Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/54ed55ff-51d2-32c7-b46f-d983c80ffff8.roa
File:                     54ed55ff-51d2-32c7-b46f-d983c80ffff8.roa (raw, json)
Hash identifier:          te5igzIRocR0Im54F4M3YJ9WptEkGK2Lu7ijgRf99xI=
Subject key identifier:   6E:8D:2F:1C:A4:7C:52:BF:5A:FC:05:BB:D3:E6:D3:54:2E:08:3D:50
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5F3776284428522F7921D940
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/54ed55ff-51d2-32c7-b46f-d983c80ffff8.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     395973
IP address blocks:        104.134.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:76:28:44:28:52:2f:79:21:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=0c3d83e5-b064-4204-ae5a-27f706b1cd44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ba:10:34:90:d2:b7:9e:7b:3e:e9:4d:04:4d:
                    3f:c5:63:58:cb:d5:95:59:dc:08:88:bb:69:b1:a3:
                    3a:93:26:2d:ec:4d:f0:f9:83:c7:a1:b6:a0:e3:0f:
                    2c:13:dd:1f:b8:78:b3:fc:e8:bd:4a:e4:c4:19:3a:
                    e6:6d:ea:6f:56:50:9c:02:dd:2f:85:b5:78:0b:f2:
                    09:41:eb:9b:47:49:56:fb:23:8c:70:67:f4:53:f9:
                    60:2d:27:35:22:98:ec:82:3a:94:cf:07:37:e3:91:
                    f5:1a:4d:cc:0b:e5:6f:9d:24:6b:89:a3:58:df:67:
                    eb:a8:30:7f:30:e3:3e:37:70:0f:8a:27:fa:38:7c:
                    4e:37:8e:d2:fa:d1:c9:c7:bb:03:8e:72:3a:26:57:
                    a5:7c:a7:95:4b:62:23:83:1d:73:49:f8:f7:e7:d8:
                    ad:13:00:64:ef:20:3f:47:96:21:89:05:27:a0:e4:
                    94:e3:08:ee:ae:e9:83:f8:8b:da:f8:60:de:37:0c:
                    73:19:b9:cc:eb:4f:f5:b8:ee:b1:0f:77:bd:ff:83:
                    fa:61:5c:5c:91:c0:d5:2d:70:bf:3f:e9:ef:9a:49:
                    00:7d:33:92:6d:f9:44:eb:af:4d:5c:43:82:73:0f:
                    a3:e2:fd:4b:eb:47:04:dc:cc:fc:e9:b7:a5:1d:b4:
                    95:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8D:2F:1C:A4:7C:52:BF:5A:FC:05:BB:D3:E6:D3:54:2E:08:3D:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/54ed55ff-51d2-32c7-b46f-d983c80ffff8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:81:06:81:ff:96:e8:d0:93:78:5e:17:ce:d1:ff:59:1f:5f:
         48:96:67:82:39:5e:f6:1f:59:30:23:42:3a:d3:5d:61:6a:56:
         e8:0b:eb:e4:5f:3c:d4:1a:26:e5:49:11:e7:28:64:a8:41:28:
         8a:a8:df:01:b2:f2:d0:33:fb:01:b7:3d:d0:5e:48:e1:73:8f:
         9f:93:c0:da:ca:f4:1d:59:01:1d:08:f2:1b:9b:04:fe:6b:d5:
         68:f8:95:78:c7:89:6e:b3:a1:04:0f:1d:e8:71:2f:30:a3:ad:
         e6:d7:4c:71:14:8f:38:76:1b:c0:98:03:eb:97:2d:65:74:88:
         ac:ee:b2:20:38:75:0d:f4:37:be:98:90:38:de:81:d1:54:fe:
         6c:ff:7d:78:08:ac:ae:9e:25:2b:06:72:31:9a:bd:37:4e:c2:
         0c:00:4a:e1:07:0b:63:f7:ed:c7:d9:f0:3c:25:fa:2b:69:01:
         66:ba:74:c1:64:25:af:aa:ed:8a:37:14:b2:70:56:35:ae:c9:
         ca:6d:b3:0a:d9:c2:48:38:24:da:7d:d6:1a:b3:38:85:75:9e:
         89:00:3e:8e:6d:f9:d7:71:15:2c:37:6d:9c:ae:04:b9:9a:21:
         a5:80:e6:97:34:ce:6b:67:f1:32:e6:f6:23:95:f8:2f:58:a1:
         d7:66:82:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:06:11 2025 by rpki-client