Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bcd23307-1769-3883-b749-7320ac4ef80d.roa
File:                     bcd23307-1769-3883-b749-7320ac4ef80d.roa (raw, json)
Hash identifier:          kCPn45h5hEaoT+z+faO1tlftdhEP7X++VRbkFxFd1+g=
Subject key identifier:   6F:14:74:85:F0:DF:30:56:59:D1:42:B1:4E:DB:2D:69:8D:DB:AB:17
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C72B628E20D60B02C71C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bcd23307-1769-3883-b749-7320ac4ef80d.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.133.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:72:b6:28:e2:0d:60:b0:2c:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=e355044a-0d97-4c1b-8297-8da11be0bd10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:51:05:1c:b2:36:14:07:5c:5f:3e:77:aa:
                    ad:61:03:53:96:3b:d3:73:26:61:f0:e7:9b:17:00:
                    89:32:4e:6c:64:6f:cf:e4:0a:9b:4e:5f:7a:3c:c3:
                    90:bd:24:63:70:e7:6f:85:e0:87:03:45:b6:fa:fb:
                    35:da:79:04:b5:1a:12:c5:20:07:de:b8:3f:2f:42:
                    19:3a:62:ad:6a:87:01:1b:49:1c:92:e1:a8:76:0d:
                    ee:97:ac:d9:d1:56:67:e9:07:2d:ed:11:60:17:07:
                    34:3f:fb:f6:7c:09:5b:48:4f:b4:0e:f7:e0:5d:44:
                    4f:59:8d:69:9b:73:82:86:37:e8:ff:2d:3b:41:2f:
                    63:18:8d:21:55:92:14:c4:d3:25:36:75:26:06:92:
                    5b:c5:d3:5d:30:82:51:21:8f:9c:5a:68:64:3c:f1:
                    49:6f:2f:b8:93:86:aa:d7:66:43:fc:a2:88:84:0f:
                    fd:0e:c4:cd:75:7c:b4:52:1a:c4:31:24:cc:de:43:
                    db:76:2e:ee:f6:4f:57:fd:a4:3c:24:5a:65:1a:02:
                    ea:e8:13:2b:0f:f2:68:8c:41:2d:12:3a:bc:af:e4:
                    09:c6:4b:d5:a6:b6:17:05:10:f1:77:5a:1a:3a:1f:
                    62:90:c9:76:75:2f:15:0c:82:58:d0:bc:77:bd:bf:
                    97:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:14:74:85:F0:DF:30:56:59:D1:42:B1:4E:DB:2D:69:8D:DB:AB:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bcd23307-1769-3883-b749-7320ac4ef80d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:3e:47:5a:a3:0c:58:28:da:aa:26:2f:83:47:f6:60:c9:89:
         31:fc:32:c3:d5:ae:55:95:b7:11:7f:c5:f9:d8:08:1c:e4:85:
         07:d0:98:d0:53:60:ed:85:7a:25:ac:1f:c3:b4:a3:9d:29:01:
         b6:84:d5:aa:66:0d:5b:cd:89:ce:6c:b4:1e:b3:9a:08:e0:d1:
         67:23:7d:40:df:31:f2:6f:52:b6:9e:0a:ef:ab:16:88:79:82:
         6f:72:a0:c2:2c:68:01:29:44:15:d6:13:ab:60:3b:0c:54:c4:
         45:33:cf:63:27:b6:29:bf:90:59:3a:4b:77:c5:9f:2c:93:f0:
         f3:38:13:4e:c5:d2:4c:35:d8:13:74:49:8f:16:33:96:8e:c6:
         5e:26:b7:a6:77:c0:f8:9a:8a:33:fa:85:97:d2:e2:b3:29:11:
         4c:9e:77:89:e1:fe:1b:37:e3:c2:ec:dd:73:69:da:b0:ab:05:
         bc:2d:68:ac:ea:06:8c:1e:86:07:31:43:1a:29:60:a2:ba:a0:
         eb:35:6e:58:a5:7e:83:a9:9f:2e:f8:ca:ef:ff:04:e4:a5:dd:
         ae:1a:c5:b1:c7:09:37:30:f3:70:2b:5f:3b:cb:2f:e6:e8:51:
         35:9d:97:fb:66:c7:b3:92:45:3a:52:e8:22:30:47:2a:45:18:
         b7:6c:58:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:22 2025 by rpki-client