Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9b8ef0f-ceae-3512-9397-5fb131ad86db.roa
File:                     b9b8ef0f-ceae-3512-9397-5fb131ad86db.roa (raw, json)
Hash identifier:          zdfpAyUcl6BvBHTdQCuyK6w6ykZ/rV/+tKVh+/z6EJw=
Subject key identifier:   77:ED:30:27:44:8F:3C:35:D4:1F:32:E4:31:29:34:5B:AD:DA:F9:90
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C77418C85372B6C2B2F80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9b8ef0f-ceae-3512-9397-5fb131ad86db.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     15169
IP address blocks:        104.134.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:77:41:8c:85:37:2b:6c:2b:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=bb990e67-27e6-49e8-82d1-7060376addbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5c:40:e4:1d:d5:26:86:01:3a:0b:d7:e1:a2:
                    63:43:37:a3:79:d6:e8:65:2f:89:4a:52:8b:e3:fb:
                    a1:1b:d6:0c:28:30:92:f3:84:98:77:eb:88:8a:2d:
                    0a:c9:b6:cd:6c:7b:4f:12:c8:1a:9c:56:a0:3d:c9:
                    7d:b7:d5:35:6c:6d:db:09:06:db:58:73:ce:20:39:
                    31:f5:dd:37:17:9a:cc:87:3a:0a:41:29:03:02:ab:
                    9f:2f:8c:63:e7:bc:da:3f:2e:bd:de:e1:11:e5:74:
                    82:fb:52:a4:13:e0:44:91:0a:02:df:bf:67:61:8d:
                    6a:e4:af:79:62:67:32:74:c1:ec:3f:a0:81:cb:8b:
                    99:a4:04:3b:32:e9:63:35:44:79:21:cb:07:47:87:
                    5d:f9:fe:11:8f:7b:df:a2:1a:0d:9a:51:45:f3:a5:
                    65:32:75:8f:9a:31:80:12:eb:01:7d:e4:50:1b:f8:
                    15:5e:5a:40:35:32:67:15:ab:fd:ba:5d:40:79:d5:
                    c0:cf:2d:62:af:b9:bc:35:97:08:ab:42:43:4a:d3:
                    3e:bc:28:94:5e:1a:d1:7e:2f:78:a5:cb:ac:08:1b:
                    df:4f:0f:6e:9c:6c:83:7f:b1:ea:f9:c2:76:eb:ef:
                    fc:56:11:9d:13:39:4e:4f:c5:75:e4:53:d8:34:d8:
                    a9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:ED:30:27:44:8F:3C:35:D4:1F:32:E4:31:29:34:5B:AD:DA:F9:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9b8ef0f-ceae-3512-9397-5fb131ad86db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:f3:30:41:e5:1a:25:6c:75:68:ed:ec:de:56:55:b6:62:cd:
         9b:07:12:94:78:34:11:be:e0:39:ea:b5:38:f3:55:52:1e:bc:
         6e:12:07:ee:f4:a5:85:16:f4:6e:7f:42:f5:ab:07:f5:c4:33:
         93:ae:90:22:a6:9a:68:bc:82:c9:52:a5:f3:47:30:34:76:ba:
         a3:2a:97:34:88:a2:fb:9a:a0:27:49:12:97:b1:73:18:8a:25:
         f9:c1:70:f8:00:7f:1f:91:d3:dd:1e:fb:3e:10:2e:03:07:52:
         9c:0f:d5:96:7b:cd:50:98:94:f5:c3:5c:40:5c:2b:fd:29:a0:
         fa:a4:ed:82:76:01:3c:29:06:d1:16:2d:34:aa:0f:31:e9:95:
         30:3c:98:c5:dc:0b:f0:73:0f:cc:53:6a:c1:d0:91:65:7d:1b:
         da:37:68:73:5b:c9:e6:d3:0c:4c:65:b6:f6:a3:5d:90:f0:31:
         70:bc:49:81:60:d0:e0:47:d6:b3:55:96:ae:cb:94:6b:70:b3:
         61:82:0d:95:26:2a:4b:95:97:51:70:e8:63:03:db:f9:aa:df:
         ee:3e:24:b6:37:61:fc:46:af:7d:c1:6f:dc:3f:58:32:c0:0a:
         20:aa:6f:98:f1:d1:f3:83:e8:fc:97:12:1f:5c:e6:d9:5d:b6:
         90:3a:5d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:47 2025 by rpki-client