Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/96b7a736-94e0-3ece-8b5a-b6268c20fa59.roa
File:                     96b7a736-94e0-3ece-8b5a-b6268c20fa59.roa (raw, json)
Hash identifier:          oRw6raPAT8m9ExYys4JvW5NL89y33RKItjXhVDUEyHw=
Subject key identifier:   DE:2F:F3:28:7A:22:8E:62:CB:AD:BD:0D:DB:C1:8A:5D:F2:8D:61:6D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5141E910C8F4BC5BFF85A3A0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/96b7a736-94e0-3ece-8b5a-b6268c20fa59.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.133.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:e9:10:c8:f4:bc:5b:ff:85:a3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=6668f7bc-4942-4b9f-a291-8cb1bc7e21ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:44:a7:1a:64:50:d1:0f:15:0a:31:d9:4b:8d:
                    83:8d:96:e0:0d:48:18:a7:f2:90:8c:df:89:b5:6a:
                    79:2d:7e:de:bb:df:1e:a4:df:09:0c:0e:5d:6a:5e:
                    8f:ed:89:42:a4:0f:8e:98:d8:0f:e9:fe:92:bf:9c:
                    62:31:8d:fc:26:d9:a6:df:cb:44:ee:84:0b:56:11:
                    7a:13:c0:f7:8b:c9:15:81:24:a8:b5:a1:82:37:7c:
                    81:10:85:4d:7c:75:97:86:11:21:ae:05:72:e9:40:
                    df:83:d7:56:c7:a4:f6:06:22:2b:1e:6e:09:93:16:
                    e7:a2:5e:94:c8:b8:be:22:6a:cd:a3:32:2b:40:6a:
                    c1:47:63:a5:bc:b0:cf:d9:37:f0:ec:97:db:07:42:
                    62:52:c2:8d:0e:34:cb:c9:e5:8b:92:4c:40:50:d0:
                    69:a7:35:f8:c3:6d:90:e2:3e:9c:58:67:c0:d5:5a:
                    07:35:c7:59:ba:d5:3b:be:ac:cb:bc:23:2d:9b:84:
                    77:8b:bc:35:f2:14:d4:bb:73:10:e8:ab:f8:69:e5:
                    c1:cc:99:cb:5a:8f:a8:af:c5:8d:25:4a:75:cc:ef:
                    11:4f:e0:f0:d1:47:ef:0a:16:d5:27:ea:ed:07:bc:
                    60:36:da:ce:ac:ad:15:26:aa:2f:e8:4c:f9:94:af:
                    14:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2F:F3:28:7A:22:8E:62:CB:AD:BD:0D:DB:C1:8A:5D:F2:8D:61:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/96b7a736-94e0-3ece-8b5a-b6268c20fa59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a6:a2:51:b8:1a:ab:56:f9:68:70:9f:6b:46:ae:b0:c4:63:
         51:17:03:f4:19:19:fa:ed:01:56:d5:1f:ed:c9:d7:a6:26:80:
         a6:5b:bf:86:33:53:f1:96:68:d7:49:e1:16:56:c9:dd:b7:6b:
         b4:5a:50:42:51:e0:f2:66:53:36:c0:74:cf:5d:73:f4:25:bb:
         b5:34:cd:dc:94:30:02:11:9d:af:46:dc:99:2e:95:e2:0c:16:
         d3:d8:a7:c5:ef:2a:41:6b:de:eb:ea:83:39:86:7d:9d:e1:f1:
         87:5b:6f:9c:dd:b8:ae:46:0d:93:6f:63:95:a2:95:0c:4c:ee:
         9c:03:1a:52:53:e8:70:b2:f0:11:5e:fd:3d:ad:9c:6f:de:c1:
         8c:4d:93:c4:05:0e:5e:19:3d:3f:cc:5e:ad:ee:99:7f:07:9d:
         3c:17:12:90:c4:e0:d0:37:7c:2b:7b:8f:40:68:7e:54:67:bf:
         99:5d:9a:a6:72:2f:d4:8b:46:9a:8b:a2:b8:23:fb:e0:ea:0e:
         52:86:45:71:37:11:ba:d9:3c:d4:5d:ae:ce:fe:da:2b:8a:f5:
         ae:99:5c:72:92:2b:d2:c0:a6:c0:0f:8a:36:8d:77:c5:cc:78:
         9d:1a:76:df:25:05:ea:89:75:c8:4c:b1:cd:13:83:e6:ba:f9:
         e2:b9:0e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:04:36 2025 by rpki-client