Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f81423fc-2fe1-3a00-8c04-903436fb49bd.roa
File:                     f81423fc-2fe1-3a00-8c04-903436fb49bd.roa (raw, json)
Hash identifier:          GRrrR2LwIkRjD99XAa4y/GgljnwTlLKioO/blN5iEQE=
Subject key identifier:   9E:40:15:CC:86:30:A7:E5:9C:29:BB:BC:38:7B:09:FA:F6:D5:55:71
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5141EB662E75E502885D4AF8
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f81423fc-2fe1-3a00-8c04-903436fb49bd.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.133.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:eb:66:2e:75:e5:02:88:5d:4a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=8fe13b4b-f74b-445f-a1e5-a17b4d95d145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:50:67:9c:37:64:22:d9:55:4d:ab:38:09:ae:
                    9a:9d:c4:cb:a9:ae:ac:fe:d8:13:9c:98:06:1a:7d:
                    ef:1a:56:ed:bf:4f:35:c4:83:96:21:8e:da:77:72:
                    89:d9:66:82:5a:d7:69:5f:cb:3e:38:d8:76:b2:5a:
                    45:cc:7c:0a:c1:a6:50:63:9a:ac:63:0a:2d:9f:b9:
                    89:ea:3b:e5:db:37:8d:c2:cd:b8:1c:ec:06:11:33:
                    b5:7f:bb:ba:32:94:c1:1b:48:a5:ab:08:dc:b4:f3:
                    6e:60:22:b6:e2:db:5d:ae:73:f2:31:fe:0b:65:0d:
                    8f:d1:ff:68:f5:f9:e8:57:1f:1b:90:75:f5:03:9f:
                    27:9f:36:26:4b:65:06:3c:9b:c4:60:ca:c7:a2:a4:
                    2b:ea:79:f3:3a:28:8f:4d:fb:2b:1d:fc:24:b3:10:
                    2e:3c:3f:7d:d7:98:d6:a0:c0:62:bc:2f:0d:a5:74:
                    1b:74:5c:3c:d2:c6:1f:35:d1:9e:47:d4:11:5f:73:
                    0f:d0:f0:e8:8c:a5:92:3f:7d:07:fe:55:35:ae:28:
                    80:80:3e:0d:4c:16:02:e1:56:08:2a:e7:dc:3d:23:
                    ed:34:67:84:a3:57:80:5a:da:98:3f:14:76:4c:53:
                    0a:c7:22:ff:cd:ac:90:1d:f3:a8:b3:17:41:d1:8b:
                    bb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:40:15:CC:86:30:A7:E5:9C:29:BB:BC:38:7B:09:FA:F6:D5:55:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f81423fc-2fe1-3a00-8c04-903436fb49bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:83:66:a2:cb:ea:46:45:ca:56:06:81:22:aa:c5:1d:bd:7d:
         41:83:3f:ac:dc:d0:e6:1b:81:48:3e:10:cf:19:c3:43:26:ec:
         c3:6e:b3:06:b6:c1:00:28:74:cd:70:a2:0e:4b:d3:b0:e6:33:
         8b:c6:4a:8b:f6:e5:c7:2a:98:79:8c:d2:df:be:25:12:fd:f9:
         91:e0:7e:20:2a:58:2c:40:8f:f2:37:7b:8b:cd:46:36:fd:fb:
         a0:fc:d2:b4:9d:a3:16:d7:29:16:a0:84:42:14:76:2c:a5:22:
         86:f1:75:68:7c:e4:75:8f:ff:3b:05:f1:21:ca:23:8c:c2:70:
         7c:18:ac:49:32:65:74:a1:81:a0:08:ca:c6:fe:8d:47:1b:04:
         1f:1a:4a:a3:a8:09:85:5e:5f:b1:2c:97:27:16:4a:14:b0:06:
         a8:24:04:16:25:6b:1a:43:76:a6:3a:1d:58:56:b4:c8:c3:2b:
         e0:2a:69:b8:3c:36:b6:79:cf:b5:0e:cb:b0:2a:34:3f:9f:b8:
         6a:3e:db:d3:2d:1d:56:19:2e:fa:b5:d9:31:13:96:87:6f:3f:
         6e:55:95:22:23:7a:4c:98:59:db:9d:82:88:d9:bb:91:af:c0:
         f7:d7:71:98:28:db:54:0f:e8:c2:ae:e2:c4:2d:09:06:1f:21:
         b5:54:f9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:06:24 2025 by rpki-client