Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7ddbc1ff-5bc9-3b16-8fa1-14d8a14ccb02.roa
File:                     7ddbc1ff-5bc9-3b16-8fa1-14d8a14ccb02.roa (raw, json)
Hash identifier:          s3prlPsqLENOdCk4YKrrrOrYLmj/JuQdgMtT8IkdTVk=
Subject key identifier:   EA:10:4C:2F:A7:91:56:8D:CD:F1:22:AF:0C:DC:31:8D:4A:83:21:9B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5141ED408ACC740C1D515480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7ddbc1ff-5bc9-3b16-8fa1-14d8a14ccb02.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.132.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:ed:40:8a:cc:74:0c:1d:51:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=6c88448c-2506-42b9-a29a-bc31a34f5dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3e:fc:8e:85:de:1d:a5:05:0c:d4:16:32:ff:
                    23:19:78:96:51:4a:27:a7:3d:bf:7d:9c:a4:16:3b:
                    23:d3:0c:50:30:58:99:eb:fc:35:28:73:7e:dc:67:
                    49:69:4f:bd:a4:2d:34:64:c9:ab:cc:ec:f7:fa:7a:
                    1d:d5:f4:b3:7a:65:b2:0d:33:00:98:0f:cd:fc:8f:
                    a5:55:3c:0a:ce:c9:20:58:a0:d9:7b:f8:ed:fc:c0:
                    66:df:cc:26:1e:18:fa:a0:49:03:b6:57:83:eb:a2:
                    09:d6:5f:eb:15:f0:79:4d:9a:ae:6a:a0:e1:be:53:
                    42:7b:c3:41:3e:82:ae:2d:b0:23:92:e2:b1:5c:97:
                    5b:a9:25:4b:45:b3:49:34:f5:61:8d:89:c9:6f:eb:
                    91:f8:ad:a0:99:31:47:97:21:c6:ab:f5:4d:f6:71:
                    63:af:b7:a2:a0:df:66:1c:c3:1f:68:65:d8:f5:c8:
                    43:4d:60:6e:1d:6c:3e:10:88:53:97:ca:8a:1b:5c:
                    3d:db:a9:33:89:50:c6:ee:0b:67:80:b3:90:ae:70:
                    f8:82:cb:41:55:57:6c:c5:a5:26:61:f5:55:5b:7d:
                    e5:8a:e2:be:ed:dd:2f:bd:70:a2:61:41:dd:a0:76:
                    ed:d7:74:7c:ec:0e:71:3d:0f:0f:b6:14:e2:19:21:
                    aa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:10:4C:2F:A7:91:56:8D:CD:F1:22:AF:0C:DC:31:8D:4A:83:21:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7ddbc1ff-5bc9-3b16-8fa1-14d8a14ccb02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:86:10:4e:06:56:78:57:d4:a8:62:cb:18:2c:99:4c:7f:9c:
         c9:24:2b:6b:37:9b:c5:71:0a:f0:a0:ae:51:ee:e4:81:60:89:
         57:31:52:d6:f9:70:16:26:bf:cd:2d:9a:89:ba:19:27:44:4d:
         7a:34:95:4e:61:4d:b9:fa:6f:11:df:20:77:8a:f7:46:2e:9f:
         86:a3:b8:a1:c0:2f:34:bb:c3:85:88:74:8d:b6:61:83:7f:86:
         e2:cf:2e:f8:38:36:12:a2:13:fe:ed:fa:4b:87:50:f1:76:5e:
         80:73:71:2b:68:94:79:08:c7:c9:5d:28:af:db:cd:6f:4a:48:
         b4:0b:e1:42:e6:de:7a:c6:e9:af:7e:5d:fe:d5:44:a6:7e:81:
         f7:9f:19:1b:6b:fc:f2:37:71:26:0b:65:d1:25:b7:93:09:b1:
         2e:50:88:de:8c:bb:71:5b:b9:23:c5:98:0d:44:73:ec:09:9e:
         45:e1:5e:45:c1:21:b9:84:f6:ab:71:14:c6:08:93:b3:f2:f6:
         8a:4f:33:29:14:7b:08:0d:0f:45:ab:1e:9b:0b:2e:bb:69:31:
         69:3a:29:dd:ea:2e:95:01:2c:8f:f5:5b:94:ef:cc:0b:ec:1a:
         8d:c1:8a:c0:3a:aa:25:2f:e9:41:73:e2:8a:00:31:8f:d9:72:
         ed:31:57:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:27 2025 by rpki-client