Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff3dbfc2-21d7-391e-85a3-49fe7943fbfc.roa
File:                     ff3dbfc2-21d7-391e-85a3-49fe7943fbfc.roa (raw, json)
Hash identifier:          RL2MSGf9/Npy9hmFKWINGz/aQV6oosV7QrZZLQx3xdo=
Subject key identifier:   79:2D:CB:61:59:8F:09:6D:67:BD:F7:D8:C3:59:B2:B3:1A:5C:95:A3
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C752FE88471D5F8C61D00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff3dbfc2-21d7-391e-85a3-49fe7943fbfc.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.133.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:75:2f:e8:84:71:d5:f8:c6:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=fbc72a4a-fadc-47a8-99c2-58f8bc588add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9a:27:b5:84:40:8e:86:73:01:67:d6:ea:12:
                    74:2c:a2:fb:8a:95:e6:2b:60:ed:41:dd:f8:b8:2b:
                    29:7c:14:1b:4f:5f:7e:96:81:92:0d:70:22:7c:d0:
                    19:cb:99:6b:71:f2:68:de:bc:54:5d:2c:7b:6a:25:
                    1f:fd:0f:1d:f9:84:3d:4d:8a:c5:98:46:ee:92:a0:
                    25:26:9f:e0:57:9c:7b:9b:c0:59:0c:e2:bb:3b:09:
                    c4:5c:39:dd:92:6b:ae:17:81:43:5b:53:6e:60:51:
                    74:7d:ab:de:da:d1:34:20:90:eb:57:8a:ee:95:f6:
                    c5:f3:95:51:c3:d1:9d:65:b9:7a:0c:77:d2:78:c7:
                    71:a2:d4:1a:1a:95:56:2e:ee:37:7a:fd:ae:5d:9c:
                    3b:ef:60:cb:5d:fe:65:63:17:53:5e:81:da:91:a4:
                    60:ee:bf:1d:87:97:6c:f3:a4:ba:02:cc:08:7a:f5:
                    6c:27:6d:ea:ad:8b:4d:47:0c:f5:0e:4f:d3:fa:52:
                    ae:61:ac:a9:75:24:9c:59:03:0d:cf:f0:3f:d7:34:
                    ac:c2:0f:50:59:67:47:ce:7f:c6:c4:6f:b3:2d:73:
                    0f:43:54:8b:31:6f:ce:c7:2d:7d:05:5f:d5:39:c9:
                    45:6b:8a:50:de:d6:08:3c:16:3d:37:6e:4f:80:d0:
                    d1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2D:CB:61:59:8F:09:6D:67:BD:F7:D8:C3:59:B2:B3:1A:5C:95:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ff3dbfc2-21d7-391e-85a3-49fe7943fbfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:45:c7:12:f7:44:e3:43:09:fc:69:71:57:92:71:37:14:df:
         8c:26:62:e8:ce:c0:ae:86:ce:7a:a9:7f:da:cb:cd:7f:a1:7b:
         cd:55:61:4a:07:7f:eb:8f:03:a7:8e:da:a4:bd:16:07:21:49:
         0d:88:d7:56:d2:22:bb:b4:87:f1:bb:84:4c:81:d6:c1:1b:32:
         f7:23:c1:40:9a:f3:53:e1:d9:96:03:a9:77:f4:09:09:32:78:
         7d:2c:10:25:88:51:c5:45:c7:67:aa:15:4a:9b:c4:84:46:b0:
         3c:c4:67:3e:6f:37:79:8a:e6:56:a2:48:69:f5:9e:93:da:ea:
         54:7c:35:04:f0:14:62:23:a6:5b:a8:9d:c2:d5:76:7a:d1:30:
         8f:39:bf:0d:92:0f:ad:49:b1:91:ea:2d:23:0b:ac:d8:d3:55:
         f2:53:57:d2:02:a5:e2:ed:76:94:e3:2c:52:60:48:b4:65:20:
         db:0f:75:18:82:3c:54:f8:5c:2c:4d:7c:97:c3:23:0e:a0:8d:
         04:60:d5:29:50:81:54:d6:70:19:1b:c4:e7:ea:0d:69:e6:ea:
         a0:c1:59:fc:3e:dc:26:53:d3:3c:97:89:47:96:b9:c4:a2:8c:
         ba:00:6d:ae:e4:85:dd:47:70:aa:a9:77:b1:7d:53:fa:39:34:
         70:0e:b8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:06:19 2025 by rpki-client