Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/736c7250-f416-39e1-b797-63605aaa0a80.roa
File:                     736c7250-f416-39e1-b797-63605aaa0a80.roa (raw, json)
Hash identifier:          BKxEpXDcOiSuKD9R9Gmy6Lpcc10r2/FAfUk31TyNMGE=
Subject key identifier:   EF:F4:7C:9F:B2:65:76:CF:23:8E:DD:EF:A9:A8:30:59:A7:65:98:26
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B76F22195157690D943022700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/736c7250-f416-39e1-b797-63605aaa0a80.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     36411
IP address blocks:        104.134.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:21:95:15:76:90:d9:43:02:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=a1d9f1cf-514c-41fb-b049-e7dbcd238af7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2c:c5:a8:11:20:40:78:1e:6e:c4:fc:17:4b:
                    5e:eb:88:26:28:de:77:da:5e:03:d4:bd:60:19:54:
                    64:c8:f6:7a:28:e7:04:99:9a:3f:d2:13:43:56:30:
                    fa:55:85:16:c4:11:ca:51:17:b5:9b:03:52:09:60:
                    01:f1:7c:e8:fd:02:fc:b5:63:8a:f2:e0:b0:5a:36:
                    94:bf:66:8d:62:c9:ef:03:75:f4:30:a5:3d:cc:b6:
                    8a:19:29:44:5c:14:0e:c8:22:79:75:76:19:30:01:
                    ab:1f:9d:45:0a:42:06:ca:4c:5c:56:b6:23:fe:72:
                    09:0f:c5:f3:b3:f0:a1:79:b6:25:6e:7e:a1:72:47:
                    81:16:d6:53:d1:67:bb:ef:cb:6c:7a:25:86:cf:59:
                    a5:6e:f8:5d:b6:28:7e:ce:78:4e:06:df:4d:63:fa:
                    9d:58:30:29:d8:62:3a:70:f4:f4:26:8c:af:bb:b4:
                    bd:67:77:6f:b6:a7:17:6a:ea:72:0a:19:b9:4e:bc:
                    8c:5a:a6:53:0d:81:5d:b7:0f:03:31:3c:e6:f4:ac:
                    b5:1f:c5:f1:93:cd:66:81:b0:60:7e:6b:a2:38:a4:
                    bd:29:25:95:4c:30:4d:b5:2c:d3:bc:42:e1:d9:df:
                    db:c7:b1:14:10:c9:1c:0e:4a:0c:17:d2:0c:cb:25:
                    bf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F4:7C:9F:B2:65:76:CF:23:8E:DD:EF:A9:A8:30:59:A7:65:98:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/736c7250-f416-39e1-b797-63605aaa0a80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:0a:31:62:4d:e6:17:6b:5e:b8:cd:0b:2d:68:21:a0:03:a1:
         6c:d9:c4:58:7c:20:7a:1e:c3:9e:74:ef:6b:e4:03:15:93:84:
         82:ca:e6:c5:4f:ee:3c:78:8d:ca:92:fc:1e:9a:06:66:3a:d5:
         8e:31:5e:f8:f3:a1:53:8b:fb:4f:cb:0f:f6:a1:20:6c:f5:78:
         c8:be:57:55:f7:59:03:91:92:a5:7e:1d:72:e7:a7:1a:88:f2:
         f5:5c:76:09:0b:9b:03:75:d2:81:cc:7f:50:07:f8:51:73:4f:
         3c:f9:8c:e9:7b:c7:23:a1:85:50:b2:d4:ab:d4:a1:6c:cc:69:
         29:20:a0:94:9f:f6:a2:c4:0e:64:2e:ab:af:bd:7a:c4:11:a1:
         b7:92:7e:76:5e:e0:97:5b:b3:67:b4:95:08:23:62:d7:44:9e:
         1c:b4:4c:c0:f6:44:3d:83:b1:5b:07:45:91:fb:3e:12:51:0f:
         4d:21:07:73:e6:98:b9:af:d4:c1:72:96:b0:57:b4:ee:3e:0b:
         5c:80:db:ad:3a:c7:01:dd:8c:30:69:bc:92:25:06:a8:62:a0:
         1e:6c:b6:c8:40:57:ef:88:4a:82:f0:83:fd:d2:6e:c2:8d:ec:
         c1:97:7c:b3:74:c8:09:c7:1c:92:ff:67:e6:e8:69:88:de:dc:
         ed:f0:ad:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:01:12 2025 by rpki-client