Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0397e73-619b-3ac4-ba42-d6fef2a709d9.roa
File:                     e0397e73-619b-3ac4-ba42-d6fef2a709d9.roa (raw, json)
Hash identifier:          ApyKPDmukUBHBTWcK3x5/DMDczbnF9Q8fN/WtNu2+4A=
Subject key identifier:   70:65:A9:D0:90:28:25:05:EA:F0:2B:0A:CC:7E:D0:9B:72:EF:06:E9
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B2FC182EB6924264ACC547FA0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0397e73-619b-3ac4-ba42-d6fef2a709d9.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     15169
IP address blocks:        104.134.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:82:eb:69:24:26:4a:cc:54:7f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=356a4066-37d3-4938-ab2b-40079ff612ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c7:c0:17:8d:a0:d2:7f:9e:58:40:60:0f:44:
                    88:cb:99:5f:54:39:b8:68:ee:b6:70:fb:01:eb:37:
                    c8:32:a8:db:dd:34:fa:e1:83:ab:44:37:f2:90:ef:
                    7b:1b:78:43:31:b1:79:82:71:cc:53:37:5a:24:e8:
                    0f:01:a6:9d:77:81:72:b1:a5:7b:c0:01:2d:72:2e:
                    6b:96:c7:09:27:f0:4f:bc:69:6d:e8:f0:49:54:8c:
                    98:71:23:02:53:93:70:ea:1d:09:9a:b7:96:68:81:
                    2d:e9:ff:1b:e9:4a:64:ac:89:4d:1a:c0:b0:17:08:
                    f7:34:ea:67:43:fe:ca:a2:61:6e:1a:76:c8:ac:df:
                    34:28:a8:18:40:1b:ef:42:b1:c7:25:55:7c:9d:07:
                    b6:db:35:fa:55:39:ad:7a:5a:5f:b2:cd:b0:04:40:
                    36:44:a1:4c:36:1c:69:e0:2b:40:c0:09:b4:47:fe:
                    3c:53:a6:29:86:16:cc:40:0e:d7:3c:be:2f:c2:70:
                    36:2e:1c:5c:cf:4a:b2:40:92:11:b1:14:92:d3:d4:
                    49:c8:ff:23:24:89:7b:95:a9:47:ab:aa:88:1b:21:
                    b7:df:bd:d7:db:c3:b2:09:1c:b2:e8:01:c5:1b:11:
                    9d:2f:94:9b:43:69:b7:98:ac:f5:51:fc:b8:c7:6d:
                    13:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:65:A9:D0:90:28:25:05:EA:F0:2B:0A:CC:7E:D0:9B:72:EF:06:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e0397e73-619b-3ac4-ba42-d6fef2a709d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:4b:56:12:18:36:02:83:6d:cd:60:78:16:89:3f:8b:2d:9c:
         2f:76:3b:7e:b2:ef:40:81:c2:7b:bb:a0:80:6c:02:e3:58:1f:
         42:3f:76:ec:66:c1:bd:56:f9:d0:d2:19:dc:77:72:57:df:39:
         f7:3e:66:0d:64:3f:43:4b:01:85:d7:8c:68:6b:12:89:17:43:
         e3:52:a8:f0:51:bf:90:7f:32:ea:b5:3d:18:38:93:8c:05:e0:
         8c:cd:c5:a2:35:ce:51:99:ce:69:65:83:42:f6:af:bb:da:4a:
         d4:00:51:1b:ce:8f:6b:a8:f1:aa:80:78:ae:e0:cf:70:02:84:
         3b:27:ec:78:8e:16:5e:a3:79:6b:f5:83:43:18:e9:5b:7c:cd:
         d3:70:77:a2:2f:2b:08:06:db:83:60:19:a8:b1:6a:53:68:02:
         9c:a3:4a:06:1b:2a:b5:a3:07:f3:9b:a1:57:c4:3d:66:70:ca:
         0d:b2:f6:06:46:66:82:05:5a:f5:61:ea:e8:80:dd:09:49:b9:
         75:d1:94:3e:0c:f0:b9:0f:23:a0:ed:e1:1c:40:96:f6:dd:7a:
         71:3f:9e:7a:77:a8:fb:a2:c7:0c:b3:58:ca:e8:e6:04:86:31:
         93:6e:79:2e:03:43:fd:0a:0c:5c:53:69:84:7b:42:0b:be:75:
         d7:37:75:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:10 2025 by rpki-client