Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e575422-583a-3199-b11f-06ff93271a69.roa
File:                     3e575422-583a-3199-b11f-06ff93271a69.roa (raw, json)
Hash identifier:          IcbuVULT5uLC+/TwYktb4NR6J6bOSx38TLBCbqt415A=
Subject key identifier:   FF:CF:1D:9B:33:75:DF:1D:9A:27:7E:AA:8C:65:52:EB:8A:80:71:98
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5F3775B7881EECEB9FEB5100
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e575422-583a-3199-b11f-06ff93271a69.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     15169
IP address blocks:        104.134.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:75:b7:88:1e:ec:eb:9f:eb:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=fa166ebc-01b3-4c91-8c1e-7cc4f7050aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:76:ff:a3:65:6c:44:2f:7a:e0:7b:31:0f:
                    22:65:87:c9:23:35:51:9d:64:3e:f1:85:29:a6:c1:
                    39:96:bc:0c:00:fd:39:9c:3b:f9:cd:9f:b6:41:fa:
                    0d:46:95:26:24:ef:55:63:52:87:53:15:9e:76:22:
                    85:d0:77:b6:9e:fb:04:36:17:32:22:0d:20:ef:e2:
                    77:52:c3:de:2c:f4:12:2f:df:d7:6a:93:df:12:2a:
                    dd:c1:3f:45:91:64:da:3a:50:1a:5f:26:0f:99:44:
                    57:fa:14:7f:04:ab:af:41:b3:84:40:1e:b6:d6:10:
                    40:87:6a:43:71:25:e8:71:70:53:ff:c9:42:7a:66:
                    2a:5d:ba:67:2d:ef:75:c9:85:ba:1d:fe:61:83:8a:
                    6e:bf:35:42:fe:5d:f8:ae:09:77:1e:63:ff:ae:20:
                    79:0d:79:75:93:a4:7a:0f:a7:55:8c:cc:e3:13:42:
                    57:d2:6f:89:f9:b6:32:19:d8:d7:1d:a1:c6:68:42:
                    d1:2b:5a:9e:54:bd:2b:4d:65:b3:b0:0f:17:5e:19:
                    b6:89:3a:15:4d:b7:4c:59:ed:ea:7d:80:29:0e:68:
                    57:ec:b8:be:3f:09:74:81:0a:07:72:41:92:b2:4a:
                    cb:f1:aa:fa:14:06:69:ff:ef:4f:0e:52:48:44:c2:
                    0b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CF:1D:9B:33:75:DF:1D:9A:27:7E:AA:8C:65:52:EB:8A:80:71:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e575422-583a-3199-b11f-06ff93271a69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:9d:ed:5a:8e:cc:f1:ef:e8:c0:48:f4:35:4c:7f:4e:64:ad:
         fc:86:5d:5d:b0:f4:63:b4:f5:9c:5f:21:2e:7d:d4:8f:7a:17:
         86:bb:a1:b2:d3:2c:0c:96:80:e2:4e:9f:e5:8e:4a:11:f8:fa:
         09:42:17:18:1b:6d:2d:0c:f0:50:bb:09:45:e1:a8:15:df:95:
         25:ec:5c:d4:d2:0f:77:ca:a1:55:63:43:ba:de:ae:f8:bc:6d:
         ca:d4:e5:25:d9:a6:57:81:b6:15:d3:13:93:45:17:44:43:6a:
         be:8d:18:00:2d:9c:d5:16:77:d4:7d:e9:92:8c:3b:01:e8:7b:
         58:5a:12:29:98:9d:7c:b5:5d:da:e5:0d:13:54:b1:e5:ee:41:
         b4:86:bc:0b:43:0f:91:1d:55:ff:f7:db:be:dc:7c:f2:f2:8c:
         2a:42:08:0b:2b:39:cc:58:68:1f:cb:27:a7:90:08:3f:88:00:
         07:dd:a2:98:cd:df:8b:5e:e0:dd:27:b1:3f:12:f8:53:1e:8c:
         22:46:bc:9b:d5:32:4f:2a:5d:72:2d:bb:ec:b0:d6:93:9c:39:
         71:be:e9:90:30:ad:fa:7e:06:25:d4:71:bd:39:20:ed:66:c2:
         26:c8:ee:af:5d:26:58:80:fd:fe:3d:57:e6:eb:e8:70:d9:ea:
         e7:76:a9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:57:31 2025 by rpki-client