Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b93c92b-9d86-3878-a27a-7a22acc547fb.roa
File:                     2b93c92b-9d86-3878-a27a-7a22acc547fb.roa (raw, json)
Hash identifier:          44Jo1QVi0iwnces3m8p/mLfys1G4hzt7H1upM52ODjM=
Subject key identifier:   1B:0B:36:92:20:13:D0:FC:7B:33:B9:92:76:03:E0:DB:49:10:5C:96
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C737617E797157393C600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b93c92b-9d86-3878-a27a-7a22acc547fb.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.133.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:73:76:17:e7:97:15:73:93:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=75e806fd-2f63-4cdb-9615-6a237b46dca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6f:0e:ac:97:5c:5d:cf:88:3f:31:2c:bc:4d:
                    17:f2:48:1f:f1:ca:9f:ba:c8:de:87:8b:21:f3:f7:
                    bd:60:0e:9e:82:a5:f4:7e:65:93:1a:cc:6b:f0:ba:
                    24:45:e2:32:3e:d7:ad:ea:61:17:95:3d:cc:ea:f2:
                    50:fd:6a:f9:66:58:f3:61:18:b0:ae:cf:40:8d:ca:
                    fd:89:e6:6e:ec:c8:2e:b6:71:70:7f:12:b3:77:81:
                    5b:d2:9a:44:bc:5b:e8:0c:00:8e:6d:06:75:00:1b:
                    ff:71:71:a5:7d:df:39:16:20:d2:39:85:67:ee:cc:
                    78:1d:8d:bd:9b:c7:78:03:2a:eb:ee:77:ec:f4:47:
                    f3:f2:5d:b6:06:7c:ee:76:12:7e:a9:24:b7:d8:cf:
                    d8:2a:85:67:5c:b2:b4:a3:d5:34:2a:cd:58:88:70:
                    cb:3c:b3:23:1a:70:e2:4d:e6:7e:39:3f:e1:0a:c1:
                    18:3b:20:23:cf:70:fc:aa:57:14:90:40:62:ae:8f:
                    fb:fc:ef:b9:02:61:13:5a:b9:06:91:c7:64:24:66:
                    27:4c:ea:3f:1a:d7:42:ad:8e:21:15:c3:86:56:d2:
                    d8:2e:65:18:2f:5b:ff:25:24:19:69:93:b6:20:21:
                    0a:18:a5:f7:a2:05:98:65:de:0d:da:d4:b1:e0:be:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0B:36:92:20:13:D0:FC:7B:33:B9:92:76:03:E0:DB:49:10:5C:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2b93c92b-9d86-3878-a27a-7a22acc547fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:98:3c:75:4e:bb:11:5a:60:09:cc:c7:0e:41:d5:00:5c:a2:
         59:2f:a0:c1:df:bc:a9:23:74:3e:20:f5:3e:d7:d4:5e:87:1b:
         6e:ef:3a:b5:fc:b6:15:b0:02:28:2b:cf:c8:0d:78:f7:f9:36:
         e4:f0:b5:1e:bf:3b:c6:bf:d1:32:0b:34:52:83:02:ff:2d:d9:
         b8:f8:7d:cd:a0:c6:1d:67:fd:80:01:13:30:bb:ec:9a:63:07:
         80:64:b3:f0:be:a7:4c:a3:ec:b6:e5:a2:34:6a:44:15:50:f2:
         3a:73:af:04:2e:07:dc:b6:94:d7:9d:1e:e0:b2:70:f1:1f:95:
         91:d6:d9:36:fb:1a:2c:d4:b6:87:bf:0f:3a:4b:db:4a:6f:55:
         4e:7d:24:79:1a:a4:da:ed:1b:6d:c5:bd:bf:7d:90:f3:95:86:
         f2:f0:51:d6:bb:c8:2c:a2:aa:be:ef:22:09:b0:58:b8:e4:ff:
         54:bf:87:b4:47:e8:36:80:57:4f:74:5b:d8:b8:27:fe:90:b8:
         42:1e:d2:84:32:6b:58:0f:d5:f5:86:89:13:8e:18:6f:be:27:
         94:ed:f7:12:cf:9c:52:60:c4:51:39:5f:41:08:22:04:2d:8b:
         62:bc:9a:21:6e:11:d7:b9:ee:37:26:19:2d:b9:74:0f:83:28:
         c5:2a:89:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:03:12 2025 by rpki-client