Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9f425863-8443-3fb8-9aef-9adb8c6e2bdf.roa
File:                     9f425863-8443-3fb8-9aef-9adb8c6e2bdf.roa (raw, json)
Hash identifier:          3S8WqzHMB5hGfxUp4aqqvy1yyjJnfXq8jLeeEb9bU/g=
Subject key identifier:   49:59:4D:B9:B8:E0:C1:EC:A2:8E:1D:F0:7D:F1:83:F1:AE:FE:12:24
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5F3775592E72FB1419296B40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9f425863-8443-3fb8-9aef-9adb8c6e2bdf.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     15169
IP address blocks:        104.134.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:75:59:2e:72:fb:14:19:29:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=c1f130a5-4dbb-477b-958f-1a1c3322adca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f5:b2:5b:c0:e1:a4:ae:58:a0:ed:df:a9:96:
                    33:24:ff:b1:e9:f0:f8:ff:49:f8:84:00:5a:35:c9:
                    c9:f5:e2:83:de:79:27:96:04:c9:db:5c:90:4a:c6:
                    cf:97:8f:2a:3f:d4:72:d4:b2:db:c8:f4:15:4d:55:
                    1f:91:97:26:47:a2:7b:5c:fe:2f:d0:13:ea:e8:26:
                    7c:ff:90:d9:02:17:c2:98:52:0f:43:53:53:56:07:
                    18:95:be:3c:ef:97:45:bf:36:00:b2:23:d1:85:54:
                    93:db:4b:de:1e:bd:08:4e:3a:de:f0:d9:00:07:cf:
                    58:7c:38:60:80:04:3f:85:45:10:57:e1:95:d6:47:
                    fd:49:32:11:f0:b6:67:83:21:20:61:88:bd:0d:45:
                    97:cb:77:0d:bf:a7:0b:9d:af:a3:fa:71:55:0a:bd:
                    b5:ed:b2:55:87:c3:b2:4b:48:02:57:de:ba:ce:f7:
                    36:c4:05:43:2f:9e:c8:88:9a:ed:72:77:6a:6d:8b:
                    53:06:6a:ba:1f:d7:3b:bd:17:52:47:84:25:bb:e5:
                    7a:5a:3f:6b:fe:72:df:e0:0b:4f:f8:ed:d3:29:2c:
                    25:28:b3:27:bb:9b:d1:c4:90:c8:95:d5:ad:99:a5:
                    e4:14:9a:a6:5c:a1:59:7d:7a:35:37:e6:fd:a5:6e:
                    22:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:59:4D:B9:B8:E0:C1:EC:A2:8E:1D:F0:7D:F1:83:F1:AE:FE:12:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9f425863-8443-3fb8-9aef-9adb8c6e2bdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b5:50:83:ef:b6:f1:8e:68:22:e0:c5:2c:02:9a:74:26:08:
         7c:9c:2e:82:43:14:12:3a:0b:fd:65:fc:ff:45:52:a5:ce:4c:
         b4:cf:f7:f0:13:75:64:f4:e6:e5:7f:2b:54:96:19:28:60:da:
         bf:2b:c3:f4:db:4e:6e:86:45:8a:3b:d5:ef:98:82:e2:f9:cb:
         1e:94:d5:be:19:14:be:7c:a0:77:91:a1:4f:a2:d9:5f:d9:d2:
         ef:f7:6f:1e:25:4f:6c:f9:a6:14:7b:6a:ed:4d:a1:e0:54:00:
         b0:9f:ad:bf:0b:36:da:46:bd:36:23:0b:09:9f:9b:30:47:54:
         5f:ff:28:e5:3e:a8:09:cf:7c:ca:8e:20:53:3a:32:5a:bb:4c:
         f5:dd:ce:d4:09:e5:b0:10:05:65:23:2c:b2:1a:7d:81:d6:f2:
         4a:ce:ef:db:3c:00:d0:f9:db:3b:00:9f:9c:41:4a:05:f7:33:
         c9:58:a6:f2:57:71:67:1e:5f:13:3f:48:98:ab:41:59:c9:79:
         49:d9:76:49:4a:b3:f9:12:20:7a:0d:10:ab:55:60:75:18:b2:
         d5:05:e3:45:c5:a4:88:f8:80:a9:9c:4a:e8:bc:25:8e:4c:fc:
         ef:67:08:5d:6a:3b:a0:21:85:93:b5:69:b4:1a:a2:6a:a2:d5:
         4a:7a:b7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:06:13 2025 by rpki-client