Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4899ffbe-0cd4-3d09-b791-4b0bbc79d396.roa
File:                     4899ffbe-0cd4-3d09-b791-4b0bbc79d396.roa (raw, json)
Hash identifier:          DtYosR8pBMw1M3df6ZqX+1J4Y8oaWEUZ4ax6pLHzFcI=
Subject key identifier:   D7:81:E4:51:ED:22:82:13:B8:75:6D:0B:E6:B2:7B:2C:6C:F2:35:5B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B4E77276ED25EBA6676BB4400
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4899ffbe-0cd4-3d09-b791-4b0bbc79d396.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.132.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:27:6e:d2:5e:ba:66:76:bb:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=260fdb87-fe90-4c83-94bb-9bede7161ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d5:9e:2d:5e:fd:4b:1a:c6:68:17:7a:8d:ad:
                    8b:b3:a0:fe:45:40:18:c2:50:27:cd:06:f5:8d:2e:
                    fb:d8:f4:67:e5:9c:a1:fb:da:e0:63:83:a7:2c:90:
                    76:b6:f6:ba:eb:bf:06:43:46:53:92:bc:e2:0b:4d:
                    8e:1b:02:87:4f:75:45:bc:dd:f5:79:11:6e:72:c0:
                    6b:81:8a:6a:18:88:a8:20:a9:b5:ee:14:90:78:ea:
                    ee:61:49:20:90:e6:42:d7:f7:56:5f:ad:95:10:c0:
                    23:3e:09:5e:36:50:51:3c:50:93:21:ae:7e:05:e3:
                    e8:60:2b:40:bb:67:01:3f:43:32:d5:24:27:b2:cd:
                    11:a7:e1:0f:58:6d:25:7a:01:a4:d1:87:11:10:7e:
                    50:64:dd:19:03:62:22:d4:1f:f7:97:41:3f:ce:1f:
                    1c:17:61:fa:28:60:be:c3:14:4d:77:9e:a8:06:fa:
                    bc:43:e3:98:02:0e:c8:cd:ea:b8:79:9d:35:8c:43:
                    e4:3d:01:eb:06:73:f3:ac:03:08:a9:1f:e4:2b:d3:
                    08:45:83:ef:af:d8:6a:20:d4:fd:a7:f3:80:7c:0d:
                    cd:c7:35:a1:5b:5d:db:0d:a8:ab:a3:d3:de:54:eb:
                    77:1d:97:9f:1d:b2:3f:12:51:ea:ae:f8:30:18:6f:
                    46:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:81:E4:51:ED:22:82:13:B8:75:6D:0B:E6:B2:7B:2C:6C:F2:35:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4899ffbe-0cd4-3d09-b791-4b0bbc79d396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:8e:fa:1f:9d:ce:22:71:11:ed:c1:e4:83:7c:f0:6e:ef:fa:
         dd:06:7a:56:aa:c1:2d:7f:4e:52:cf:8e:62:e5:64:c5:a2:af:
         b1:49:ff:29:20:b5:78:c7:2d:02:8d:f5:9b:97:89:a2:1f:f1:
         77:a1:30:b1:3d:52:a5:85:b8:45:69:f1:2f:1f:9b:bd:1e:e6:
         04:d2:82:b5:4f:13:cd:38:6a:e8:19:00:3e:ba:04:50:9e:4f:
         12:ff:1e:f6:68:bf:3d:a6:0c:6f:03:41:7a:64:95:dd:60:b5:
         4a:10:44:d3:ad:c9:d4:1c:c6:65:fa:86:25:12:8b:ee:90:a3:
         fc:27:fb:a6:27:be:41:8a:c4:66:d6:4e:bd:9d:7f:51:8a:c8:
         bb:c7:01:f5:74:bc:d6:20:b5:eb:07:87:cb:51:09:ef:ca:4c:
         a4:cb:0e:ab:5f:cf:7d:d9:1e:a4:dc:26:41:5f:76:02:2c:43:
         65:f1:9a:05:92:49:bb:6d:0c:f7:8f:36:fe:f1:0f:59:a2:20:
         e4:5b:f6:8f:91:29:20:64:ee:55:47:48:50:d8:33:c3:4f:21:
         b3:78:39:a5:58:e4:7f:b3:0f:3c:32:a0:cc:23:2e:7e:ae:c3:
         69:a5:2d:01:e5:30:29:5c:62:6d:62:f8:4a:f0:15:9d:3f:49:
         5b:a3:2b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:57:20 2025 by rpki-client