Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/24c7ae10-6efe-312d-8d6f-b6c26e5a4be0.roa
File:                     24c7ae10-6efe-312d-8d6f-b6c26e5a4be0.roa (raw, json)
Hash identifier:          x9b+xCMz+YOOv6PO0SAtS8u7c685ZqAE0fGWH3adbQQ=
Subject key identifier:   64:99:4D:64:88:0B:1D:4A:DB:D4:F0:78:2C:22:D1:4B:B7:9C:A4:39
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5F37496AC040F6B61B2F6F00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/24c7ae10-6efe-312d-8d6f-b6c26e5a4be0.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     15169
IP address blocks:        104.134.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:49:6a:c0:40:f6:b6:1b:2f:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=03ad1381-2fc8-4205-b6d1-21c6cebce975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:27:9a:1a:01:24:99:7c:7c:6a:cf:81:a9:
                    ca:30:9b:2b:7f:53:a4:7a:dc:90:7e:66:e5:26:6f:
                    ef:2c:4a:70:d8:8a:e2:88:02:d7:c9:fb:9c:7f:1b:
                    eb:a7:97:dd:35:f1:62:96:d9:f6:70:8d:59:c2:44:
                    22:6e:50:bc:ba:1a:a1:d5:c0:83:c5:eb:57:f1:fb:
                    dc:fc:7e:b4:73:53:a6:86:53:d2:a4:73:ee:23:c3:
                    28:ba:9d:0c:4a:23:45:e3:3e:c4:b2:34:db:31:99:
                    f4:d3:93:72:e3:88:de:ad:90:52:4f:34:e8:bc:50:
                    89:76:9b:23:97:ae:98:da:ae:98:ba:ee:20:07:10:
                    b1:3b:bd:cc:73:92:17:c4:21:25:e5:6c:80:e9:da:
                    e0:0b:48:ef:9d:aa:bd:22:df:1e:8d:fa:59:d4:06:
                    3f:5e:72:31:2d:17:0c:d3:15:d5:b3:3f:dc:86:51:
                    61:4c:2f:1a:e3:89:ae:03:93:c3:fb:3e:d6:b3:f1:
                    2b:b9:e5:12:84:ac:04:48:54:62:c5:88:ae:37:f1:
                    97:5c:d8:6d:be:43:c0:31:b4:d7:2d:8b:57:b7:63:
                    2e:7e:07:5d:14:47:fb:7e:13:01:cb:69:2f:2b:4b:
                    a9:d2:2c:0a:3b:f4:20:7e:28:23:c1:20:fd:d5:f7:
                    ec:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:99:4D:64:88:0B:1D:4A:DB:D4:F0:78:2C:22:D1:4B:B7:9C:A4:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/24c7ae10-6efe-312d-8d6f-b6c26e5a4be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:b4:d4:bd:f7:87:93:38:bd:58:a1:71:c5:bb:f6:3a:b1:65:
         2c:7a:bd:8d:11:33:38:c1:46:61:c6:7b:b2:cd:3d:2c:40:3a:
         01:ee:64:e9:04:e7:58:d1:ca:38:ab:f0:e9:31:3e:80:ff:91:
         a6:7e:59:61:bc:f2:e4:00:56:2c:22:ff:ed:19:24:91:8d:db:
         5c:6d:51:03:f6:ef:8e:e3:e5:8f:3e:cf:5a:4a:69:cb:1a:3b:
         ec:57:e9:9e:4a:13:a9:71:19:2e:23:ea:3d:82:83:94:13:7f:
         2e:03:af:1e:32:8f:fd:6d:27:79:6d:73:b7:34:ab:e9:2d:ba:
         01:ef:86:33:ba:42:2a:67:74:35:ef:21:6a:ac:2c:7c:4e:f3:
         5b:a6:27:e2:2f:7c:e8:64:a0:01:43:b4:39:6a:0b:35:51:6f:
         ae:b4:7e:08:ba:6d:37:b8:50:91:8f:30:73:e3:9f:a6:47:fe:
         a9:41:9f:98:ee:70:b7:58:b0:59:d2:9a:32:b2:26:68:0c:82:
         02:f6:04:03:49:bf:83:8a:aa:f1:57:5b:b7:e3:af:16:b1:37:
         f1:a3:ad:41:5d:d2:62:dc:3d:91:df:ab:62:e5:a1:73:3d:bf:
         9a:2c:e0:2d:a5:ec:5d:91:37:00:7e:5b:8c:8b:4c:b2:ba:e2:
         b5:f2:73:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:05:21 2025 by rpki-client