Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1427e528-f452-3110-b7f2-4df85627aea8.roa
File:                     1427e528-f452-3110-b7f2-4df85627aea8.roa (raw, json)
Hash identifier:          Y5wOXaet3p+iQYqtclBR1jMvnsC/STkb4wIgi/x7624=
Subject key identifier:   27:12:2C:E1:82:51:66:05:BC:D1:3B:A6:91:0F:F4:03:E7:1C:9D:95
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C7A9A9ECF2043F75E1300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1427e528-f452-3110-b7f2-4df85627aea8.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     15169
IP address blocks:        104.134.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:7a:9a:9e:cf:20:43:f7:5e:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=d531a1e9-3805-4194-b6b8-dac97d427f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:84:0c:aa:c7:74:8f:99:a9:96:22:1c:0f:2a:
                    9e:ef:21:b7:a9:3b:0e:fd:05:99:02:8d:0a:c2:12:
                    c4:51:01:37:23:32:57:62:4a:d2:23:34:09:a6:bf:
                    02:af:ef:95:1e:62:13:84:91:8b:74:14:a4:5c:a5:
                    fc:cb:c4:07:28:6d:fe:eb:5d:ae:a7:3a:c3:d6:db:
                    e1:da:b5:96:72:75:7f:ce:e1:8b:4a:e3:1c:58:f3:
                    84:0d:2e:e9:94:5b:67:1e:4d:1d:aa:c3:db:62:7a:
                    fe:14:fa:1d:bf:c0:c2:0d:ff:57:3a:a1:1f:00:0c:
                    cc:91:68:30:50:87:2e:19:38:3f:97:30:9c:75:b1:
                    e4:bb:b1:2d:77:bb:7c:c0:dc:4c:fc:74:7a:65:50:
                    59:86:46:f1:e6:86:90:c6:6e:5c:17:69:b1:f5:17:
                    68:c8:26:55:09:4f:fe:07:87:bf:5c:ef:4b:53:fe:
                    81:0b:27:8c:ff:aa:cb:13:5f:3b:95:0b:65:eb:ca:
                    81:a3:65:90:14:4c:75:7e:a9:dc:5a:c2:6d:8c:19:
                    0c:6b:ad:87:7c:e9:7f:11:8b:eb:e3:46:06:99:3e:
                    5d:5e:6c:6d:cd:ea:e3:10:2e:c1:30:3e:bc:70:c5:
                    99:aa:56:df:02:58:11:74:0b:8b:e0:44:21:42:19:
                    d8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:12:2C:E1:82:51:66:05:BC:D1:3B:A6:91:0F:F4:03:E7:1C:9D:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1427e528-f452-3110-b7f2-4df85627aea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:0a:17:4f:c1:63:2d:74:ad:e3:31:c1:0b:43:6e:ac:35:42:
         dc:ca:67:0b:8b:ab:4a:64:2a:6c:90:fe:06:60:59:5b:d4:b4:
         58:71:63:13:a2:fd:ea:31:d0:bd:99:44:3c:6c:f7:4a:87:74:
         46:09:31:de:f1:fd:89:a3:4f:4e:58:1e:e2:8e:98:13:53:7b:
         fd:43:24:08:9a:2d:33:77:d0:a1:09:68:a6:3e:0b:19:9c:89:
         8e:42:13:49:42:7b:61:a7:15:71:38:65:bd:28:0a:21:33:99:
         c0:66:a5:d3:39:ec:e1:75:0c:cc:0d:6f:e5:a2:f1:86:8c:7b:
         03:05:3a:2c:01:28:75:8e:f5:ca:1f:3b:ab:06:af:51:06:cc:
         ff:30:a8:4c:57:ca:0f:48:d6:29:81:53:f2:ef:6e:37:ba:d0:
         59:86:2b:b0:bf:9a:e7:16:de:91:cd:4c:55:59:d7:07:26:2b:
         d3:16:8c:4b:8b:87:39:af:46:01:58:d5:d9:35:1b:a6:2a:9f:
         54:1f:6a:c2:f5:71:04:8c:f0:00:e5:e0:7b:ad:87:a0:92:84:
         01:1f:aa:42:f8:6b:2d:71:14:95:37:f6:7e:b4:f3:6b:75:04:
         95:92:b8:cc:ba:fa:eb:9c:6b:42:1b:3c:ac:2e:d7:ce:a0:e1:
         b8:a5:06:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:44 2025 by rpki-client