Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b5b9f4fe-abfa-3840-8692-0ba96e48412f.roa
File:                     b5b9f4fe-abfa-3840-8692-0ba96e48412f.roa (raw, json)
Hash identifier:          9lILLNMyKBunODUK9E2wVqEeZIWOMf1ulcAU7k5LTxA=
Subject key identifier:   C0:33:90:97:5C:2D:B4:82:26:C1:AF:7E:B8:4C:90:D0:28:4C:BA:58
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C74004F952A39D4E57540
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b5b9f4fe-abfa-3840-8692-0ba96e48412f.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.133.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:74:00:4f:95:2a:39:d4:e5:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=7abf6ff9-9e77-44c6-910c-abde932bd228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:38:ae:68:4c:bd:88:83:b8:c5:a3:fe:ef:
                    e7:ec:9b:78:d4:a1:4d:47:f6:42:03:58:bb:3b:57:
                    5a:ed:4a:0d:85:bd:28:16:08:bc:34:85:50:86:fa:
                    d8:78:c0:7e:a9:eb:a0:6e:d9:dc:d9:71:13:ee:8c:
                    07:29:df:b9:58:f1:3d:55:81:3f:c6:e2:a4:f8:3e:
                    3f:ea:af:08:18:a1:f4:81:a7:86:31:84:85:f5:15:
                    73:4e:27:eb:2b:a7:27:53:2f:cc:22:3b:63:d9:30:
                    97:76:32:a1:a2:5f:8e:5b:a5:70:57:a3:00:6c:b0:
                    26:82:6b:9d:04:b6:26:6f:2a:2b:d7:fa:37:8e:03:
                    22:f4:d1:87:12:04:29:95:ec:93:46:18:3d:f1:f8:
                    27:8b:fe:b6:fd:2c:b1:02:6b:dd:e9:56:71:95:79:
                    93:8f:61:68:b2:83:27:ee:f8:4e:65:27:d1:5c:11:
                    e0:ec:e2:77:4d:98:70:a9:a4:06:b2:a5:28:e3:39:
                    92:cb:b7:73:9f:54:7b:9e:bd:91:41:ca:ee:ba:f4:
                    4b:89:01:c4:82:d9:d4:19:60:0f:f2:08:9b:08:5d:
                    84:7f:09:01:59:9d:a7:62:be:bb:8b:8a:ff:f8:4b:
                    cc:19:dd:b1:41:d4:cf:78:f0:41:17:e8:18:a7:08:
                    2c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:33:90:97:5C:2D:B4:82:26:C1:AF:7E:B8:4C:90:D0:28:4C:BA:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b5b9f4fe-abfa-3840-8692-0ba96e48412f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:dd:2e:b0:a6:5a:81:a4:b1:e5:5d:13:6a:5c:b6:bd:57:2d:
         91:42:f0:95:59:d8:3d:3b:de:3e:61:33:5e:ee:31:01:45:61:
         f1:c5:42:af:b2:79:b8:15:a4:68:fb:9d:3f:e4:22:b1:b7:fb:
         3e:9e:b1:54:ed:97:cc:d7:6d:f5:d6:b0:91:cc:95:a6:f3:67:
         fa:4c:c9:54:30:e2:72:41:d6:e6:4d:a6:f3:4e:fb:78:1f:bd:
         c8:3b:4b:e8:b9:d6:b9:7c:d3:bd:c7:ec:82:4f:f9:de:06:43:
         dc:cd:c1:a5:95:60:0b:d8:25:91:62:42:16:2c:18:ad:20:49:
         f9:02:b8:a5:27:a2:cc:67:63:06:41:fd:e1:91:6c:92:8a:02:
         da:1f:e8:46:ea:2e:89:bc:42:f3:72:88:02:88:7e:b0:f1:67:
         fc:46:e0:dc:19:1f:57:77:ed:e6:ad:58:13:5d:3c:88:ca:b7:
         99:20:3f:f0:8d:e1:be:e8:1d:c9:33:36:b7:88:cb:59:ff:f0:
         47:86:fd:4f:22:92:93:e9:a0:5e:89:70:34:d1:9b:56:b6:cf:
         6b:8f:f5:29:b2:09:f9:cd:98:b8:1e:63:4c:fd:c0:aa:26:9d:
         b2:7e:2c:5c:e3:73:f9:51:9c:0d:97:16:14:be:7a:87:bb:e0:
         18:e4:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:56:56 2025 by rpki-client