Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/835bca5d-f2a6-3f25-b937-96751a3a2d7b.roa
File:                     835bca5d-f2a6-3f25-b937-96751a3a2d7b.roa (raw, json)
Hash identifier:          RzowdmbHKcJKQ9vqel+ZCaZy+2Nr+JB0IuGoNfu4lZ8=
Subject key identifier:   92:99:6F:9E:A6:93:30:2F:3F:BC:10:45:DB:9B:9B:C8:96:18:94:53
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5F37446E1CAD2CEECC85E680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/835bca5d-f2a6-3f25-b937-96751a3a2d7b.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36411
IP address blocks:        104.134.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:44:6e:1c:ad:2c:ee:cc:85:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=c404eaee-31b1-46a6-bf84-76a00f562b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:15:1d:71:e4:27:05:60:9e:b6:37:1d:f3:
                    3f:2a:fa:27:7a:92:65:94:9e:31:7e:27:28:6b:b5:
                    a3:e8:6b:85:d9:70:df:20:b4:11:22:5a:a7:e9:9d:
                    98:fb:39:61:17:f3:33:81:8d:aa:6b:0e:05:67:68:
                    20:39:c0:42:af:74:06:46:7c:ef:83:73:12:1c:b7:
                    4c:92:a9:02:79:57:e8:9b:6d:f2:46:63:06:1a:9b:
                    16:e6:a4:c4:9b:86:59:e5:da:a8:f7:5a:9b:42:fb:
                    13:95:d1:48:03:43:00:e6:c9:30:15:80:ee:7a:e4:
                    26:fa:e8:cc:bd:a2:06:e2:29:2e:3c:25:e6:00:d2:
                    71:23:d2:21:37:c1:bb:07:5d:54:1e:65:f0:09:51:
                    75:68:b7:55:40:a5:c8:0d:87:8a:4d:59:fd:43:60:
                    45:10:a2:55:99:ef:76:cc:54:d1:8f:57:2b:14:2b:
                    7a:9f:2e:18:fc:06:ad:ca:27:66:cd:22:95:81:cd:
                    1a:19:d7:20:11:e0:c2:f5:02:47:62:aa:e7:f0:57:
                    64:5b:e0:ec:49:63:c2:ca:74:be:1b:0a:c6:c5:b7:
                    3f:49:fc:83:92:ac:c7:3e:0f:15:f4:cb:11:6c:53:
                    17:f5:99:a1:34:7f:3c:ba:17:c9:52:f4:4d:65:e0:
                    ab:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:99:6F:9E:A6:93:30:2F:3F:BC:10:45:DB:9B:9B:C8:96:18:94:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/835bca5d-f2a6-3f25-b937-96751a3a2d7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:da:f8:79:f3:b1:1b:68:e1:a1:93:8c:25:0a:b8:f6:d0:70:
         0b:8d:2d:94:bc:d1:48:50:bd:97:69:b2:6f:ee:e8:32:d3:b8:
         af:d2:4e:b1:0b:e9:10:dd:ba:a5:1e:1a:67:b9:19:5e:f0:f4:
         83:c5:fb:4d:8f:c4:3d:e8:54:72:d7:97:20:a1:3b:bf:e7:69:
         b2:2f:67:fc:e4:a1:00:51:5d:95:00:e6:c9:f9:d6:23:1a:eb:
         81:9a:f7:9e:d0:66:9c:95:5d:90:c5:ba:b3:5c:ac:ac:21:09:
         d3:e6:f8:43:1b:3f:ac:7c:e4:6b:10:9f:0e:2d:19:d3:9e:a7:
         55:55:5c:47:f6:cf:19:19:67:7b:7a:d4:3e:c1:4c:bd:60:46:
         6a:3a:e5:3f:22:c3:6b:a1:ff:3b:f1:f8:02:f2:82:4f:37:c4:
         58:43:42:b1:90:c3:4b:76:3b:86:90:4d:20:30:2e:62:eb:18:
         7d:cd:a5:0c:95:4d:bf:50:0b:05:46:ec:b8:af:47:35:82:6c:
         ab:5a:a0:a9:a3:88:5b:9a:27:2d:69:58:74:bd:b9:df:3b:52:
         9f:df:ac:16:05:db:e7:26:f5:d4:47:7a:73:ce:a4:27:11:a1:
         4b:b2:8e:0e:1f:12:4c:42:46:fb:80:9e:df:11:2e:29:ae:a6:
         3a:b7:0e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:56:52 2025 by rpki-client