Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa
File:                     bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa (raw, json)
Hash identifier:          QddhfC1TGIt9EyNzqb9p3KPiA/Xwizzb+j6dgV1j73A=
Subject key identifier:   91:62:37:9E:F4:8E:16:A9:58:D8:4D:CA:09:D1:8B:07:9D:DA:5F:11
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C6FE6CBA99FF4B2066540
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.133.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:6f:e6:cb:a9:9f:f4:b2:06:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=1e51b798-e855-4a3e-83da-5d43845ad240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:61:55:9a:20:5b:7d:74:3e:78:e6:76:0f:56:
                    c7:ee:d3:d8:da:38:ba:30:24:6a:c9:1d:c0:73:e4:
                    a8:be:7e:ba:18:50:7a:1f:47:73:9c:97:35:cb:22:
                    79:7a:6a:7a:3e:57:9b:c9:56:85:0b:4a:66:48:57:
                    dd:37:6e:db:28:f2:ce:29:b5:25:3b:71:62:3a:84:
                    50:60:78:36:12:0c:97:14:90:7a:b1:f9:33:40:99:
                    9e:42:c4:19:c4:33:f6:52:eb:c2:34:13:11:f1:5a:
                    ce:0d:3a:3d:f2:4f:f2:da:f0:92:41:de:68:37:11:
                    da:fc:8f:e6:0f:25:6c:00:87:9c:ce:b6:f9:01:6e:
                    1d:61:1c:2b:fe:00:d1:eb:38:d4:8e:96:03:58:14:
                    b4:50:f2:e2:6e:cf:31:7a:dc:28:9a:98:1f:f2:e8:
                    63:20:ed:8b:4c:f6:dd:cf:16:68:73:19:c4:a4:a3:
                    7f:59:c2:fa:be:bc:0c:60:94:d2:d1:1d:65:89:05:
                    ff:09:dc:4a:a4:2b:65:2b:92:6b:ab:35:be:18:e1:
                    96:2f:74:98:69:fa:47:24:7e:67:74:ee:b0:c2:c9:
                    97:c7:49:70:41:14:e5:77:0e:9d:76:04:19:5b:3b:
                    ff:ec:e8:b0:33:82:59:64:10:80:d1:8b:52:6a:af:
                    25:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:62:37:9E:F4:8E:16:A9:58:D8:4D:CA:09:D1:8B:07:9D:DA:5F:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:85:ed:10:8b:82:9a:b3:9f:13:c1:de:fc:b6:8a:ca:48:99:
         4f:69:0a:32:ca:84:91:97:55:79:56:c6:de:a8:56:b1:c4:3a:
         8a:a6:ea:1e:e3:2b:a3:ae:8b:98:0b:7d:b6:37:06:c6:e5:eb:
         f7:24:1c:fc:b9:50:35:5b:ce:62:b6:f8:eb:61:e4:46:dd:e4:
         49:0d:94:ff:ec:ec:32:c7:a1:5a:f2:85:3e:f9:28:a8:0b:71:
         c3:59:8a:da:4f:f5:fb:77:ae:f3:f9:b4:fb:8b:c1:a1:0c:ec:
         cf:0f:f4:91:a0:57:09:b6:cb:cf:db:71:6b:74:bf:a1:46:d9:
         7f:cc:85:54:5e:9d:4d:08:e7:06:aa:66:ea:a9:ae:fd:48:29:
         55:2a:59:6d:ee:60:97:0d:da:59:14:54:76:7c:3f:af:94:e5:
         8d:ca:31:d8:ef:9a:2e:1e:54:c9:f7:03:35:e0:66:db:4b:ef:
         ff:bb:9a:37:46:dc:5a:6a:f3:7a:35:bf:7c:ce:be:13:fb:d6:
         73:f7:3f:cc:fb:de:d1:4e:22:61:58:ac:4b:ee:4d:ef:22:c3:
         ab:99:25:90:77:13:d1:31:61:a2:d5:08:a4:ed:03:b9:b3:3c:
         4d:46:5f:bd:c9:84:b0:42:98:d8:7b:23:37:0e:72:f0:9d:d6:
         35:12:7d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:57:18 2025 by rpki-client