Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bda2799-16ca-38bd-85ba-a20fc951ebf4.roa
File:                     4bda2799-16ca-38bd-85ba-a20fc951ebf4.roa (raw, json)
Hash identifier:          rIbaA0kOYg2+yl01uQSGeSBZtH+SQKq+KM377CEU33Y=
Subject key identifier:   CA:31:39:BA:12:73:04:AE:C9:DA:60:D5:94:73:A5:D6:F8:85:DC:EB
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5F375D46125316679D636600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bda2799-16ca-38bd-85ba-a20fc951ebf4.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     41264
IP address blocks:        104.135.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:5d:46:12:53:16:67:9d:63:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=518094b5-7afb-414f-b1b9-fda0015bad5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:06:40:10:b6:af:40:d0:fc:8a:7b:66:7f:
                    b5:ab:8a:d0:8f:cd:1e:e5:f4:26:5a:cd:c4:f1:5f:
                    c8:07:bb:77:1e:b2:51:05:da:b2:63:5a:6d:be:ac:
                    51:06:0e:a8:6f:35:fa:c3:76:0e:54:33:62:ff:3c:
                    d9:ed:37:ef:f4:26:a5:d3:21:8a:0e:8f:4f:91:41:
                    3b:18:64:91:95:43:88:2c:7c:ba:81:74:4f:12:06:
                    8a:f1:e4:6a:cd:a4:cb:34:38:a0:14:0d:3b:fe:76:
                    65:24:78:2d:3a:83:c4:e5:6a:95:27:8f:8e:d2:7b:
                    17:f4:57:ae:44:26:e5:67:36:88:4c:d5:a5:ef:88:
                    59:9b:7a:b8:c4:da:99:0e:cd:1f:f5:ac:56:db:83:
                    f4:b3:67:23:fc:78:aa:ef:c2:1f:da:1a:d8:33:08:
                    7e:3f:1a:ac:42:61:66:df:3f:8b:58:c6:8d:22:4e:
                    e5:2b:47:43:3e:b2:bc:c4:71:a3:82:48:b9:07:ee:
                    5f:67:17:8d:b2:6e:63:cd:66:7f:5b:5e:bf:97:3c:
                    a8:fd:e3:ae:c4:4a:5e:06:68:0e:d9:0b:2a:26:b1:
                    75:b4:1f:c1:4a:85:a2:40:34:6f:f9:f6:85:ed:a8:
                    07:73:fd:c5:a7:60:ab:95:90:ee:2e:74:1b:f2:ee:
                    55:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:31:39:BA:12:73:04:AE:C9:DA:60:D5:94:73:A5:D6:F8:85:DC:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4bda2799-16ca-38bd-85ba-a20fc951ebf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:62:ff:78:d5:ed:22:95:03:ac:95:c1:c2:58:e3:b1:51:8e:
         a5:bb:ec:19:dc:0e:0a:52:bb:21:f2:31:42:4a:ae:e7:5c:d3:
         2c:42:ea:20:b5:fc:54:5e:4c:6f:f5:b8:fa:c8:a9:94:3b:06:
         77:3f:d9:a0:1f:3f:52:04:07:f6:2c:ee:ca:75:13:dc:9d:67:
         06:cc:45:43:7b:07:0b:ea:bc:de:18:50:93:f6:86:2f:93:1c:
         47:14:23:54:1b:7e:80:16:2a:e0:68:d0:91:d4:bb:bb:44:3c:
         12:8b:fd:c1:43:54:83:71:9b:9f:4c:72:2c:41:64:72:59:89:
         8b:30:68:16:b7:c6:4f:aa:47:3f:08:e9:33:91:da:42:d0:91:
         59:74:d1:c7:70:99:a3:8a:28:d1:60:79:5d:5f:8d:3d:9a:8d:
         55:d8:7e:a9:0d:5f:5e:58:ce:92:96:1f:64:cb:4c:3d:00:37:
         f1:63:3e:0a:5f:2f:85:1a:c3:22:29:ab:68:0c:89:74:6a:1b:
         d4:85:f4:61:65:b7:c7:9b:dd:6a:1e:c3:0f:26:53:99:70:da:
         11:43:89:9b:04:de:06:25:df:8a:7e:59:65:d6:e7:86:43:67:
         d4:50:a6:ce:74:a3:fe:4d:ab:8c:c5:1d:8c:12:a8:5d:d1:61:
         70:d8:05:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:51 2025 by rpki-client