Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1508f78d-6ee0-3bbf-b7db-6f5e4f41d980.roa
File:                     1508f78d-6ee0-3bbf-b7db-6f5e4f41d980.roa (raw, json)
Hash identifier:          IFcBcYptkI0zPTpRW0imaPSgi5HjiFxSnL/E8AwWZCo=
Subject key identifier:   A4:32:CF:3B:D7:EB:65:EA:4A:B0:DE:62:6F:56:E5:15:4E:4F:D0:77
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350B43A73B0120C1E20A680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1508f78d-6ee0-3bbf-b7db-6f5e4f41d980.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b4:3a:73:b0:12:0c:1e:20:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=6e638a13-0f2b-4005-b7f2-b08bf3fb27dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:25:67:a2:b1:e0:a7:13:13:ab:14:f0:50:7b:
                    cd:df:ee:13:4f:ae:75:7a:7b:35:a8:e4:5c:5d:48:
                    04:b9:cc:e1:5a:6b:c7:c6:d6:b6:7e:3e:fc:f6:c6:
                    a1:92:17:01:8b:4f:5a:b6:a3:02:6b:5a:8f:3c:82:
                    ab:d4:f9:4b:6d:ef:73:c0:4c:4f:01:a5:8f:48:f9:
                    ad:de:79:05:13:fb:cf:e2:8d:37:0e:a8:61:db:e3:
                    24:92:1a:49:32:e6:52:2c:d9:a1:bb:45:8c:81:50:
                    41:ca:15:b6:04:20:80:c3:cf:98:65:24:db:43:f5:
                    0f:68:77:2f:74:a2:2b:b8:01:45:a5:54:67:66:6f:
                    f7:6f:9c:04:a1:35:c8:df:e1:94:93:43:dd:69:e4:
                    d5:1c:70:90:fa:5f:71:51:72:c8:47:60:07:0f:78:
                    7a:d9:66:79:c4:82:1b:f9:04:69:cc:57:db:13:0c:
                    fe:ad:db:fb:ca:05:97:91:83:66:fd:61:26:3a:b7:
                    13:31:89:e5:5a:30:d0:c0:8c:56:0c:58:85:18:c4:
                    65:04:59:d3:82:01:a4:22:bb:ed:52:34:f2:6b:0f:
                    c7:33:ce:66:e1:1f:49:3c:48:a2:6d:ea:f4:43:91:
                    bb:58:db:b0:88:0a:21:ca:34:1e:94:a9:dd:09:12:
                    47:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:32:CF:3B:D7:EB:65:EA:4A:B0:DE:62:6F:56:E5:15:4E:4F:D0:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1508f78d-6ee0-3bbf-b7db-6f5e4f41d980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:03:2d:1b:6a:ae:82:ed:9a:97:68:f9:f4:77:60:a3:ed:fa:
         db:c4:f2:31:44:50:ed:8f:96:cb:65:8a:65:9d:c9:ca:d7:96:
         b8:8d:2d:5d:3a:57:66:7d:aa:c2:5b:e5:54:33:20:6d:d4:29:
         01:c1:de:e3:3f:92:26:7d:fb:99:95:66:68:56:64:b2:b6:49:
         da:26:b2:bc:2d:ae:b1:5b:b0:3b:a0:1b:50:c6:fd:dc:ec:bf:
         21:4b:f2:ff:ba:18:c3:cc:55:43:4e:fa:c3:dd:1b:de:b1:a8:
         f4:5c:a0:d1:e4:3e:8d:c9:60:09:9e:6e:e1:4d:f4:30:42:a9:
         82:81:43:82:9e:93:22:a0:f2:c7:96:16:59:fc:35:46:9c:e8:
         df:61:a8:a1:5d:a6:5b:9d:04:85:15:1f:3a:ab:7b:8b:19:73:
         29:e5:6d:cd:c7:92:03:16:0f:32:2c:01:3f:28:24:a9:fd:2a:
         43:b4:a2:73:a5:ae:62:5d:c4:0a:41:30:d0:6b:93:4d:c0:58:
         11:e5:54:c4:90:91:5c:48:99:4d:70:3f:cf:eb:ca:88:04:96:
         1a:fa:78:ca:b9:c1:e6:c5:55:df:14:9d:54:8a:9c:ce:38:2a:
         c7:fa:aa:7f:46:67:82:b4:bb:ca:57:0a:31:43:69:23:ba:e9:
         f4:fa:b3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:24:36 2025 by rpki-client