Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a693108-0392-3007-a365-e113b86eb597.roa
File:                     8a693108-0392-3007-a365-e113b86eb597.roa (raw, json)
Hash identifier:          MIcOJjHKOHx1AvhVBBI/1SxKgMNtC2BDUD9WdCpjhds=
Subject key identifier:   3C:C7:77:58:44:AD:98:54:47:5F:DD:EC:2B:1D:F3:21:19:80:52:B5
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5141D85CB2BF126BDFFC0E60
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a693108-0392-3007-a365-e113b86eb597.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.133.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:d8:5c:b2:bf:12:6b:df:fc:0e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=d2d15329-b462-494d-b33c-207a1e3e6850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9c:1a:52:7a:3e:8a:8f:45:4c:76:e2:08:f3:
                    62:96:37:48:96:58:43:d6:af:0c:a4:b3:16:55:fe:
                    ee:32:1d:4d:64:05:ae:f7:db:30:15:59:bf:f8:e8:
                    44:d6:75:92:ad:f7:4e:d9:ad:23:b2:1c:18:3f:00:
                    78:a8:74:7d:c5:9a:c0:f5:4d:92:47:98:46:1a:c0:
                    81:04:8d:8a:e1:bf:92:52:84:81:7a:b0:72:3c:29:
                    f9:01:fe:80:1e:f5:f8:b9:aa:4a:b2:4f:52:f1:65:
                    e2:30:f8:f9:df:5f:10:0a:65:4e:2e:e4:e6:10:40:
                    a8:7e:b5:bf:9c:a6:48:f5:41:bb:6a:e3:b3:9a:19:
                    38:f9:1c:7e:19:73:08:c6:6e:f9:2b:d9:ba:8a:91:
                    23:9c:b1:ab:4d:d2:bb:1a:45:53:f0:1a:28:24:1d:
                    73:84:5a:ed:1b:4b:bf:ce:88:e1:df:1b:1f:4f:b5:
                    14:d0:25:33:5a:5c:1f:31:60:c3:b5:8e:ac:19:0f:
                    a3:ec:6e:90:1c:ff:cd:a1:b7:f2:5a:5e:a4:a4:10:
                    29:92:99:e7:9f:cb:88:a0:9d:f1:ca:ba:b9:7b:d3:
                    a8:67:06:42:d6:89:0b:1f:bc:ad:d7:09:04:a4:43:
                    aa:f4:b4:5a:57:94:63:3b:8a:ae:16:3d:20:d4:c0:
                    1c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C7:77:58:44:AD:98:54:47:5F:DD:EC:2B:1D:F3:21:19:80:52:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a693108-0392-3007-a365-e113b86eb597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:e3:48:71:bd:e5:67:5c:b4:80:21:36:54:dc:0a:b9:f1:7f:
         3f:11:fd:47:59:52:ab:83:72:f7:56:42:ee:6c:4e:1a:56:54:
         db:b3:c0:5c:b2:26:72:7a:80:f6:c7:ca:59:1e:3f:25:90:14:
         79:b7:0c:6c:6b:0d:12:bf:34:c4:f6:22:d7:95:5f:d2:ef:c2:
         ae:aa:7b:93:b7:a1:f9:56:fb:38:3c:94:31:09:d9:9a:f9:48:
         18:3a:f8:c0:e9:2d:01:c8:c2:e1:65:1a:ad:41:93:a5:fc:87:
         ba:32:be:ce:00:64:ae:e3:45:e7:cd:f2:b0:ce:06:11:63:e2:
         39:81:c8:a3:34:df:96:69:73:a0:f7:5d:1e:e8:79:bb:e4:66:
         e9:e2:66:38:7e:e8:21:e1:db:48:b9:3a:8a:0d:b3:d0:75:d1:
         39:2a:dc:b2:7c:52:07:ea:ee:f9:ce:18:6b:8e:03:ff:6d:f7:
         a4:d5:ca:f9:56:b9:1b:8d:28:92:0c:45:a7:b3:5e:27:12:a4:
         71:86:58:b6:c9:b1:7f:05:52:b7:ee:d2:93:90:3c:54:a4:c9:
         ad:35:af:26:35:7d:1c:b9:c2:3f:9d:01:6e:ce:93:1c:bc:f6:
         75:9e:d6:a7:89:d5:80:45:d1:9f:dc:f2:3b:1a:6f:e7:cb:b2:
         1c:7a:a7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:02:26 2025 by rpki-client