Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/499b8884-d9d1-3e06-9918-54bd93bcd828.roa
File:                     499b8884-d9d1-3e06-9918-54bd93bcd828.roa (raw, json)
Hash identifier:          j1LBium/gz3/VIy/b6ruBS0tecRnCyEGAzPTlc2Cg6o=
Subject key identifier:   38:25:D4:CF:74:BB:B7:1F:16:86:EB:4F:52:FF:4E:4C:94:49:BB:B4
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5141DC8CF9315A7B1F7A5C80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/499b8884-d9d1-3e06-9918-54bd93bcd828.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.132.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:dc:8c:f9:31:5a:7b:1f:7a:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=0015359d-879f-4ec5-92ef-047d32bfb946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bf:d9:16:58:00:ef:cb:a3:ce:a6:38:8d:92:
                    49:b1:1b:eb:36:dd:cc:9e:15:6e:16:07:75:72:f0:
                    84:9e:a5:b3:17:f7:38:0e:09:03:9b:97:46:6e:bc:
                    bf:02:55:39:42:f6:0c:85:72:d6:12:3a:9f:8a:9a:
                    7e:a4:f8:78:a0:aa:14:fc:df:05:f0:62:b9:a2:c4:
                    cb:86:a1:0c:13:8d:cb:15:70:21:f8:12:da:e6:29:
                    3c:10:25:fc:5f:cb:cd:3d:23:c8:86:7f:04:4f:39:
                    6d:59:fe:82:d3:19:55:67:1a:3a:19:bd:fd:49:d6:
                    49:4a:0e:d4:1d:49:5f:11:98:ed:0a:2a:2c:d1:1c:
                    7e:36:5d:30:88:aa:0e:20:e4:4c:26:06:80:96:4a:
                    16:63:24:ed:c3:b8:cd:03:7b:51:86:23:e8:5f:b0:
                    c9:e6:33:0c:e7:06:39:52:39:21:79:41:63:48:91:
                    2c:7e:76:56:f6:d9:7f:fe:6c:82:e7:28:6f:77:9c:
                    65:51:31:74:be:fd:c2:13:7c:cb:b7:35:3a:3e:ab:
                    76:1a:37:7f:f9:95:3d:b4:1d:42:0f:ae:75:e0:ce:
                    1c:dd:19:3c:79:4f:4e:43:b3:40:ff:fa:23:18:ce:
                    a4:66:d2:55:fe:03:a0:9b:6b:9a:df:d2:a0:7c:d5:
                    2c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:25:D4:CF:74:BB:B7:1F:16:86:EB:4F:52:FF:4E:4C:94:49:BB:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/499b8884-d9d1-3e06-9918-54bd93bcd828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:9f:7b:7d:4d:60:be:fe:d2:53:f8:78:4f:e1:f4:6d:d6:4d:
         4a:aa:80:5f:d0:5e:04:2b:ad:c4:f3:82:45:dc:0a:0a:d5:36:
         a4:5a:49:7b:28:f3:07:43:00:9c:22:e1:42:5e:d6:ee:7a:db:
         41:d2:e6:62:a3:15:8e:e7:5b:bd:5a:34:e7:b5:70:ca:44:af:
         f2:15:0b:81:7d:cc:25:2e:85:81:eb:38:2b:51:74:cc:9b:a9:
         d6:f7:7d:ec:b0:ee:67:e5:aa:12:80:68:da:6e:99:eb:27:86:
         05:d7:50:4d:d8:77:a2:e7:86:ce:8a:99:9c:4b:49:52:a6:ed:
         d0:27:0e:27:fa:69:94:a0:4d:31:37:3d:fa:ba:c5:0d:0e:60:
         56:23:f0:49:c6:0b:08:18:04:6e:5a:1c:c0:2c:df:e0:54:7e:
         66:2b:1c:6f:cf:73:a0:bf:ba:56:9d:5f:af:69:2d:53:a7:2d:
         12:17:c2:71:84:17:73:a6:be:87:91:4e:c9:72:ab:4e:27:58:
         f3:b0:a2:22:e2:b6:79:fb:38:25:1b:99:f2:bb:a9:27:49:29:
         4a:51:ba:d6:16:16:59:ab:1e:2e:fd:57:27:bd:f6:f9:97:2f:
         28:7a:b1:b5:5b:48:91:7b:c6:83:9e:79:be:8b:e9:75:19:0e:
         59:05:f5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:56:48 2025 by rpki-client