Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8e97d227-d141-3670-8266-d132c4821967.roa
File:                     8e97d227-d141-3670-8266-d132c4821967.roa (raw, json)
Hash identifier:          Y/hCSQPw+tdq5ML2YQYN+vwAELGzUCgEIgYpOJIuDPQ=
Subject key identifier:   4B:2B:1D:B0:38:F5:F0:9F:A5:CB:0B:D3:68:D7:9A:BC:95:2D:8B:91
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5141ED022D710599451B35C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8e97d227-d141-3670-8266-d132c4821967.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.132.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:ed:02:2d:71:05:99:45:1b:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=ccd55659-9636-4a00-b728-7f5b33025feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:10:77:08:07:09:f0:71:36:16:f9:72:f2:04:
                    f6:8f:19:8f:40:54:ed:15:ee:61:b5:38:7c:8e:2c:
                    bf:7a:2e:06:14:95:75:c5:cc:51:a3:17:0a:a8:b2:
                    2b:23:49:8e:9e:fd:5e:58:f1:2c:85:b7:50:1d:c3:
                    c9:d1:cb:ed:f6:13:d5:e8:a3:08:d2:d3:82:b9:85:
                    c7:2d:9c:a4:79:47:93:cd:3c:71:9d:e2:02:a9:c5:
                    73:18:d7:09:21:47:a5:ba:9d:f0:2b:d5:47:f7:bc:
                    e0:25:75:23:87:b5:e5:e9:ec:f6:81:d1:31:c9:a9:
                    ef:2f:ca:dc:6c:24:d6:52:10:34:d6:20:ef:44:83:
                    5d:5f:92:b4:ce:c1:86:e4:8d:c0:f6:f9:9b:b8:ac:
                    86:ea:16:6e:8f:73:2b:4e:1a:d7:cc:dc:7d:95:2e:
                    d2:b9:48:bf:df:54:7c:da:ae:5e:7d:8e:76:fc:8a:
                    f7:95:06:3c:9d:ca:de:1e:52:5d:53:46:85:a1:95:
                    52:93:2c:cb:b6:21:ff:c8:7f:8e:9c:81:7d:7c:d7:
                    36:3e:ca:94:89:e2:f2:20:18:86:01:e5:a4:8a:63:
                    a1:85:9c:a0:4e:31:27:2c:9d:42:06:fa:32:18:5d:
                    31:fc:df:3b:b7:58:5e:5f:41:d1:c7:a7:9f:16:56:
                    a3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2B:1D:B0:38:F5:F0:9F:A5:CB:0B:D3:68:D7:9A:BC:95:2D:8B:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8e97d227-d141-3670-8266-d132c4821967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:b6:60:ac:d9:7d:90:45:70:3e:cd:80:61:fc:c8:8b:e8:a3:
         29:72:82:0b:64:10:26:bc:3e:51:aa:1d:e4:23:9c:79:48:3d:
         f2:a3:a2:71:fd:c9:39:6b:05:ef:06:ba:f6:95:63:e5:05:0a:
         54:ee:d3:bc:13:e3:ed:99:79:d0:1d:74:ce:89:bf:51:df:34:
         56:c2:9e:05:ec:23:75:a8:ef:89:8e:4c:9c:7d:c8:93:2a:de:
         53:20:19:38:18:33:1d:fe:7b:0a:92:b6:d4:ad:f6:30:f4:99:
         b3:b2:c9:65:1a:22:aa:b6:21:d6:92:a6:18:e3:3d:aa:af:63:
         b0:07:cf:76:1c:09:ed:2c:6c:25:12:83:01:31:5d:7c:a3:65:
         1f:c7:50:8e:21:8c:28:d6:43:b4:4c:ca:98:07:8d:27:c3:09:
         51:69:df:7a:ab:5e:3b:13:d6:f5:d1:ed:90:8d:3b:c6:fd:25:
         2d:4e:0a:10:25:15:1b:e4:fa:93:5e:0f:92:35:c4:04:41:bb:
         bb:f9:ae:bd:45:bc:36:5f:64:87:62:71:a6:90:b0:18:55:4e:
         fb:aa:22:55:36:a6:e1:14:75:c0:a6:7c:f6:9c:9a:49:f0:61:
         84:7d:8a:fc:fc:14:da:ba:e4:9d:c9:c1:a4:ae:d0:f6:bb:66:
         51:4d:36:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:57:03 2025 by rpki-client