Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/beb52f88-a05e-37ef-9a78-a6c3803d1c91.roa
File:                     beb52f88-a05e-37ef-9a78-a6c3803d1c91.roa (raw, json)
Hash identifier:          Sd+bjF2R5R9AN9mYCMWucMvoMcJHXPfv4ePAF+rHk/E=
Subject key identifier:   6F:A4:C0:3C:85:89:5D:BE:79:90:57:2C:A2:F2:33:0C:1E:16:61:77
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C8DB3CD5DB965492C5040
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/beb52f88-a05e-37ef-9a78-a6c3803d1c91.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     15169
IP address blocks:        104.134.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:8d:b3:cd:5d:b9:65:49:2c:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=de7733a5-110c-4f93-b0ba-74a4a775abc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bb:80:db:fb:88:a6:67:55:06:e8:1c:09:23:
                    85:b7:5a:4d:34:99:51:24:57:54:1c:a4:3b:57:b0:
                    81:75:bd:ea:f3:78:56:ca:47:f9:2c:ab:31:3e:4d:
                    a7:95:f9:62:08:8d:9a:7a:d9:cf:bb:ca:f9:b1:6f:
                    53:8e:6e:34:88:ae:8b:10:11:d7:ba:75:66:51:c6:
                    ad:14:4b:04:71:91:6d:ed:66:90:86:d0:46:9f:89:
                    5e:92:36:1e:06:f1:6f:83:96:1c:69:ce:59:13:f3:
                    bc:d1:f2:ec:bf:4b:32:6c:57:e7:2e:5d:e1:54:6e:
                    0d:6c:3c:c2:b5:5a:1f:3f:50:81:41:4d:78:e4:fa:
                    67:da:a9:f9:5e:64:bc:aa:e7:1a:f3:96:99:eb:48:
                    c0:8d:79:e3:96:be:48:ed:e9:81:bb:a1:23:33:32:
                    a3:0e:05:df:14:50:85:72:d8:25:89:0c:8b:7e:e2:
                    a6:58:73:43:35:47:b7:ea:5c:26:85:30:57:d1:06:
                    2c:23:a5:a7:9b:f0:f2:a9:e1:5a:53:7b:5f:81:5d:
                    cc:9e:1a:b6:8c:0c:9f:59:e3:6b:f8:2d:b1:92:27:
                    9d:8e:65:55:b6:69:3a:79:39:f7:5f:db:ab:90:83:
                    d9:53:b4:be:75:47:7b:35:a3:db:10:f7:6c:f7:7d:
                    83:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A4:C0:3C:85:89:5D:BE:79:90:57:2C:A2:F2:33:0C:1E:16:61:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/beb52f88-a05e-37ef-9a78-a6c3803d1c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:c7:08:e1:1f:1b:2e:1a:c3:f0:61:b9:25:7b:37:d2:1b:5e:
         4e:cd:b4:e4:f4:72:88:5f:27:9b:66:8c:19:c2:c5:79:77:2d:
         64:08:57:b0:48:eb:6d:d6:46:c9:45:12:39:39:55:cc:2b:db:
         5b:80:f9:e5:7c:66:67:43:07:f6:87:b8:0b:0b:ce:b2:be:29:
         2a:79:d3:68:db:e9:a7:70:5a:9d:4c:1b:6b:15:dc:84:81:e4:
         47:74:99:33:cd:0c:45:b4:dc:f8:f6:81:3e:77:be:19:0e:c5:
         09:8c:a3:d7:b2:cc:9b:f6:c3:87:a3:62:74:e1:23:76:af:06:
         49:ff:59:4a:c9:c8:f1:43:3f:59:ed:bc:f1:c1:51:c7:a0:17:
         a0:b2:84:aa:e6:e1:55:35:55:10:ae:3c:3c:79:98:f3:13:75:
         72:c4:08:15:98:7f:c1:fd:b1:8d:8d:d1:7e:52:8e:a2:ba:7b:
         37:aa:9b:ec:d9:ba:62:73:2c:6d:29:a6:c7:a3:67:e8:fd:92:
         3b:a9:67:0d:45:d7:76:47:08:fe:7a:bd:2e:67:d0:19:c9:f6:
         72:4e:f7:79:16:d9:af:3c:8c:4e:3a:18:5a:7e:4b:59:f5:aa:
         81:eb:d2:ea:fd:d8:5a:95:0e:4d:0e:33:d0:11:92:30:dc:14:
         dc:e8:b2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:06:09 2025 by rpki-client