Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/844eee5c-88a6-3d3d-abe9-859ea9cf1510.roa
File:                     844eee5c-88a6-3d3d-abe9-859ea9cf1510.roa (raw, json)
Hash identifier:          ntuORiU4Yte33803/kK2EBdZ78qp5p9hDKCR0EwFzzA=
Subject key identifier:   4A:00:96:20:4B:DE:14:45:61:6A:E5:96:B6:29:7E:2F:CD:5B:98:0A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5141EBDA33C444F9D54909C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/844eee5c-88a6-3d3d-abe9-859ea9cf1510.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.132.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:eb:da:33:c4:44:f9:d5:49:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=e7835ebc-6c42-4228-b40c-a14835394d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:ec:4c:01:86:e4:4f:30:3b:3a:07:bc:cb:
                    6e:f3:77:91:1a:5d:c5:fb:7a:f9:46:87:99:71:ed:
                    97:a0:86:19:2e:20:68:36:cf:c2:11:5e:92:da:47:
                    00:6e:dd:ec:c4:de:1f:e2:28:80:5a:b3:82:0f:db:
                    6d:ff:08:cf:4b:96:87:4a:1c:dd:c4:b1:4c:e6:7d:
                    ec:55:01:e5:a4:9c:3f:f9:a4:9e:02:f5:75:53:1c:
                    ed:23:06:db:4e:97:0f:28:f3:e7:1c:b2:2b:e2:f0:
                    4b:f3:10:e3:1a:2b:d6:92:fb:33:af:e5:04:37:b3:
                    44:ed:79:0e:37:36:e2:73:95:b6:db:d8:22:25:d3:
                    db:28:1d:ae:53:7a:10:b6:ed:ec:e8:a3:19:90:9c:
                    71:71:ec:39:19:21:60:ed:78:e8:3d:96:a0:04:a3:
                    d2:eb:bb:fc:c7:cd:bd:0d:e4:68:48:44:39:e3:dc:
                    95:7d:6e:53:a1:5b:8c:93:3a:67:74:d5:ea:30:ff:
                    94:c0:3b:79:8a:b9:88:ff:63:2c:50:81:e8:df:97:
                    56:06:d2:95:a8:41:f0:35:cf:4a:02:ef:9b:36:9a:
                    a4:7f:a3:a8:8a:3b:52:96:e9:f8:83:d7:42:be:9e:
                    7a:08:d7:be:82:05:f5:34:58:81:b5:f9:95:86:14:
                    f2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:00:96:20:4B:DE:14:45:61:6A:E5:96:B6:29:7E:2F:CD:5B:98:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/844eee5c-88a6-3d3d-abe9-859ea9cf1510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:a1:6c:1c:8f:cf:5f:c8:3d:bf:bc:bf:0b:dc:40:24:86:ee:
         ed:0a:7e:3f:ec:23:7a:5e:3d:cc:df:3a:6e:69:6d:cc:58:2c:
         88:77:23:dd:c3:c7:55:c1:e0:8b:77:e5:fb:74:92:ee:eb:17:
         bb:13:ed:8d:fe:aa:13:e7:62:c4:e6:02:1c:b4:ec:f6:c7:e7:
         56:c2:95:ae:13:c9:38:e9:38:b0:53:dc:b5:46:bc:7a:32:63:
         e6:13:fb:32:b9:cd:c0:e6:af:f2:ed:85:e2:2d:03:58:7c:f1:
         92:7e:1c:b9:e7:fb:9d:b6:74:86:9a:63:f4:ce:62:01:d5:88:
         e6:d3:82:3e:70:4a:b7:f9:f9:70:33:72:2a:7c:40:5e:94:f7:
         6f:62:06:1b:a6:0c:e1:95:6b:7c:24:4c:1d:14:11:94:b9:83:
         01:43:b6:da:7b:02:b9:43:6d:b6:d8:3f:88:53:3f:27:3e:3e:
         d5:e3:68:f5:dd:96:36:d5:a1:e3:98:61:8f:a6:03:16:c4:b2:
         c5:0e:5f:8d:f5:c4:45:ca:21:1b:49:3a:b0:07:57:c2:05:d6:
         6d:25:b9:2d:be:19:ea:d2:50:fb:3e:8b:df:ea:49:a7:a2:aa:
         84:02:51:d2:b6:2e:7d:7e:a5:02:54:88:19:14:87:40:fc:3e:
         0c:5b:3f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:05:21 2025 by rpki-client