Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/945ade78-4d3e-31f5-9be5-815948084b7f.roa
File:                     945ade78-4d3e-31f5-9be5-815948084b7f.roa (raw, json)
Hash identifier:          yD4Sc0g91BKLUvPFtLvziJDk/baR0rIgpCTuygHp51M=
Subject key identifier:   2C:69:A9:77:39:1B:41:7C:23:04:C2:F3:CF:AB:A8:3A:53:97:26:52
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5141EB2D48CB60FF5C010200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/945ade78-4d3e-31f5-9be5-815948084b7f.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.132.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:eb:2d:48:cb:60:ff:5c:01:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=5c03c589-6fc2-46b4-a796-0dac6ce45a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:bb:77:95:ee:55:18:62:b7:5c:74:33:64:
                    f7:98:89:2b:50:d5:96:bd:be:a2:0c:62:46:91:15:
                    65:f9:3e:66:b6:06:8b:7e:42:43:b9:5a:1d:c9:7a:
                    9f:41:92:87:09:82:03:d6:f9:ec:a8:b9:93:d9:48:
                    2c:2a:db:fa:5c:3e:e6:af:2a:70:03:aa:dc:b8:e6:
                    b1:63:f3:91:de:bb:ac:06:0b:4d:dd:90:c4:89:1c:
                    3c:40:26:bb:5f:d6:89:2d:df:cb:43:3b:da:b9:c2:
                    89:ac:33:c8:2b:e2:96:27:6f:8a:21:0d:f1:ef:7b:
                    ca:3d:cd:97:2a:8b:50:42:f7:10:ec:8c:b8:b3:e1:
                    d3:a9:3f:00:2d:07:67:5d:18:32:e2:30:03:b7:cf:
                    79:e1:a8:4b:d9:67:9c:e7:1a:08:71:20:c2:6a:b1:
                    23:d8:45:ed:54:6c:97:d2:97:ac:81:06:b3:7e:42:
                    2c:79:25:f3:e1:ed:8e:07:e4:3a:3d:33:dd:c6:52:
                    2c:a3:ad:42:e4:23:0c:0c:16:88:ef:f4:9e:52:75:
                    90:f7:3e:eb:f4:01:5d:3a:6e:15:2e:4a:e8:df:e6:
                    31:06:9d:df:65:d3:b1:b4:49:b7:1d:41:67:e7:fc:
                    cd:31:ac:1e:d7:be:6d:35:d7:d1:43:03:79:f6:5f:
                    7e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:69:A9:77:39:1B:41:7C:23:04:C2:F3:CF:AB:A8:3A:53:97:26:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/945ade78-4d3e-31f5-9be5-815948084b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ba:42:d2:dd:f3:0a:8b:c6:68:61:a6:df:e9:bf:5f:3d:22:
         43:e6:d8:7e:e6:c4:f0:3e:83:1b:d7:e7:fe:e1:5c:98:c6:7e:
         2b:78:22:05:b6:7b:96:74:b4:72:23:4f:ee:c0:db:d6:ed:72:
         bd:d8:6e:62:a9:7d:60:c3:65:a7:10:5c:dd:b5:2c:e1:05:10:
         01:60:df:a9:e7:e5:60:cb:46:30:33:4f:33:66:54:1f:55:e2:
         8e:98:e0:fb:f1:78:4f:46:3c:39:07:ff:1f:64:a1:fe:a3:f1:
         98:94:58:2d:60:d0:15:da:c4:09:ab:df:06:bd:7b:ce:81:ed:
         eb:70:fe:9c:27:a5:18:d8:00:cd:ae:87:ae:eb:b5:62:cf:d0:
         bf:85:31:35:61:97:55:ff:72:86:0d:3d:73:22:8b:02:e3:2c:
         bb:d8:54:b8:f2:3c:eb:47:49:04:2b:99:60:e8:0f:5c:41:e6:
         b5:2b:2b:2c:8f:00:e3:08:ab:ec:11:17:a9:81:7b:91:97:4e:
         3b:dd:69:5a:68:e6:9f:df:88:fe:39:07:86:22:e4:b5:31:e3:
         48:56:91:87:62:68:6c:91:ca:8a:bd:c0:84:a5:bd:5e:da:54:
         dc:52:c0:2a:23:05:f3:66:6e:26:b9:0e:19:29:09:53:4b:60:
         3f:f9:d3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:57:24 2025 by rpki-client