Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/481fe3c7-1b4f-3a61-aa90-b3327fb8ef6a.roa
File:                     481fe3c7-1b4f-3a61-aa90-b3327fb8ef6a.roa (raw, json)
Hash identifier:          uvBiVTUXCogaGp24SXhrMte0Q31aR+QfE6hXOCkLCpM=
Subject key identifier:   BE:03:9F:A9:94:47:7B:E5:36:0C:1B:AA:D8:66:29:84:8B:81:F9:F3
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350C066765030FFB22DA400
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/481fe3c7-1b4f-3a61-aa90-b3327fb8ef6a.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     395973
IP address blocks:        104.134.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:c0:66:76:50:30:ff:b2:2d:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=88efed71-6e39-4501-ba93-94299ae4697f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:56:a3:aa:75:07:ba:d8:2c:68:f2:72:8e:57:
                    28:70:76:fd:99:95:a8:f6:92:1e:66:67:06:6a:4e:
                    21:7e:1b:12:e8:3c:65:4d:e0:2f:c8:83:9b:cc:47:
                    37:51:ba:96:c1:79:01:6d:8e:78:10:53:99:5c:8b:
                    e1:fb:27:19:72:df:d3:0e:32:5f:9c:04:4b:df:d6:
                    e1:a0:46:0b:b2:41:40:72:6a:81:74:27:48:e6:9f:
                    8e:0e:f7:ea:98:eb:92:98:e1:eb:8f:12:bb:91:2f:
                    bb:0a:92:8b:41:24:ab:7c:2c:3b:7e:92:66:7f:2a:
                    23:a6:68:50:35:a6:99:5e:e3:79:fd:8a:13:94:d5:
                    b9:71:73:84:84:fc:6b:10:a6:d1:9a:17:d0:0e:72:
                    7e:f9:0f:3d:d3:6e:e7:cd:fc:b0:28:d8:b5:49:b7:
                    8a:aa:9f:23:0a:9c:d4:ca:d1:7f:bf:2e:12:9b:48:
                    bc:bb:40:1f:9e:19:bc:bc:de:36:98:f9:52:29:03:
                    5a:2c:85:da:6d:34:03:65:6f:64:52:a1:30:63:ff:
                    c2:4d:29:1f:4d:24:ef:25:31:f5:bc:33:d8:ec:4e:
                    50:1f:4f:a9:d6:64:95:da:c6:b0:11:32:ba:91:d6:
                    ec:fd:dc:d5:4e:a6:56:c0:a9:4c:8f:48:79:66:01:
                    9a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:03:9F:A9:94:47:7B:E5:36:0C:1B:AA:D8:66:29:84:8B:81:F9:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/481fe3c7-1b4f-3a61-aa90-b3327fb8ef6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:b4:f2:3d:50:43:9a:92:65:91:88:2a:0c:b2:71:cf:b9:b2:
         a5:dd:ad:15:33:af:d8:87:f3:a5:60:de:aa:aa:d0:9a:44:14:
         7d:8c:c9:5e:68:8f:fb:e9:a2:9a:16:5d:e5:26:82:76:ed:56:
         97:a6:4e:89:57:81:ee:e1:0e:69:45:6e:a4:05:74:c7:30:f3:
         47:ff:9e:76:86:4b:66:49:95:ef:a4:eb:18:0f:f2:b0:9e:f4:
         61:f6:97:e7:76:f2:0c:b2:bd:27:7b:5f:da:00:66:0c:1d:6d:
         8b:b7:5a:c1:c8:b3:69:83:40:e8:26:a7:1f:60:3b:0b:c3:6b:
         69:46:79:23:18:fe:77:b1:5b:30:b1:bc:2d:fe:bf:f6:35:0d:
         77:fa:84:91:06:70:06:00:0b:47:9b:e7:92:f4:e3:bd:fa:30:
         16:ae:a4:dd:40:af:ed:d3:eb:b7:8c:d5:fa:ad:93:49:59:6d:
         a9:a0:b2:4b:a3:92:d0:83:a8:36:62:46:2e:7b:f1:0e:c2:df:
         a7:ec:09:bb:e9:c5:26:9e:40:7d:e5:ae:d3:1b:24:e3:44:e8:
         b4:10:03:70:38:c6:70:6b:ce:1c:a4:ee:04:c4:8f:b5:a4:11:
         93:67:fb:5a:6c:18:82:76:c7:e9:d1:00:d1:c9:c6:49:fb:19:
         7b:3a:a5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 01:23:50 2025 by rpki-client