Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f8a863cc-d66a-3b31-87ff-916096ac3c47.roa
File:                     f8a863cc-d66a-3b31-87ff-916096ac3c47.roa (raw, json)
Hash identifier:          brdV4+NriByMmKPl//nk+tBYkFdhdpZwL5A7PCOgTOU=
Subject key identifier:   0F:4B:71:1C:B4:ED:CB:27:A2:CB:89:77:3E:A1:F7:D6:46:43:97:FF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5F3739FC7DBFC7CF2ED4FE80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f8a863cc-d66a-3b31-87ff-916096ac3c47.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36383
IP address blocks:        104.135.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:39:fc:7d:bf:c7:cf:2e:d4:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=af85fb47-7d13-490b-a69c-02a2740c363c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:bc:61:19:12:61:78:31:a2:54:5a:5a:28:
                    b9:6b:3c:42:67:6b:76:99:ee:cc:b8:18:c3:05:56:
                    5e:79:b6:e5:fc:e3:9c:e5:db:36:86:f1:ef:16:62:
                    8c:79:7d:28:02:2e:80:82:67:9a:0e:ef:a9:55:0a:
                    ed:d5:4a:89:2d:f6:6c:b1:75:70:cd:44:46:75:6d:
                    3b:7a:96:7e:8d:4a:c4:c6:e8:cb:32:ee:4f:7a:92:
                    8e:f1:56:5e:ab:82:44:46:22:24:10:7b:ec:c2:c9:
                    dd:87:27:ad:e5:64:bd:d5:14:6f:17:24:61:ad:4c:
                    d6:56:a8:99:a8:23:28:ff:f8:a8:cd:28:f5:43:a2:
                    8a:55:6b:89:02:c1:58:a9:e9:1f:cc:8c:0d:e2:d7:
                    dc:ff:8a:ec:48:1b:41:6b:93:fb:3d:3d:9f:3a:e1:
                    38:20:04:e9:e7:d8:2c:a9:c1:f3:d2:98:7a:f3:16:
                    1d:6f:b5:e6:eb:e5:65:63:fb:09:1a:8b:34:80:3a:
                    e8:72:fb:83:ad:20:15:4b:e2:8c:a3:31:c9:cc:53:
                    c2:32:59:89:f1:bb:f5:5a:48:a1:18:22:e1:ea:de:
                    2f:07:fe:a9:07:59:47:0d:95:14:37:f9:c4:d9:45:
                    66:12:78:fb:23:44:e6:dd:14:a5:85:08:70:36:31:
                    01:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4B:71:1C:B4:ED:CB:27:A2:CB:89:77:3E:A1:F7:D6:46:43:97:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f8a863cc-d66a-3b31-87ff-916096ac3c47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:06:5f:f5:25:e4:f7:01:2b:83:9e:dd:3e:1e:94:eb:92:27:
         e2:53:41:72:3a:13:6a:50:06:09:c1:76:f9:47:80:66:c9:b3:
         76:a1:86:b5:f4:d9:5a:e1:45:0d:8a:14:4d:6c:6a:cb:60:c4:
         98:f7:00:8c:70:89:63:94:dd:44:fc:be:4e:08:91:23:2d:20:
         cb:73:06:ae:19:28:23:79:eb:08:d9:48:c4:e6:80:a4:3d:ac:
         d8:50:e6:67:9f:73:d3:2e:1c:a9:ce:1f:41:59:01:78:1b:53:
         d9:e4:d3:ca:fb:85:7a:2b:c7:7d:af:c9:38:63:ff:c8:11:c9:
         8b:e0:1b:6a:b6:4c:ed:f3:06:9d:2e:9b:2e:3d:57:67:b0:5c:
         d3:55:b6:19:f8:63:00:f7:ac:68:22:3d:10:fa:3a:55:b8:be:
         71:99:d2:03:9b:28:1b:d8:87:35:ac:57:24:59:e2:ff:7b:98:
         84:95:7a:e4:37:ed:a6:f2:14:3d:02:d1:b9:d4:48:30:c7:1d:
         f0:22:72:59:67:fd:cc:e9:03:f1:31:19:04:15:9e:70:49:18:
         ef:8f:b8:88:13:1b:1b:a6:c0:03:d7:a1:26:0a:0a:db:f8:67:
         ab:41:fd:66:4b:b0:94:ad:6a:fc:22:6a:a9:b3:c8:ef:5a:18:
         dd:f0:7e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:57:13 2025 by rpki-client