Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/52592551-32e1-32db-bb0e-dad88775240d.roa
File:                     52592551-32e1-32db-bb0e-dad88775240d.roa (raw, json)
Hash identifier:          QWBmGmhVMDAiBng4S82+yHpisXlXjheHTQE49e4RnaI=
Subject key identifier:   E4:9D:2C:6D:39:08:67:63:D2:7A:05:54:93:FF:41:AB:74:E8:6D:9F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5F376EAFBEFB73549846D200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/52592551-32e1-32db-bb0e-dad88775240d.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     15169
IP address blocks:        104.134.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:6e:af:be:fb:73:54:98:46:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=a2c6a203-59e9-478d-854f-d87876c24e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:58:14:b9:e7:fa:26:c0:1c:fb:cc:28:cc:
                    e5:a4:3e:55:ab:2e:92:43:d5:ec:8d:38:a8:9e:72:
                    ea:5a:a6:3e:21:e7:7b:cf:b7:fe:ac:bf:27:83:e2:
                    94:28:3c:a9:95:43:ab:7e:26:60:55:c8:19:9b:0c:
                    3b:a8:1a:15:e1:1c:98:51:c6:1d:43:15:86:65:a7:
                    06:53:78:df:dc:58:48:10:88:53:f5:18:26:76:59:
                    91:c0:1e:db:dc:c6:ed:90:fb:11:ff:83:8b:a8:a8:
                    40:af:23:18:33:29:4e:b0:6c:83:03:e3:49:af:6f:
                    b5:2c:02:a3:be:94:7e:7e:ff:fe:58:23:bc:b1:7a:
                    0b:45:89:f2:f9:dc:09:01:c5:13:9a:19:8f:a5:01:
                    7a:15:35:0b:f1:91:88:b8:a9:01:74:82:75:b8:63:
                    6f:27:6f:00:7f:50:0d:01:64:81:18:dd:db:58:65:
                    12:87:bf:dc:5a:cf:d0:54:73:81:e0:9b:f4:63:47:
                    7a:d5:62:d8:94:0c:1f:c9:ba:8b:54:22:02:a5:5b:
                    ff:e4:b5:84:1b:80:dc:d2:9e:33:23:95:9a:e2:20:
                    78:a1:33:78:6a:8a:67:a9:7e:25:52:91:4f:7c:ea:
                    af:01:32:bb:ea:10:c4:2e:70:44:1d:f9:c5:6b:3a:
                    6e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:9D:2C:6D:39:08:67:63:D2:7A:05:54:93:FF:41:AB:74:E8:6D:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/52592551-32e1-32db-bb0e-dad88775240d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:5f:fd:13:95:34:2d:54:98:c2:b7:77:c4:1d:ea:ca:bf:a7:
         93:5c:34:be:fa:88:ff:ce:39:64:35:c8:47:00:88:61:90:75:
         68:5d:57:22:64:8e:dd:e4:a1:ec:67:42:ba:86:7a:7d:50:7a:
         da:b9:2c:79:c1:90:b0:b8:7d:5c:af:fd:3b:a6:29:9b:8d:18:
         6a:75:f3:7b:58:fa:24:c5:24:21:74:28:bb:1f:93:91:94:f0:
         be:45:38:a9:09:88:83:ae:1d:9e:52:7d:87:52:db:d2:de:2d:
         dd:9a:9e:74:e9:dd:4c:36:aa:48:8e:5b:6c:2b:95:38:f6:14:
         b7:d2:e6:5c:2d:3c:6f:7a:ea:8b:1e:b9:11:2a:7e:0a:92:39:
         8d:44:4a:82:77:25:e8:20:ac:e2:6a:02:7c:7b:ad:88:62:99:
         9a:8b:3b:1f:68:54:b6:ed:c8:79:47:e6:c4:88:f6:1b:17:cd:
         18:a9:0b:3d:3a:b1:ea:50:c3:0a:23:5e:a2:1c:ab:43:a1:c3:
         05:c8:84:ea:de:d7:af:b8:ef:c7:10:33:80:91:bf:f2:e9:bd:
         f7:4f:57:9e:4f:f6:76:de:1c:cd:c7:f1:4e:a9:23:3b:dc:3f:
         ee:8c:49:da:93:bd:7b:ef:c0:74:0e:d7:99:62:09:b9:9b:d1:
         54:62:d1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:11 2025 by rpki-client