b:8d:25:c4:df:9c:51:46:
         a2:6c:11:46:03:49:df:8c:55:ab:44:8e:11:a6:38:d3:bb:ba:
         ab:6d:3b:e0:1b:bf:7e:88:92:6a:c7:e8:16:d8:25:f4:54:47:
         81:4e:59:5c:a2:62:f2:34:12:35:87:58:a4:11:68:cb:a8:af:
         fd:71:cd:49:a3:34:82:1d:43:81:22:19:a8:10:e0:dc:07:f2:
         c0:0d:04:46:ad:e3:7b:de:41:b6:9f:50:89:6a:f3:a6:b1:91:
         2a:91:d4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:05:26 2025 by rpki-client