Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2ab811b4-6f49-3cf5-842b-0e0618aadb01.roa
File:                     2ab811b4-6f49-3cf5-842b-0e0618aadb01.roa (raw, json)
Hash identifier:          r5Gp9WQxbdP+49tD+W5uPdYfAhtZkAWcf7a9SJPBUtw=
Subject key identifier:   1F:01:45:BF:20:D9:80:DB:F0:22:09:67:25:C6:A9:CF:C1:E3:61:12
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C713B40F56FECFD58F880
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2ab811b4-6f49-3cf5-842b-0e0618aadb01.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.133.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:71:3b:40:f5:6f:ec:fd:58:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=0b3ae474-d5a0-4792-b0d2-9abc24b20d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8a:f9:64:40:b2:85:58:40:67:9a:ed:7b:48:
                    69:0b:19:77:ee:e5:33:c1:4f:8b:46:15:c0:05:7c:
                    85:ac:3d:43:c5:15:c2:3a:f1:8a:c6:1f:39:32:86:
                    40:5d:0e:e7:05:78:42:1c:4b:4c:3e:92:8d:30:c6:
                    a2:c4:f8:01:e5:57:c2:ae:3c:d0:cd:cf:df:59:28:
                    fd:53:21:73:ab:86:47:2e:72:a7:2f:c7:f3:47:e4:
                    15:61:83:b4:c2:6f:e4:3b:4d:33:6c:99:44:b4:02:
                    8b:f8:6f:1d:8a:08:89:a4:f3:4c:9f:fe:c9:36:d4:
                    1a:62:73:bb:9a:c5:8e:9a:a6:cd:3a:a0:04:1f:8d:
                    bb:a0:4c:19:2b:c4:af:5e:81:5a:8c:dd:0e:ac:a3:
                    6b:23:5c:95:d0:f6:07:cf:2c:c5:f4:76:d8:fc:cb:
                    c8:a4:30:7e:f8:9b:04:f4:ca:ac:e1:71:34:d1:01:
                    c6:90:16:e3:20:5b:ef:46:2f:0d:41:b9:02:69:7b:
                    5c:d5:0a:f3:05:a5:52:e8:10:a4:df:e5:db:5f:05:
                    a1:79:bf:71:4d:38:8f:ae:6c:22:74:c0:73:90:12:
                    40:62:08:06:41:43:07:3c:5b:56:19:c0:9c:bd:3b:
                    73:54:00:da:e1:ce:11:88:6a:a4:14:ed:cc:60:4c:
                    48:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:01:45:BF:20:D9:80:DB:F0:22:09:67:25:C6:A9:CF:C1:E3:61:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2ab811b4-6f49-3cf5-842b-0e0618aadb01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:fc:6b:af:18:a0:87:d4:78:c5:22:52:e0:db:3f:33:18:cd:
         bf:2f:9f:20:d8:e5:46:dd:cc:54:ec:9d:18:19:16:13:58:fc:
         82:4a:be:c6:ee:e3:f6:ae:69:4c:6b:66:34:e9:cc:4a:03:f9:
         5d:c1:ee:b8:72:b8:5d:7a:17:ee:49:ab:3b:8e:ce:36:14:26:
         d0:f3:eb:04:4f:0e:1e:ea:01:17:73:aa:51:02:7e:6d:ca:51:
         dd:65:c6:29:db:0a:b5:c5:89:6b:e1:e9:51:03:b7:a7:2f:57:
         23:d8:15:5e:a7:86:82:e7:f1:0b:e5:0d:56:e5:22:10:a3:cb:
         25:68:c3:d6:6e:31:5d:84:11:05:9e:15:5a:7f:62:8d:27:72:
         cc:4d:9c:a8:f3:67:04:04:ce:ae:c7:62:02:2e:1c:bd:50:8c:
         80:9b:5a:96:ca:97:fe:34:0a:e7:5e:33:01:b5:3c:c9:63:a9:
         59:4a:42:9d:a4:52:19:8a:9e:d1:95:e2:c9:52:e2:cb:43:01:
         c4:cd:51:2e:be:a5:31:a2:4d:72:fe:56:52:f3:6e:bd:56:ce:
         03:cc:c6:78:39:b1:bf:b6:de:62:cf:78:1a:34:53:e2:e3:c5:
         44:cf:f3:91:aa:6d:97:82:61:72:93:54:b3:b3:61:e4:19:fc:
         a3:24:84:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:04:29 2025 by rpki-client