Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba106091-e3cd-3661-9b96-e4d279bcb3f3.roa
File:                     ba106091-e3cd-3661-9b96-e4d279bcb3f3.roa (raw, json)
Hash identifier:          uWetkb8nrPs6IfX2rx9yPo9HPBm9aalk5L398hJ1Gn4=
Subject key identifier:   FB:7E:C4:C6:C8:00:1E:79:D7:99:1E:18:FC:7B:C4:03:3F:A1:5D:F9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C7169D9ACC2A2A3B1CD38
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba106091-e3cd-3661-9b96-e4d279bcb3f3.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     15169
IP address blocks:        104.134.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:71:69:d9:ac:c2:a2:a3:b1:cd:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=49432d49-f79f-4980-b4e8-7f7e49c6c1b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:db:d1:ba:e5:cb:1d:61:ce:22:80:33:e8:6a:
                    79:c4:d0:dd:72:12:80:c6:41:9d:b6:60:d6:17:5c:
                    90:5e:f2:7e:6a:13:35:25:02:40:55:86:01:9d:f3:
                    b4:41:80:ac:ea:d4:9b:d5:f3:63:13:90:6a:23:11:
                    f6:f2:24:cd:86:2f:91:6f:ab:18:57:3d:cc:7b:6d:
                    0a:a3:82:3f:52:89:12:90:df:e8:6e:75:1e:52:c9:
                    ad:87:35:4e:ed:35:f6:48:34:89:f4:e9:32:0e:cd:
                    6b:ed:6c:e1:44:95:e3:77:2d:dc:7d:95:2a:1e:45:
                    5d:65:52:a9:69:96:dd:26:d9:8d:f7:bd:83:df:ea:
                    76:b0:f8:ef:62:3c:7c:af:f8:25:4f:83:0d:b3:db:
                    02:f6:78:bc:eb:8c:1e:54:39:dc:f4:87:af:71:20:
                    51:ca:a3:dc:a5:b2:f4:3f:d1:1d:0d:4f:dc:47:1b:
                    b2:c6:87:a2:1f:a7:b1:4b:9c:e7:71:73:fb:46:59:
                    77:10:2a:5c:19:56:a2:8a:dc:39:22:e4:2c:04:ca:
                    74:fd:14:31:c6:a1:ee:14:42:f3:a9:57:5b:91:ae:
                    85:e8:d9:58:81:88:20:2c:35:33:3f:7a:ec:4a:57:
                    6c:d0:a9:20:90:c7:28:bd:3e:a0:77:5d:88:81:d0:
                    77:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7E:C4:C6:C8:00:1E:79:D7:99:1E:18:FC:7B:C4:03:3F:A1:5D:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ba106091-e3cd-3661-9b96-e4d279bcb3f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:1b:f5:b0:79:ae:15:86:1c:4f:8c:a0:2e:e1:9c:e3:43:96:
         2a:ff:4d:4c:cd:1c:f0:76:cd:8a:82:14:ab:0b:ed:03:a0:73:
         e1:39:c5:dd:09:65:73:0c:8f:c8:42:2b:8e:2e:3a:33:18:65:
         df:2d:99:05:47:31:ff:5e:70:c6:e8:d2:5b:3e:9d:5f:60:f3:
         c2:14:cd:02:65:54:ec:87:56:93:89:df:f9:b4:5b:a4:c7:87:
         c2:6a:b8:de:b1:65:55:0f:a1:38:66:11:ec:15:40:43:5f:87:
         30:69:3e:cf:24:63:e4:02:f6:bf:2c:82:a1:1f:de:c6:3e:02:
         01:af:51:ea:78:d1:89:cf:a4:3e:3e:ce:20:01:f2:fd:ec:a6:
         e4:5a:5f:da:48:89:8d:45:37:ba:cd:98:cb:31:b6:71:98:08:
         2a:57:36:9e:94:a7:57:cd:99:90:ac:b1:e8:88:51:a6:5b:14:
         fc:d8:f7:a6:ca:73:b5:2b:0f:7f:a1:04:bd:6a:d9:0e:a7:cc:
         cc:03:93:66:88:41:8c:79:23:17:25:27:8f:ee:6b:18:1a:2e:
         07:52:77:59:84:e5:fb:7b:7a:88:5b:1d:52:95:3f:a8:d4:b2:
         56:73:99:93:7b:2a:a7:d7:f9:3b:ce:d2:c0:c9:da:26:8b:fa:
         60:74:a2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:36 2025 by rpki-client