Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3396c50d-411b-3a1a-8cd0-f40dfdb53b7f.roa
File:                     3396c50d-411b-3a1a-8cd0-f40dfdb53b7f.roa (raw, json)
Hash identifier:          t6ZsrY4XGk9KF89yT1bBZAPRC5QFa8UNJInKGGUYkzQ=
Subject key identifier:   9C:B8:86:D1:67:46:85:06:F7:45:50:4E:FF:9D:78:D4:64:7E:42:FD
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350B03A6A6417A054FFA560
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3396c50d-411b-3a1a-8cd0-f40dfdb53b7f.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b0:3a:6a:64:17:a0:54:ff:a5:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=d150d422-5d3f-4cfc-b1e2-178c9842b42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2d:fe:04:11:3d:89:72:7b:a7:33:df:1b:e4:
                    13:83:c6:22:bc:dd:8c:52:0c:5b:95:16:e8:fb:08:
                    76:31:ea:04:27:67:b4:ce:0e:93:fe:48:b5:af:76:
                    10:7e:13:5e:c8:cd:ee:33:8a:66:89:18:39:73:99:
                    93:9e:c4:ce:c0:dc:cb:b6:fe:65:73:2a:c6:81:d4:
                    9a:1e:07:0d:7d:2d:f0:24:b7:1e:ad:82:0b:cc:3f:
                    e4:d6:8c:44:ae:8c:29:b4:cd:f3:0b:ae:c0:64:17:
                    6c:12:4c:e1:29:66:2f:37:74:70:f6:89:20:ea:66:
                    86:3c:57:cc:b1:af:c0:d1:47:25:e2:f3:03:96:bf:
                    09:ce:b0:26:be:e7:c8:1c:c5:4f:66:17:8e:58:55:
                    f8:09:4f:94:42:ad:99:1f:95:d0:a2:93:38:f8:d0:
                    46:8b:49:f2:f1:98:01:e8:ee:a9:3b:3c:c3:b8:e8:
                    b6:6b:68:a8:df:30:92:c5:66:93:b4:1d:2f:0a:20:
                    90:4b:f3:a8:29:65:2e:52:f4:4d:d0:57:bc:4e:b4:
                    3e:d3:8e:ce:23:14:a2:26:6f:43:0a:03:26:00:18:
                    8d:d0:89:97:5a:ab:f2:69:0a:e0:90:a0:94:ef:f2:
                    1e:2b:ef:83:9e:d0:0d:6d:56:3f:da:46:35:ab:f6:
                    b3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B8:86:D1:67:46:85:06:F7:45:50:4E:FF:9D:78:D4:64:7E:42:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3396c50d-411b-3a1a-8cd0-f40dfdb53b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:c4:56:f6:5a:29:fb:e4:93:c1:0f:4e:67:7b:b1:61:48:f1:
         37:22:70:b5:08:56:c9:aa:93:54:6f:37:96:e1:35:0d:09:ee:
         2e:f5:96:35:a0:75:9c:ed:33:f5:59:be:88:09:6b:cc:c2:53:
         66:6d:aa:93:1c:ec:e5:d4:39:9b:11:d0:5c:e1:42:8b:d4:95:
         bf:86:8c:66:1a:02:1e:19:b6:7f:ad:79:a8:3f:21:f2:cf:a2:
         25:b2:f7:23:59:95:77:eb:64:7a:8f:95:3a:46:32:de:79:dc:
         c5:79:2d:12:b2:b1:25:21:93:a3:d2:a0:bd:e8:c5:76:6d:e6:
         ce:2f:e5:11:e0:52:77:7f:f5:d9:a1:bd:ac:c5:ef:26:f7:d3:
         9c:3f:ea:0d:36:a2:3d:60:4a:91:fc:46:d3:f4:7f:cb:56:e4:
         80:32:3d:b8:ea:c0:84:10:3e:9e:46:5d:ae:2d:bf:3b:11:b8:
         bb:4a:cb:fe:f4:03:4c:8f:3b:46:4e:5f:16:d6:eb:69:74:56:
         c1:6b:f6:50:98:93:95:28:18:1d:8b:22:4c:f5:5c:e1:e0:78:
         f7:05:83:54:7c:4b:ae:c7:35:24:e4:7a:97:17:54:47:cd:38:
         d6:bb:9f:f1:9e:32:ab:05:ed:13:41:f8:cf:e0:92:16:57:66:
         ca:b6:d8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:47:23 2025 by rpki-client