Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cd920eb0-8076-354f-b11b-a070d779957b.roa
File:                     cd920eb0-8076-354f-b11b-a070d779957b.roa (raw, json)
Hash identifier:          yxW6xgJU4EumLr7YaZA1pSgCXOfphZ2RLpI6yrJeKbg=
Subject key identifier:   47:D3:70:1E:E3:AF:B9:20:F3:C8:B0:CD:5A:BC:89:D5:04:34:83:15
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5141D5ECC278251F24F80D80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cd920eb0-8076-354f-b11b-a070d779957b.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.132.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:d5:ec:c2:78:25:1f:24:f8:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=1d8404ee-270d-43fc-b9b7-a70be372bd9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:4d:13:4d:a1:ac:8e:f7:55:99:08:21:f6:
                    8c:be:2f:39:e3:c9:b6:b6:10:4b:fb:77:81:7f:3e:
                    98:6c:18:15:17:dc:c9:07:0b:e9:f7:6f:84:c8:6c:
                    51:f1:8b:58:28:ac:5c:11:5d:e5:5b:45:19:28:32:
                    14:2d:2f:a9:0b:c8:4a:a1:7a:32:96:fb:6d:4e:9f:
                    6a:d1:01:d3:24:6f:71:9d:93:ad:3f:3b:fc:e3:4c:
                    7f:69:09:18:36:7c:b4:f4:88:cf:ea:14:d2:de:5a:
                    b2:6f:f5:a1:5a:26:37:a7:ec:dc:16:5c:5c:3c:33:
                    88:c7:2b:94:93:5d:c0:a5:10:96:50:5b:ab:55:e9:
                    f6:4d:09:58:43:b6:f3:9c:df:14:83:01:7c:35:af:
                    35:81:bf:d6:9f:c5:56:ec:7f:23:44:d3:7a:a8:93:
                    e3:2b:7f:24:a0:80:85:ad:bd:f9:5d:f7:de:ae:d8:
                    28:e4:e4:63:03:92:87:b0:a8:c0:7e:aa:91:8a:57:
                    56:8d:c3:86:87:ff:39:b6:07:e1:59:cd:b0:10:a7:
                    05:4f:12:47:bd:6e:a8:39:dd:13:ef:62:0c:7f:e0:
                    0e:f0:98:b5:cf:17:42:1c:6f:f8:8e:b3:45:a8:36:
                    36:84:d2:fd:5d:02:e9:4c:fc:74:e6:3a:6c:4b:20:
                    1a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D3:70:1E:E3:AF:B9:20:F3:C8:B0:CD:5A:BC:89:D5:04:34:83:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/cd920eb0-8076-354f-b11b-a070d779957b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:d1:60:96:14:19:ff:16:9f:3e:3c:69:69:c7:e8:b9:ff:ee:
         2c:ef:fc:06:82:13:3e:38:b3:76:46:81:3a:ab:e0:61:67:e8:
         0b:96:d1:57:2d:48:00:f2:0d:66:3d:3e:be:fa:34:14:e7:0b:
         74:bb:da:26:e1:97:6b:b0:1d:3c:ce:9e:93:a8:92:8f:12:55:
         78:81:6f:ee:45:3b:f8:23:27:1b:04:cd:77:52:ce:88:99:eb:
         9c:44:15:19:72:5c:cd:66:e0:3d:ad:4e:77:d8:d4:21:cb:ad:
         93:db:e1:86:8b:ee:44:1f:06:1e:ce:10:22:cc:cc:8e:c8:6c:
         ac:4f:b2:9d:e7:1b:93:c7:da:f7:8d:3e:ab:f0:29:59:8a:3d:
         37:c4:d9:b0:17:3f:3c:33:95:92:5d:52:09:c9:09:7b:84:67:
         4b:82:e6:79:44:be:1f:71:ff:4f:4d:13:06:b4:79:98:01:e9:
         43:16:d7:b9:d0:c5:41:f4:ab:a8:47:0c:5e:47:90:09:4a:5c:
         a3:9c:49:c7:94:9d:35:02:82:aa:98:2b:94:f0:fb:bb:0a:f5:
         4b:55:23:c5:85:3a:6b:d7:7a:06:09:52:5f:8f:f1:f9:99:27:
         7a:e3:08:62:b5:ef:14:52:04:5e:58:95:e1:63:8a:3c:93:3a:
         7e:14:09:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:57:07 2025 by rpki-client