Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d3bb6c0-426d-39ee-a5bd-5220140aa44c.roa
File:                     0d3bb6c0-426d-39ee-a5bd-5220140aa44c.roa (raw, json)
Hash identifier:          LZupuFJ+C5kg/8VsKvn2/YdSP78gIEJGQBhJJjBIIIk=
Subject key identifier:   A1:62:60:7D:FA:99:B3:C8:E2:09:76:63:88:C8:8D:46:35:69:CA:16
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C9635731CBD0C50A2F080
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d3bb6c0-426d-39ee-a5bd-5220140aa44c.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     15169
IP address blocks:        104.134.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:96:35:73:1c:bd:0c:50:a2:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=b3d0944c-cd9c-4533-ba7e-bfed203cbe32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:44:94:bc:49:57:3a:a6:83:e3:2f:f8:ed:52:
                    2b:2c:4f:e1:32:91:36:49:ed:a9:13:ec:81:01:f6:
                    43:c0:2b:ef:bb:82:ad:61:c9:8c:ba:cc:d0:0d:ea:
                    c9:a0:88:b8:79:51:16:8b:dd:27:aa:fa:ad:2a:1e:
                    d0:56:5c:b4:5a:c0:2a:e9:47:47:65:31:90:e2:71:
                    11:34:e6:12:a0:07:24:58:4d:b3:35:81:43:34:68:
                    78:80:29:40:30:90:35:c0:27:0e:27:4b:1e:06:66:
                    bf:c0:de:4d:11:fe:63:9b:1c:aa:3e:8b:81:c5:47:
                    46:02:97:51:71:8b:c0:63:51:d8:c6:5f:20:a4:09:
                    1e:95:18:a6:9a:f3:ad:52:62:c3:b5:88:09:78:05:
                    09:08:83:ff:33:3c:c1:89:96:4b:86:d0:4b:aa:56:
                    69:0a:f3:bb:c5:2d:47:d2:10:4a:94:2f:30:c4:34:
                    f9:93:28:d3:d6:55:2d:45:ad:df:2c:ae:97:c2:d6:
                    58:da:81:2c:ca:b7:81:b6:90:86:6b:02:ab:6c:a2:
                    13:ea:06:f8:e8:16:50:38:95:1e:df:82:3e:b3:3e:
                    ce:f9:5e:3f:59:65:8b:16:4e:78:d6:6c:b9:ef:d1:
                    5a:41:ba:4f:1e:6a:2a:70:f3:ca:5d:59:a7:fa:ab:
                    54:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:62:60:7D:FA:99:B3:C8:E2:09:76:63:88:C8:8D:46:35:69:CA:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0d3bb6c0-426d-39ee-a5bd-5220140aa44c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:13:8d:a7:98:1a:6e:de:24:8a:b8:49:e8:14:d8:3f:a8:5d:
         e4:d0:f6:b1:b2:d0:6c:c6:88:cd:7c:fb:5b:3b:b8:f4:da:c9:
         72:53:cd:fb:82:34:f5:3a:56:f0:98:28:6a:0a:b7:12:d6:17:
         97:e9:33:ea:5f:1e:61:94:9f:a0:02:e0:3b:e8:92:ad:0c:39:
         85:16:75:a2:8c:f0:f2:37:95:8e:e5:ea:df:67:df:82:44:ae:
         f0:de:cf:88:f5:54:b1:80:6b:11:b9:d8:2b:ee:a0:c4:fa:89:
         42:7e:c0:86:0b:93:b9:38:4f:58:0f:7c:ae:62:a3:b7:20:26:
         ae:32:54:9b:75:5b:98:ac:81:43:42:e7:bc:3a:17:e4:02:70:
         45:2d:95:10:4d:05:8b:47:c5:2d:bb:3c:a7:54:55:9b:be:56:
         3b:31:3d:ad:a8:92:89:a3:f8:92:ff:75:2f:80:8a:51:12:dc:
         40:8d:ae:dd:3a:b0:02:44:73:fa:53:6b:04:2f:19:b6:7b:dd:
         43:61:28:68:4a:26:89:91:ca:16:7b:14:33:00:f9:bd:89:2f:
         86:d7:e9:f7:a4:18:4b:ac:5e:16:78:3e:df:6e:f4:e8:f0:fe:
         e8:9b:cc:23:38:5d:05:0e:7d:63:18:aa:be:c2:e9:aa:ee:14:
         47:75:d6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:06:17 2025 by rpki-client