Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/785106ff-56d5-3672-b19b-4db474832dc6.roa
File:                     785106ff-56d5-3672-b19b-4db474832dc6.roa (raw, json)
Hash identifier:          sRQAnAsZk8nczno3Q/nHZPKOoK3doivnO9pBEZ5/mDo=
Subject key identifier:   49:1A:ED:C1:95:36:27:3D:60:BC:44:97:15:AB:6C:09:DE:C8:59:81
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C8E7E062AD767AAE99600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/785106ff-56d5-3672-b19b-4db474832dc6.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.133.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:8e:7e:06:2a:d7:67:aa:e9:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=1bdddf4c-b9cb-4632-ae24-c18dbf99d688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:91:82:e0:0f:f6:35:45:90:b9:79:5b:88:52:
                    51:fc:44:15:62:06:f9:de:38:bf:46:6f:9a:38:1b:
                    99:ce:1c:8e:cd:bf:8b:36:77:47:0d:27:26:9b:b0:
                    fe:f5:3c:06:45:4d:3b:02:6d:f4:80:81:0a:be:9e:
                    f6:3e:c9:c4:5b:2e:c8:68:1a:6f:c2:36:19:28:69:
                    86:51:d4:a8:32:74:7d:16:ec:da:37:c1:74:44:ea:
                    cd:88:c9:a5:24:fc:22:17:ba:77:f9:29:77:13:c8:
                    77:23:03:76:9b:d0:c6:07:60:55:15:27:c7:10:29:
                    60:8c:38:09:73:8a:63:50:91:14:10:64:7d:6c:41:
                    a3:c8:c7:7a:ea:7f:b0:13:a7:69:89:4a:97:2e:7d:
                    d4:1d:0e:1a:de:5c:96:be:7c:a2:eb:24:e4:54:c4:
                    41:c0:b5:16:c9:f5:44:b0:7b:88:a8:4b:9c:a1:15:
                    5d:93:1e:d0:8a:de:ed:f2:90:e5:f2:cd:ac:1c:14:
                    66:06:12:eb:f2:6b:f8:68:32:86:15:22:be:6e:8a:
                    e3:5f:25:70:be:62:98:ca:5d:90:e7:fc:c6:33:b9:
                    8d:73:54:de:d4:d9:b2:74:dc:af:77:cc:23:c2:22:
                    b5:13:4c:33:7c:a7:c6:48:ba:06:cb:eb:cb:51:1a:
                    21:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:1A:ED:C1:95:36:27:3D:60:BC:44:97:15:AB:6C:09:DE:C8:59:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/785106ff-56d5-3672-b19b-4db474832dc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:59:62:ff:c0:f9:68:16:50:74:52:d0:83:10:f5:05:95:0f:
         fa:d6:d0:37:97:dd:42:48:c2:02:21:85:98:be:22:19:b3:3f:
         da:ef:48:11:e7:b0:73:ee:e1:5b:78:4a:45:a2:97:b4:bb:77:
         5b:ef:a7:c7:ba:08:e4:3f:29:5a:28:c8:2b:74:99:e6:b0:56:
         0f:63:15:de:db:d9:1b:c2:18:34:0e:66:18:59:6d:af:d7:74:
         1e:5d:0f:21:ad:aa:24:f4:27:7c:09:8c:4b:4b:4b:9b:fd:7a:
         2a:cf:92:24:69:b8:d5:0b:e0:a8:0b:26:d7:07:5e:52:ec:66:
         89:71:3a:ee:90:c6:27:85:bc:78:01:c3:97:98:92:1a:46:e3:
         e1:31:88:89:be:92:79:3d:33:90:3a:50:17:80:84:0b:13:52:
         f4:73:6b:1c:ab:4b:27:ad:69:dc:e9:6a:72:1a:63:b0:87:9f:
         13:12:4b:a5:b2:4e:f9:b9:41:01:c5:2b:c3:a5:7e:b6:e2:0e:
         0e:52:0b:94:d1:0e:f4:8d:90:ad:6e:de:4d:64:34:a6:f1:93:
         62:07:75:be:60:86:5f:94:27:a7:5f:61:9a:aa:d1:5d:96:dd:
         dc:7a:62:dc:3b:75:28:87:42:49:06:4f:ed:bf:bc:86:90:b2:
         f3:7e:a9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:34 2025 by rpki-client