Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/143ee4a1-3725-34e5-b9cc-4d7ab1429a45.roa
File:                     143ee4a1-3725-34e5-b9cc-4d7ab1429a45.roa (raw, json)
Hash identifier:          BfcDaZ15sdN9z3OmVaSEeZiPU2gN9QEPPDK678QHYUY=
Subject key identifier:   46:E7:91:AF:51:A8:3A:5B:26:F8:81:5C:47:0F:ED:45:91:5F:D6:35
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C77B3E98F309EDE249380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/143ee4a1-3725-34e5-b9cc-4d7ab1429a45.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.133.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:77:b3:e9:8f:30:9e:de:24:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=a660e051-ba4a-4eff-b5e0-916f0b1f195c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cb:bd:d7:6d:f4:4a:0a:bb:ac:85:43:91:57:
                    1f:56:d2:d7:c1:69:5e:dd:b1:83:31:53:81:1a:50:
                    55:5f:6a:51:c3:f7:b3:87:f7:25:55:33:38:52:63:
                    e1:1c:f9:e2:53:d0:5f:c7:75:3d:3c:f4:f8:b3:e6:
                    40:9e:29:e0:7e:97:e0:89:f5:fd:e0:a3:52:97:4c:
                    d7:bf:2d:72:53:a2:ac:ad:da:12:38:21:42:7d:3f:
                    3f:a3:fd:37:af:2a:01:d8:61:e2:db:79:e1:16:eb:
                    a5:5d:03:9b:e1:ac:fe:ee:e8:f6:b2:cb:27:a9:f2:
                    e7:7f:e1:0e:2f:88:34:a1:e4:57:47:db:44:8a:bd:
                    3c:20:26:d7:f3:91:1e:1a:1e:e8:2e:ed:26:16:01:
                    23:cd:ac:51:fc:aa:f6:a1:12:14:92:aa:06:6c:69:
                    33:7b:fe:ed:ba:fe:62:89:7a:99:7f:14:99:00:2b:
                    64:0b:2b:95:0b:99:6c:64:c6:b7:a5:0a:bd:19:4f:
                    ce:2a:8b:24:c4:62:f1:db:35:d2:db:ad:93:1c:a1:
                    a3:ca:8b:66:8d:db:b0:00:e7:46:9d:5f:a3:e8:cd:
                    68:57:0e:16:bb:23:1b:3b:61:c4:4f:2c:36:14:fe:
                    e9:f1:9f:ff:48:8c:97:3c:df:4c:53:88:5b:d1:7b:
                    b3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E7:91:AF:51:A8:3A:5B:26:F8:81:5C:47:0F:ED:45:91:5F:D6:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/143ee4a1-3725-34e5-b9cc-4d7ab1429a45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:01:39:7c:7a:39:ac:a6:1c:b8:a6:e8:4d:a0:c4:ac:58:17:
         50:64:9c:e7:67:52:7c:c7:6e:27:5e:b1:22:ea:72:53:52:2a:
         0a:0f:6e:d1:fe:77:4e:3e:9a:54:aa:23:3a:61:f6:22:ee:e6:
         62:d1:06:18:a0:4e:9b:eb:31:db:13:ee:6e:70:30:a6:18:79:
         68:3c:c4:6f:a4:d7:21:76:88:d1:15:f1:ff:f1:b0:5f:b6:cf:
         20:b3:fb:8d:a1:1e:ea:d9:e0:a0:f8:5d:7e:cf:83:36:cb:75:
         eb:54:92:24:07:4b:a1:ab:4a:36:19:d0:4a:02:ef:9c:c7:a0:
         fa:11:ad:17:a0:5b:28:a8:63:09:b2:b3:65:07:f6:b3:22:d1:
         fa:b9:e9:0e:ec:18:89:e2:3f:a7:bf:c3:27:89:6a:f8:26:29:
         9c:b8:6a:bb:e8:5e:cf:fa:94:e5:66:f8:9f:06:de:30:0b:fc:
         c6:e8:57:dd:79:a8:e3:a7:4d:44:97:7a:9f:37:0d:d4:4f:1f:
         37:66:19:f6:69:2d:eb:54:41:b6:63:2e:22:02:f4:7a:78:7c:
         ba:43:68:81:ac:73:d6:fd:ea:ca:68:55:35:b7:08:9b:89:e6:
         21:9e:00:4b:22:f8:f1:b5:e4:81:1a:0a:94:59:34:e1:14:eb:
         2e:2a:bc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:17 2025 by rpki-client