Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ef55ddd0-d4fe-3838-9ba1-d4064797572d.roa
File:                     ef55ddd0-d4fe-3838-9ba1-d4064797572d.roa (raw, json)
Hash identifier:          oYg5+Q2Er8YMGR5FoIZ90e+fuLAgSfUeaMVH/b/yVjU=
Subject key identifier:   D7:82:AD:B7:34:A9:D4:EF:51:C9:C7:08:30:C9:B0:1A:AF:BD:5F:D8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C74DC6450059B48B12E68
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ef55ddd0-d4fe-3838-9ba1-d4064797572d.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     15169
IP address blocks:        104.134.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:74:dc:64:50:05:9b:48:b1:2e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=a6cd00e4-d071-4655-99c2-3d66547d5b10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:13:e6:f9:65:74:29:a3:69:4e:cd:5c:25:61:
                    51:4b:c3:db:bc:ac:1e:ae:3b:a5:09:1a:31:0f:0b:
                    ed:d0:8c:0b:aa:0b:73:6d:7c:36:b0:db:71:22:a6:
                    88:d0:da:cb:c1:de:2c:da:4f:c7:40:b7:94:af:fc:
                    a4:fc:02:04:c5:f2:ef:e8:43:4f:3c:bc:7c:04:ca:
                    f7:fb:98:53:3f:13:fe:60:d8:5a:84:9f:0d:d9:c1:
                    3b:c4:d2:76:67:10:81:8a:00:da:fa:83:7f:e7:41:
                    21:63:67:de:4c:81:72:0e:43:7f:f7:b8:dc:07:c5:
                    95:7f:84:c5:bd:4c:7c:be:07:d7:35:67:b2:ed:74:
                    69:7b:bf:54:11:e2:56:e3:70:24:11:2f:ec:03:19:
                    c0:c9:63:8f:c7:73:e4:fb:a0:d8:bc:1e:29:1e:5a:
                    eb:cd:53:a3:bb:34:59:76:d4:04:da:67:d0:29:f1:
                    e4:a9:51:3c:56:cd:cf:9b:a7:b7:fa:2a:14:e7:f2:
                    bc:a8:ad:b4:fc:91:8f:81:ca:0f:ee:e1:45:32:4b:
                    78:a5:ef:f5:18:8c:90:d1:51:ba:6a:f8:18:ca:2f:
                    2a:ba:f7:47:b9:41:18:4e:24:3e:47:1a:d7:38:79:
                    f1:9b:6c:04:9d:e3:80:d3:96:5f:41:6e:6b:f2:5d:
                    a8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:82:AD:B7:34:A9:D4:EF:51:C9:C7:08:30:C9:B0:1A:AF:BD:5F:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ef55ddd0-d4fe-3838-9ba1-d4064797572d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:51:97:54:44:5d:73:68:7c:c0:36:d3:ef:5a:54:d7:99:24:
         2d:02:9c:2e:88:62:a5:b3:26:86:8e:07:1c:26:79:93:85:0e:
         4f:d8:a7:01:bc:f9:a5:d0:a0:4e:5b:87:76:94:37:40:80:33:
         e6:31:c4:63:ee:f6:c5:6c:20:7a:0c:38:f4:49:05:df:52:c3:
         1d:d0:6c:a8:55:bb:d1:39:d3:9d:7e:4e:1c:b0:31:28:5a:6e:
         dc:06:67:ab:ca:fe:47:90:32:b7:ca:e9:c6:6a:61:0d:5a:34:
         79:b6:21:b7:f0:50:4c:ee:c6:30:28:5c:11:33:df:dc:aa:ba:
         39:79:1f:1e:e2:94:dc:8d:27:9a:88:f1:12:b8:a0:16:d4:06:
         53:46:a0:ef:fa:d6:ef:2e:03:b9:d8:b6:8d:28:4c:b6:77:86:
         97:22:30:22:55:6c:13:61:d9:fb:68:9c:47:e2:3f:97:6e:36:
         dd:04:77:38:68:92:fc:ef:fa:1d:fd:8b:05:b5:00:69:6c:7a:
         61:83:a1:49:61:a8:cd:74:d3:70:a7:3a:e9:a7:4c:95:8c:99:
         aa:aa:7c:97:19:8c:11:c6:8f:3f:52:5f:93:b1:cd:49:63:6a:
         da:08:03:6b:d0:19:f6:04:e3:e2:52:18:f9:17:a2:73:b2:16:
         8f:a1:2b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:05:18 2025 by rpki-client