Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6b840c2e-0d48-3995-9b59-e0407c985374.roa
File:                     6b840c2e-0d48-3995-9b59-e0407c985374.roa (raw, json)
Hash identifier:          0U3Ac5SqHGNnigWUhm3bivoaCKkXDgki2CL7tCWxin8=
Subject key identifier:   7B:D3:E8:D2:74:42:68:1B:17:F2:23:B8:C0:B6:34:BD:30:C7:A3:45
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5F3774560D01331963001A00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6b840c2e-0d48-3995-9b59-e0407c985374.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36411
IP address blocks:        104.134.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:74:56:0d:01:33:19:63:00:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=6ff4a6c9-bd91-436c-aa98-818eee9b4126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a0:2e:d3:42:cf:a3:19:1e:c5:1c:da:64:29:
                    d0:a3:0e:4e:73:c6:8e:8f:fd:fe:2a:74:83:0d:e7:
                    78:fd:6d:d3:09:7f:58:4d:47:ba:31:92:79:2f:7f:
                    a7:e3:87:19:2f:15:ad:12:81:75:a2:08:88:02:c8:
                    62:30:aa:69:f6:19:45:c0:f8:ed:31:4d:8e:e7:c9:
                    c0:24:bf:49:9a:13:52:a1:f8:31:e4:32:80:4a:3f:
                    f2:fb:9e:02:1e:b8:38:7f:4f:96:0a:1b:c9:47:be:
                    5a:07:5b:e7:a3:ef:ad:63:5b:0f:52:02:6c:c2:b4:
                    0c:9d:70:67:cd:d2:a8:9c:65:20:af:aa:4b:83:75:
                    ed:5a:41:99:61:a1:06:a2:e1:c4:ef:a5:de:6d:e8:
                    01:74:50:51:de:48:86:aa:1e:af:52:20:fc:aa:4a:
                    2e:fa:ec:ff:66:28:48:20:d9:e2:75:12:74:1e:e2:
                    64:d6:eb:4f:71:6d:ec:f8:bf:e9:7d:ce:94:7a:c5:
                    d1:b2:26:94:b0:73:ef:c1:cc:d9:33:a6:74:4e:88:
                    e2:d4:27:2d:48:b7:de:be:2d:44:98:57:ab:8c:fb:
                    c0:1b:41:9a:f9:e1:70:f7:53:5c:5b:d3:d3:a8:61:
                    40:77:57:18:5b:04:34:c1:23:81:59:4c:03:a0:f2:
                    92:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D3:E8:D2:74:42:68:1B:17:F2:23:B8:C0:B6:34:BD:30:C7:A3:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6b840c2e-0d48-3995-9b59-e0407c985374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:aa:83:24:ed:31:ab:67:c8:dd:93:21:f3:db:05:c1:7c:47:
         39:28:0e:a6:80:16:0f:a6:28:8e:24:48:03:0b:57:3a:5d:39:
         9b:c9:f4:9e:be:e8:b4:67:2e:66:c1:51:95:4e:de:82:30:b6:
         e3:89:f6:eb:af:be:a7:01:d4:ad:6d:d7:75:a9:a8:88:17:c4:
         16:00:29:73:08:9f:be:56:f3:55:5c:ca:a5:e1:ee:d1:18:3d:
         65:c9:5c:44:c2:31:48:8d:aa:28:a1:dc:a0:35:32:37:9a:00:
         fc:0f:51:84:76:6f:86:45:bb:24:ca:b1:15:ea:f4:e8:69:d8:
         0f:1d:34:ca:1e:63:a6:f7:59:10:3c:15:a8:e3:7d:7e:ef:ea:
         30:d2:c6:39:7f:cc:ce:d4:d4:39:4a:de:5f:b3:16:19:85:e7:
         5f:9f:e9:f7:27:9b:5b:fe:d6:9c:fe:c4:3e:e7:fb:80:23:9d:
         5c:a9:03:9e:87:9b:2b:62:8b:51:d6:02:d4:a1:92:3e:af:86:
         f0:4e:3e:2e:fc:bf:49:f0:7f:04:78:95:f4:5b:e3:4b:01:98:
         01:65:93:0e:72:ab:d1:35:9a:f3:e0:24:47:3b:9a:38:28:ad:
         4e:3d:2e:52:35:2e:1a:62:64:ff:9a:8e:eb:9b:7a:1c:6e:91:
         f3:b6:1e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:12 2025 by rpki-client