Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/448726bb-b4e1-39a0-ac5c-fb5f54a7c593.roa
File:                     448726bb-b4e1-39a0-ac5c-fb5f54a7c593.roa (raw, json)
Hash identifier:          280l1fslFSH4QeixxhGlAH3f3aIA5h9K81koT9YmVvs=
Subject key identifier:   EC:53:35:E5:BC:68:C8:E1:00:18:B6:E1:A8:F7:17:DE:6E:FA:21:3F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C9232AAF121921E916600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/448726bb-b4e1-39a0-ac5c-fb5f54a7c593.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.133.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:92:32:aa:f1:21:92:1e:91:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=f748da14-48d0-440b-8a27-c23df45f30cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:72:77:a0:32:59:39:85:e8:64:be:7c:64:52:
                    a9:9e:53:a9:80:1a:40:3b:39:0e:b6:a4:37:32:42:
                    13:38:58:c6:5e:9b:49:19:9f:b1:c6:da:58:bd:e9:
                    20:20:e4:22:14:fb:32:0e:91:52:cd:5c:e5:24:01:
                    cf:b0:ea:52:f0:bf:8e:f4:17:25:a4:b3:fb:a4:24:
                    2f:55:2f:0f:a1:ac:d9:53:36:83:22:0e:b3:b0:3b:
                    af:25:6f:e5:9b:20:22:41:ce:22:36:03:35:24:7f:
                    af:0b:11:85:1e:04:06:2c:9e:c4:70:c1:77:0b:5b:
                    71:20:0d:2f:00:6f:4a:c8:4e:9a:8b:6d:22:a3:60:
                    9f:27:d5:7b:28:bc:5d:92:24:8a:87:9a:a3:8f:bc:
                    06:be:36:47:ce:20:26:62:b1:5f:40:63:49:57:95:
                    7e:05:da:3b:6c:75:00:e4:36:f2:81:33:37:6f:b1:
                    27:d0:8d:55:a0:5d:6f:76:a9:ac:76:64:43:25:76:
                    82:9e:85:5f:c1:95:01:c2:85:cb:52:9b:c7:df:d9:
                    cf:9c:16:ef:6f:89:f3:fe:3c:02:0d:aa:cd:52:25:
                    ac:f3:b8:58:4c:6d:9b:8e:e0:37:cd:13:4f:9f:cf:
                    82:b4:27:9b:93:a3:e9:27:25:19:44:84:04:19:2c:
                    bb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:53:35:E5:BC:68:C8:E1:00:18:B6:E1:A8:F7:17:DE:6E:FA:21:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/448726bb-b4e1-39a0-ac5c-fb5f54a7c593.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:7d:4e:90:81:b0:8e:5f:34:5b:21:e7:48:02:09:14:c5:ab:
         1e:29:97:9c:be:83:58:47:48:fa:62:85:4a:a4:60:2a:36:e9:
         6e:64:3f:a4:b3:0e:f6:b1:ba:a8:bb:eb:b3:7f:d4:39:97:4b:
         4c:e7:5c:4b:db:75:a8:38:b6:59:c6:71:08:d3:34:bc:2d:e3:
         a2:2f:2e:a0:5f:cb:61:e4:a0:e4:48:b8:2c:cc:2c:dd:f0:79:
         2a:46:c8:f1:ad:5f:8b:c8:cf:52:48:9e:7d:ad:79:8f:05:6e:
         ef:bf:02:f7:2e:32:6f:ff:d1:aa:db:72:bb:fc:87:6e:b4:b9:
         30:45:37:95:eb:44:97:f3:d0:ec:52:3a:e1:c8:32:63:1b:e0:
         d8:1a:1b:d3:26:49:49:29:b4:01:36:f6:c8:b4:3f:72:4e:af:
         ec:53:1f:00:3d:5f:4f:26:4b:b7:42:1d:9e:ae:e2:42:16:78:
         19:74:c4:8a:d2:83:9c:60:75:6f:be:f5:6f:ab:e9:4f:54:37:
         19:f1:bd:cd:8c:dc:d3:fe:29:e5:31:03:42:7c:b1:64:6f:94:
         95:65:fa:9f:af:3a:42:a2:58:7b:a6:8b:fd:30:fa:7a:59:29:
         f4:3b:84:f6:1b:7e:8c:50:c4:27:38:10:cf:7d:75:7d:a8:bd:
         ad:66:2e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:03:03 2025 by rpki-client