Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ab617d00-8dc6-3fb4-b3c9-d40393733a89.roa
File:                     ab617d00-8dc6-3fb4-b3c9-d40393733a89.roa (raw, json)
Hash identifier:          Bq+g12tXkra7RIIqqlE/n6d+Xv/dksvFyf3caZuzskg=
Subject key identifier:   0C:D3:35:59:16:24:24:3E:74:80:7F:3B:5A:DD:38:B0:E5:7F:93:7D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B4E7727A62507BDAA9FB25780
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ab617d00-8dc6-3fb4-b3c9-d40393733a89.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.132.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:27:a6:25:07:bd:aa:9f:b2:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=96925b3c-d188-453a-b442-d6600e7c5477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:79:04:c5:be:0c:7f:df:86:36:93:12:25:c5:
                    46:72:3d:30:40:62:c5:fc:ff:12:9f:e4:74:54:5b:
                    41:8b:f6:a9:05:9d:65:5b:29:0a:74:3a:dd:ab:6d:
                    c3:87:36:34:df:f2:77:0f:35:d0:2b:46:c9:6d:46:
                    be:ec:15:af:ab:15:1e:68:f2:cd:c6:ed:6b:8b:07:
                    16:7f:9f:2d:e1:91:74:97:e4:7d:50:b6:61:c8:b0:
                    06:21:9a:9f:e8:32:d6:49:32:e5:9a:9f:38:61:a5:
                    bc:ac:36:66:6a:ff:9c:f0:76:ff:22:75:bb:2c:53:
                    9c:52:f9:1e:a9:ab:b3:2c:93:d2:f2:56:65:f4:40:
                    61:b8:64:ee:7e:65:2c:8f:f3:ef:40:e9:77:39:b0:
                    58:b2:3b:7c:1f:73:8e:3c:e1:27:32:53:be:5a:ed:
                    d9:16:65:dc:c7:64:cc:11:44:cd:ed:5e:f0:70:a6:
                    54:24:23:b4:f2:8d:9e:06:77:f4:8c:42:52:c0:bc:
                    34:10:60:b4:65:c8:3e:4b:be:9b:8a:ea:56:c8:49:
                    a1:fc:49:1b:6e:b3:c1:5a:b3:de:b2:87:e5:11:d8:
                    6e:35:6e:37:60:47:b6:66:d7:1c:8a:eb:2a:7c:bd:
                    fe:d7:04:7f:d8:fd:8a:29:16:5f:68:c9:11:9e:33:
                    b9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D3:35:59:16:24:24:3E:74:80:7F:3B:5A:DD:38:B0:E5:7F:93:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ab617d00-8dc6-3fb4-b3c9-d40393733a89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:c5:e9:ff:6e:2e:c9:58:87:39:cc:7b:43:4e:f6:eb:40:c1:
         e9:47:68:a0:88:f8:ac:c7:cb:3c:77:0c:3c:86:2c:2a:04:ec:
         5a:08:b4:6d:3f:71:e8:cf:79:16:43:0d:dc:97:73:95:5d:80:
         60:d6:5e:57:66:99:e3:8e:e1:7c:d6:c4:02:51:2d:12:a8:cb:
         de:f3:73:f2:c6:05:40:e8:c8:2d:18:50:3c:d2:54:e6:dd:d3:
         a1:89:2d:eb:2b:0a:15:32:68:75:8b:31:77:a1:cb:5e:25:57:
         73:fc:7f:ea:ab:fb:ce:a1:84:f0:64:47:16:72:69:d1:08:59:
         2b:c5:b3:9f:88:b5:37:65:9e:61:14:3d:1a:3a:b5:be:a2:11:
         5d:5f:15:58:9f:79:e7:e8:0f:ef:42:7b:a8:8b:50:fb:1f:9c:
         e1:df:4c:60:ec:fc:4c:d2:a3:76:94:6b:17:df:66:69:ca:4e:
         ea:a8:0f:56:11:54:71:a5:28:3c:e0:2b:89:13:05:41:41:0e:
         40:d9:34:36:0f:56:66:6a:0d:ac:7f:10:f6:c9:33:70:b5:d2:
         db:e9:9e:f3:3c:9c:4c:cb:36:e3:45:bd:7a:a7:92:16:84:00:
         48:93:f4:be:12:00:f0:98:db:63:fd:76:d4:57:94:85:53:7f:
         f8:ea:cc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:06:08 2025 by rpki-client