Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8242b901-13b8-31fc-b0af-a3b05bee017f.roa
File:                     8242b901-13b8-31fc-b0af-a3b05bee017f.roa (raw, json)
Hash identifier:          xSESuOGvjJ26fpU6Bz3W8Gn+Zj243Y1Sz4sJxaBz2XQ=
Subject key identifier:   90:91:D8:B0:7F:D3:63:7F:F3:C2:8F:10:B5:8F:92:C3:FC:3C:F5:30
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C81E9EBE47C68AED24140
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8242b901-13b8-31fc-b0af-a3b05bee017f.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     395973
IP address blocks:        104.134.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:81:e9:eb:e4:7c:68:ae:d2:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=8ecb4cef-5e25-4874-a42e-67de8f728f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:be:02:e6:02:26:c3:7f:39:fb:30:2c:54:
                    75:63:7f:8a:1c:fa:5f:a6:c4:f3:42:74:38:f4:64:
                    a0:50:33:ba:66:4a:eb:89:34:87:e8:28:25:aa:ef:
                    8e:90:46:90:98:9f:8e:ec:c7:7e:73:a6:c3:27:66:
                    99:35:72:12:fd:54:71:6c:40:4c:47:7e:55:5d:ce:
                    8a:dd:d3:c9:65:3d:0e:70:b8:b1:d2:84:7e:b0:ea:
                    7e:ff:8c:fb:29:5f:bb:73:fc:88:58:f9:41:3e:6e:
                    ee:7c:0d:70:20:65:24:12:88:4c:80:6b:1d:f7:69:
                    a6:7d:65:ac:41:4f:98:37:97:fa:21:f3:ab:4f:88:
                    bd:af:ed:ed:08:9f:04:82:95:11:ea:9e:82:78:f6:
                    54:ee:3b:d6:ca:80:8e:ac:93:e6:d4:6e:5b:61:76:
                    ff:73:00:15:78:c7:1d:29:81:3f:ba:4c:15:9f:27:
                    5f:aa:81:55:e4:5c:cd:da:25:01:9e:32:4d:d6:69:
                    70:d9:36:e6:60:35:eb:a8:9d:74:7d:bf:97:e8:ca:
                    31:4a:04:e5:89:2c:25:7a:d9:6e:0a:60:1b:e7:cd:
                    8c:af:f9:1b:a9:a1:75:3b:76:44:41:9c:be:bf:a0:
                    7f:1a:b9:41:c9:c5:12:de:1e:b0:8b:7e:1e:08:1d:
                    7d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:91:D8:B0:7F:D3:63:7F:F3:C2:8F:10:B5:8F:92:C3:FC:3C:F5:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8242b901-13b8-31fc-b0af-a3b05bee017f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:d3:c4:e1:3c:31:f5:23:dc:a4:a2:87:7f:af:52:2d:de:51:
         86:48:a3:80:fb:bb:36:d8:44:00:74:f2:56:30:6f:a8:29:5b:
         56:57:a0:68:43:15:bc:c7:b3:eb:b6:12:d9:09:98:5f:15:3f:
         38:d9:14:30:29:3f:0b:61:6b:03:2c:64:a8:15:0b:c3:bb:15:
         6c:24:a2:b9:6e:68:8a:b9:c3:be:d3:aa:68:ee:79:06:2e:49:
         3e:04:b3:ca:74:0e:0a:87:ed:6b:de:29:9b:44:03:16:c5:c7:
         fe:8f:43:d2:3a:20:b8:12:95:36:3e:02:8e:fc:9b:be:27:53:
         c3:c5:ca:cc:74:13:a4:e4:af:d1:a1:0c:ca:b6:b4:e7:65:e5:
         f7:69:24:6d:d2:19:1a:fc:3e:51:7b:61:9f:03:1c:5a:12:6b:
         38:9a:b8:5d:5c:38:c2:1a:ac:d2:0d:30:0c:5f:22:28:ad:ee:
         78:b7:47:ea:3b:b6:de:e6:dc:1d:32:2e:0f:73:17:02:ad:f8:
         ce:4b:0f:20:c8:53:90:dd:6e:f8:02:e2:9d:1f:32:65:87:4e:
         a0:24:a8:f7:ef:10:17:1a:30:05:86:55:fc:42:fb:f0:10:db:
         26:ee:5e:69:c1:c3:e4:20:43:8f:ea:97:aa:c9:0f:fc:d8:d5:
         2f:9d:3d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:57:26 2025 by rpki-client