Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/73b608f3-99c9-3456-b02e-041a48f7c91a.roa
File:                     73b608f3-99c9-3456-b02e-041a48f7c91a.roa (raw, json)
Hash identifier:          rIfHn5MAKq6Xf7m19YEtFMkDS6S5ELE0foq/nAbBgvw=
Subject key identifier:   61:76:18:8B:1A:5B:F5:CB:27:5C:2A:25:0D:4D:DC:DE:18:5D:9A:E0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5F3748AD06257B50DBBEA940
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/73b608f3-99c9-3456-b02e-041a48f7c91a.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     15169
IP address blocks:        104.134.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:48:ad:06:25:7b:50:db:be:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=f32a23ae-8420-41f5-a9cd-5d3d57883ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:53:9f:d2:32:66:5b:34:ec:7c:0c:54:12:
                    8a:bd:7a:f2:6e:09:f2:fb:90:4b:45:64:3c:7d:c5:
                    eb:73:36:a2:03:e9:ce:1e:63:df:3b:2c:2c:6b:4f:
                    c2:cc:6a:79:02:a7:28:88:36:05:01:0f:41:07:9f:
                    cc:5f:6f:76:80:db:41:47:b2:8e:49:64:4a:09:ee:
                    cd:2e:19:51:93:54:6b:0c:3e:c2:0f:44:f1:91:f6:
                    f5:a3:9e:f8:9c:69:ad:0c:e5:d2:d1:6e:08:bb:b1:
                    25:42:76:64:15:18:68:5c:8d:cc:31:36:a4:4f:0c:
                    b3:20:b3:34:be:97:8a:b0:0a:b0:08:e5:8d:1e:28:
                    38:4e:73:23:12:6e:23:1a:17:c4:b1:1c:68:a6:73:
                    7f:40:30:52:7b:22:0a:42:84:9b:9d:60:6e:35:5e:
                    50:a5:23:89:8e:b4:c5:ee:cf:d6:c4:32:04:2c:79:
                    ca:4a:0a:34:12:0e:fe:04:cd:3a:4d:ae:50:51:ee:
                    87:3e:d8:9f:0a:fe:78:5e:8a:bb:3a:9e:f6:fa:c4:
                    28:72:36:dc:31:c1:a5:81:ba:0a:81:2b:5c:90:d7:
                    be:c3:3d:75:68:30:3f:e2:d0:18:44:7e:fd:88:cd:
                    3a:19:1e:9d:0c:dd:5f:f4:2a:dc:be:2c:6b:78:f2:
                    76:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:76:18:8B:1A:5B:F5:CB:27:5C:2A:25:0D:4D:DC:DE:18:5D:9A:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/73b608f3-99c9-3456-b02e-041a48f7c91a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:83:aa:6b:a5:f1:50:16:ff:c5:40:11:bf:ac:dd:bf:eb:b8:
         40:d2:19:8d:ed:fa:d7:4c:a3:c2:4a:48:ef:2c:33:08:33:84:
         e8:df:a4:02:66:97:b1:d4:ec:43:19:e7:79:e8:6c:ec:66:a6:
         03:11:58:73:af:2e:ea:72:bf:ab:d1:59:a4:47:a8:1e:c2:86:
         3e:b1:5b:2b:38:71:0c:c1:df:d6:d9:9a:ac:a2:0f:2f:9e:3f:
         a2:ee:10:0c:ed:6e:13:66:91:5b:cd:e9:ff:d0:15:59:2a:7d:
         22:8d:86:80:b2:14:00:f1:fe:fe:4d:50:0c:c9:97:8b:ab:1b:
         72:04:60:88:69:e1:e3:4a:3b:95:7d:9c:1b:b7:49:69:00:aa:
         ac:be:20:c8:a3:28:8d:57:76:1e:9a:44:82:8e:ec:65:ee:74:
         9f:44:0b:a3:fc:3c:34:3e:a0:f0:c8:c6:df:81:c5:df:e3:f4:
         0a:71:b6:e5:58:ad:83:a9:48:41:3d:9d:13:91:a8:90:bc:46:
         c8:7d:84:43:5d:a7:86:da:5a:b8:4b:ad:17:f3:1b:c3:1e:2c:
         7c:53:ce:8c:d9:27:ee:b9:8d:66:87:a4:a8:53:bd:53:b9:60:
         93:7f:3d:ae:51:34:f1:6c:75:7e:2c:35:1d:41:46:da:6d:f9:
         9f:e9:c8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:06:15 2025 by rpki-client