Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b6561818-2554-3d32-9a41-9bdf1fa2ab92.roa
File:                     b6561818-2554-3d32-9a41-9bdf1fa2ab92.roa (raw, json)
Hash identifier:          h6OcZyD5pNqlbNdGgOnGg//AeWbznL4js7tyal51JYo=
Subject key identifier:   D2:51:B1:75:BE:03:5B:18:43:2D:31:06:F6:B3:F7:AC:6D:D8:89:E8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5F3736D5446298471E976960
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b6561818-2554-3d32-9a41-9bdf1fa2ab92.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     15169
IP address blocks:        104.134.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:36:d5:44:62:98:47:1e:97:69:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=3044444a-b067-4237-9181-be957b0de32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8b:2d:46:e7:bf:5d:49:e9:81:34:6e:85:d6:
                    79:77:8e:d0:6f:65:20:e3:61:64:d5:62:aa:58:51:
                    a8:80:2c:c4:ba:2e:5e:bd:df:ee:67:af:ad:ed:03:
                    68:cb:f6:5a:76:5a:88:af:d2:a4:08:17:69:ff:48:
                    bf:d2:e9:75:34:a8:7d:af:41:d7:12:32:2a:b2:35:
                    5b:4d:04:0a:94:e3:55:ce:0c:1c:f6:56:f3:0c:bf:
                    34:45:80:30:01:3d:b7:bd:c8:c9:d9:3c:aa:1d:30:
                    bb:f7:a7:9e:7f:b8:48:b0:13:00:b1:32:81:84:19:
                    66:7c:2a:81:c5:cb:5b:d6:23:34:38:4b:b2:ff:10:
                    84:e3:24:c2:4a:f7:e7:68:c8:8b:92:c2:88:62:f1:
                    60:a7:7c:76:36:fe:95:70:f9:7a:df:f6:25:51:0d:
                    69:5d:b4:46:d4:a4:96:4b:c6:11:7a:17:b1:20:a1:
                    af:c1:32:70:89:3e:c6:54:e3:81:d0:cf:28:31:75:
                    b2:76:b6:fd:1b:03:68:5a:0b:2d:2a:55:63:24:4a:
                    26:c6:fe:1a:d6:0d:53:0e:7e:34:1c:f3:92:97:ae:
                    24:6b:5b:55:f7:46:f8:e6:c0:e7:c2:34:2d:85:4a:
                    4e:86:1b:ac:24:ff:20:61:27:d3:9b:c0:73:12:e0:
                    ef:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:51:B1:75:BE:03:5B:18:43:2D:31:06:F6:B3:F7:AC:6D:D8:89:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b6561818-2554-3d32-9a41-9bdf1fa2ab92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:9a:6c:63:e0:61:12:f7:f9:c7:1b:9a:ba:4f:f8:c6:7c:30:
         3e:d0:9c:73:80:6a:bd:d2:cb:97:58:d6:c2:0f:0e:bb:e3:3e:
         b5:cf:e1:fa:7d:1a:79:1a:0a:3e:8f:48:02:d4:53:9c:ee:ad:
         e9:ed:68:c2:27:a0:78:62:40:d2:61:e2:03:95:27:15:5b:3d:
         2d:fd:bb:06:7c:43:47:2f:4f:4b:aa:fb:06:f8:4d:2c:9b:94:
         e1:d1:f2:d5:40:f7:2a:9a:01:c9:66:91:64:9c:96:c6:54:c5:
         f7:d6:d5:01:fa:72:da:2f:c7:dd:64:41:4e:43:54:2a:63:b0:
         4a:88:0f:14:1a:5a:32:78:6d:a5:f0:3f:3b:9a:c1:c4:4a:2d:
         3b:f0:84:b2:f8:7c:d0:60:24:04:8a:d4:66:ec:ba:b7:1c:a7:
         70:13:bc:23:dc:cb:a4:03:df:57:78:8e:f4:83:96:b9:f0:ea:
         e5:f2:b3:e5:a8:a4:9f:c9:96:14:66:ae:d3:5b:c0:be:5f:28:
         c8:0c:5e:55:21:42:0e:b1:bd:27:ac:36:ef:1c:5c:1e:11:ee:
         73:f4:f9:dc:6d:5f:53:6a:49:71:c2:2f:ee:b0:22:ae:57:b6:
         de:1c:97:52:d9:68:6b:16:b4:55:00:25:f2:bf:ff:a0:26:4a:
         c8:c3:c8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:03:00 2025 by rpki-client