Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8fb74576-43c3-3596-9aad-5c8098270379.roa
File:                     8fb74576-43c3-3596-9aad-5c8098270379.roa (raw, json)
Hash identifier:          psD9WF4X+f35IYRJhjxucJO120ra2foEEZX1Uj1FrzU=
Subject key identifier:   C5:13:25:14:53:6A:95:58:01:CC:12:AF:F6:54:FB:AC:F2:7A:7C:85
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B4E77449D887F3B1D525CF700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8fb74576-43c3-3596-9aad-5c8098270379.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.132.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:44:9d:88:7f:3b:1d:52:5c:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=d1377b9c-757c-43b4-8ffb-b00f659dd6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6d:dd:14:34:a1:91:a9:b7:59:5b:1c:39:2e:
                    a3:c4:04:a4:7d:f4:54:fd:d4:2e:48:e3:8a:83:aa:
                    a5:8d:88:ff:70:5f:a7:87:7f:40:1d:f4:13:e4:fd:
                    68:43:8a:a6:1c:9f:8c:14:c3:02:df:ab:89:ce:76:
                    84:4e:fa:d0:35:c8:d7:34:09:c2:b4:79:55:cd:3d:
                    d2:06:a6:f0:59:0b:b3:cb:6c:08:c2:90:8a:06:62:
                    a6:1c:64:b2:51:7f:eb:0d:0a:c6:cc:e1:9a:ee:ed:
                    f7:c9:27:d1:be:5c:d5:c9:bd:c4:6a:c3:11:aa:5b:
                    bd:00:3f:42:f5:62:3a:18:6a:4b:38:fd:10:dc:7a:
                    be:7f:a3:9e:41:5a:58:d9:e9:41:08:08:4c:2d:be:
                    76:7d:fa:c1:f6:31:84:89:7c:fb:a2:08:b7:bd:bf:
                    96:aa:2a:60:68:a2:9b:86:8f:58:bb:82:2d:ce:ab:
                    99:04:17:7a:cb:df:c0:21:e7:69:52:9a:29:12:62:
                    d3:bd:f1:6a:2d:44:f8:da:32:69:99:87:4d:36:2c:
                    e2:77:e6:ab:e2:ba:69:62:41:d2:2b:d6:49:21:dc:
                    f7:64:8b:60:cd:47:c7:b2:1e:c2:12:0c:4b:e6:5f:
                    6a:61:30:f0:d1:b9:30:4b:ac:c9:56:1b:44:b6:73:
                    c7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:13:25:14:53:6A:95:58:01:CC:12:AF:F6:54:FB:AC:F2:7A:7C:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8fb74576-43c3-3596-9aad-5c8098270379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:47:4a:68:5f:59:61:91:c9:47:b4:f9:3e:77:52:f8:e9:80:
         68:df:4f:9a:5b:dd:5b:ab:3f:dc:55:7f:dd:9a:f8:c0:cf:c0:
         b6:c9:22:5b:e1:94:51:0d:9c:0c:a5:5d:bb:5e:ff:21:74:2a:
         24:6b:f6:b8:3e:f4:85:a5:11:cb:d5:08:14:42:f3:ce:36:41:
         04:77:46:e7:8b:5f:79:4b:eb:3d:a3:9c:0e:23:2d:03:1b:89:
         a2:e1:77:bb:80:c5:b4:8e:11:bd:13:43:f2:09:b8:71:66:79:
         8d:5e:7b:a5:af:2a:64:14:65:4e:71:16:de:b6:fb:4a:4c:19:
         41:41:a8:d4:ef:7c:70:de:41:c7:52:c2:4b:6a:45:82:8f:45:
         ed:06:8d:60:ca:71:39:89:45:37:24:2b:af:a9:93:6c:a0:37:
         f1:2d:86:da:58:bd:48:6a:b0:e7:0a:82:b4:a5:22:91:bb:73:
         95:e2:47:c8:20:13:e6:8f:6d:2d:0a:64:2e:a9:d0:e2:31:52:
         e0:c7:ba:8a:e5:a1:04:b9:ae:55:35:25:a6:d8:98:e2:45:d2:
         42:d4:c0:6c:fb:66:56:83:e8:35:ed:04:2f:77:0d:43:1f:fd:
         36:1a:06:7b:3c:cf:00:3d:45:68:5d:aa:01:5e:47:01:3b:fd:
         07:8d:00:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:00:56 2025 by rpki-client