Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/60b287c4-77c4-3f17-9afe-c56cd4942c25.roa
File:                     60b287c4-77c4-3f17-9afe-c56cd4942c25.roa (raw, json)
Hash identifier:          8ZH/ZvLMSi6U5mVk+SizuQuzRAB6v6RBwB+RRAXo8tI=
Subject key identifier:   7B:99:D9:6F:D4:1D:81:C3:C8:1E:5F:A2:3D:E3:65:DD:FA:E9:B4:08
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C727BA08D79202DDBEFC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/60b287c4-77c4-3f17-9afe-c56cd4942c25.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     15169
IP address blocks:        104.134.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:72:7b:a0:8d:79:20:2d:db:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=756e69f5-f8e6-44c3-9a8c-012262f85156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:99:1e:2e:fd:97:e8:b1:74:96:21:bb:35:5f:
                    b2:06:25:95:c3:10:29:d7:a5:3b:df:e1:15:bb:27:
                    82:f8:b3:5a:c0:e0:84:20:13:08:0f:c1:a9:b5:a8:
                    1f:f0:58:36:a1:f5:8e:da:62:f7:2c:3b:ec:59:23:
                    bc:fe:01:05:4c:c0:e3:7c:11:a4:64:e0:47:f9:53:
                    57:ca:00:da:18:ee:e5:31:c2:7f:c2:2e:c3:44:55:
                    52:8f:d5:2e:f6:29:70:26:77:18:c1:00:7d:92:8f:
                    16:62:37:68:97:d6:b4:88:2f:a3:b6:a8:1a:76:a2:
                    7f:f6:33:5f:25:d7:d0:3c:87:49:3f:d6:f6:91:49:
                    ea:77:29:18:df:68:af:62:ef:e6:b7:10:6e:41:69:
                    e1:0a:24:b9:1d:e0:f0:3f:18:09:30:20:29:a2:81:
                    38:d3:17:a0:b4:45:26:54:cb:21:41:fc:1f:71:40:
                    b9:f2:44:78:a4:46:8e:9e:80:aa:9c:48:16:58:74:
                    7d:2e:c0:fc:6b:58:ca:dc:8b:8f:d8:17:8b:5d:f8:
                    2b:91:4f:21:99:7d:b6:37:8c:10:06:f1:95:ba:96:
                    11:a6:e6:f3:5e:53:69:b5:1a:b8:de:2f:08:06:73:
                    76:3a:77:aa:8d:81:06:17:18:81:57:84:e5:f9:b5:
                    aa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:99:D9:6F:D4:1D:81:C3:C8:1E:5F:A2:3D:E3:65:DD:FA:E9:B4:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/60b287c4-77c4-3f17-9afe-c56cd4942c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:27:e4:f8:e5:0f:e1:c7:60:03:0f:98:3e:b9:58:fd:0e:e5:
         11:4d:38:1c:92:b7:bc:28:0a:32:7e:8c:ff:86:6b:ff:95:b8:
         93:52:25:f2:4a:39:12:81:66:f7:2e:2c:2c:2e:80:2d:74:ac:
         2d:95:d7:79:35:77:19:30:de:a6:af:a3:38:2a:06:ae:35:39:
         62:4c:3d:1d:56:bc:1f:0b:43:59:17:54:1b:56:05:e8:41:2e:
         b5:63:eb:b4:29:fe:65:f9:f7:7c:90:11:bb:15:08:43:14:fe:
         37:d9:6c:08:45:bd:f5:53:6f:3e:45:64:5d:92:ef:54:fd:a4:
         37:2e:c3:05:0a:21:53:fd:db:b6:0d:0f:57:17:83:35:49:f1:
         57:35:65:17:c0:f4:80:77:59:7f:c1:eb:c3:51:83:71:c0:15:
         aa:43:d9:41:d2:51:e0:a1:f2:e6:b6:d1:6e:75:5f:b3:04:6d:
         72:fe:6a:04:f3:94:b6:7e:0e:cf:e4:de:69:90:f2:50:4c:52:
         48:01:e7:be:b7:e2:01:41:0f:57:56:37:ee:6c:7b:6e:34:86:
         65:a4:e7:d4:20:28:99:19:d8:4a:c4:52:d9:e4:bb:d0:0a:ab:
         76:49:2e:e0:6d:16:b6:36:a1:5f:e0:e8:34:e1:c5:90:e0:0a:
         12:2f:ec:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:57:35 2025 by rpki-client