Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6059cfd3-0f14-3d30-b4c8-3823f3b4b917.roa
File:                     6059cfd3-0f14-3d30-b4c8-3823f3b4b917.roa (raw, json)
Hash identifier:          /6oUndTOaOmexTuiRczt/MnYZdFowi6/G9OWj5R4hRA=
Subject key identifier:   C3:BC:D4:C2:C4:49:FD:FE:A2:06:1F:8B:76:53:6D:DE:90:C0:5C:BE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C717C4D5B73E1E80DBBC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6059cfd3-0f14-3d30-b4c8-3823f3b4b917.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     15169
IP address blocks:        104.134.176.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:71:7c:4d:5b:73:e1:e8:0d:bb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=3665d2d5-08b4-4286-a3e0-ea7eb0b89c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:88:59:37:0a:fe:11:89:b8:e8:dd:29:51:7a:
                    da:34:bc:38:87:07:a2:63:40:8a:05:46:9a:21:0e:
                    9e:49:14:c8:ba:2a:83:52:74:11:a7:6e:eb:45:4c:
                    e7:45:bb:ef:6a:f0:68:93:64:ef:db:4b:12:9e:84:
                    02:34:ff:66:a7:e5:60:f9:ec:18:1b:f3:da:59:8b:
                    57:f1:17:a3:77:eb:13:a6:64:3a:a7:49:2a:0d:34:
                    17:58:85:3d:37:40:60:9e:8a:5e:d0:10:b6:a9:82:
                    43:b1:1e:dc:72:81:65:31:57:e4:b6:f5:99:67:fa:
                    db:cc:ec:78:44:75:de:1a:af:40:66:95:9f:39:8a:
                    05:fc:22:38:66:6f:fc:60:4e:ff:45:0b:79:1d:de:
                    b1:ee:cb:42:d5:84:b1:d5:ce:fe:77:87:43:a6:d6:
                    d9:cc:f1:75:f9:ec:34:c3:94:34:99:b1:4d:23:dc:
                    9a:2f:e0:66:5d:2b:20:04:a4:63:51:dc:be:9b:4c:
                    d4:47:1f:09:22:57:bb:72:0d:3a:c9:35:dc:70:79:
                    94:af:7d:9a:07:be:f7:a1:c2:69:71:05:fd:2d:0d:
                    31:34:0f:04:00:26:17:87:a5:a3:fa:fa:48:2d:34:
                    89:17:d7:97:6e:f1:3e:2d:5c:d1:97:7f:10:83:85:
                    47:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BC:D4:C2:C4:49:FD:FE:A2:06:1F:8B:76:53:6D:DE:90:C0:5C:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6059cfd3-0f14-3d30-b4c8-3823f3b4b917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:52:e3:94:c0:bc:04:d8:26:7b:93:6e:13:13:5d:fc:58:cc:
         b4:14:2e:07:ac:01:e6:9d:2a:c9:f9:f4:0c:ae:9b:f8:a5:8a:
         f0:41:25:ec:7b:4a:b7:62:cd:83:4b:be:eb:1c:97:be:07:74:
         1e:32:7b:16:11:6b:28:3f:04:73:1c:b6:65:a6:34:a6:f4:71:
         f2:5a:e2:3f:9e:32:bf:ed:3d:14:31:4a:ba:93:96:08:2f:e6:
         fe:d8:98:a9:89:f0:bf:f9:a5:ff:79:19:c1:cf:f6:3f:22:0e:
         77:33:08:73:c5:43:4e:53:b5:53:dd:a8:be:70:78:35:2b:43:
         b3:d2:5e:78:67:4f:b5:de:2d:e2:e8:eb:9b:6d:75:08:33:b0:
         8c:32:cd:80:4c:3f:08:f3:a8:dd:65:64:83:cb:11:7d:d4:2f:
         95:52:6a:22:de:ad:3c:7b:b6:cc:26:0f:75:1c:72:82:c3:13:
         1c:0f:77:ba:b1:f1:c7:fe:45:c6:e6:67:9a:7c:11:cf:9b:88:
         d2:7e:15:96:dd:a4:f2:28:5f:66:86:29:57:d6:24:6f:ef:d5:
         75:34:51:33:04:aa:3d:6e:f5:02:79:c7:34:97:eb:47:61:40:
         a7:33:7e:76:07:bf:16:02:dc:6c:cc:8b:2d:76:ff:52:a0:d2:
         ec:ef:b2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:06:21 2025 by rpki-client