Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4903cc85-7f01-335d-a24d-51060e4210ca.roa
File:                     4903cc85-7f01-335d-a24d-51060e4210ca.roa (raw, json)
Hash identifier:          UoLX6hNBpJ3A9rhmKyao/I/0oDLfAktziqI3l7SGJAI=
Subject key identifier:   9D:2B:2E:72:67:0F:C9:93:59:3D:34:3D:B1:13:5B:72:A6:A6:67:84
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B98E7450FBD3D456D52F0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4903cc85-7f01-335d-a24d-51060e4210ca.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36383
IP address blocks:        104.135.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:98:e7:45:0f:bd:3d:45:6d:52:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=8296f57d-c9fc-4f7f-a379-fe23d02a823d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:05:d0:4f:05:d7:ee:a2:1f:87:44:bb:8c:
                    2b:c4:e5:47:39:5c:d9:52:8e:4e:e0:0f:2e:7d:85:
                    ae:9b:53:cb:af:50:43:a6:a3:b0:0a:ee:b3:d6:1f:
                    42:15:6e:ad:b7:e6:23:d2:a6:19:e7:9e:ef:65:91:
                    39:c6:0f:bb:a1:72:e7:6b:a7:88:f1:7d:d2:fd:a6:
                    8d:5b:33:3b:66:6f:e4:1f:b7:0b:de:ae:c5:22:af:
                    5c:a3:0f:63:fd:6e:de:46:b0:c2:88:14:fb:7f:b9:
                    ad:bd:96:d6:63:45:c2:c3:fd:75:28:0c:86:76:14:
                    b5:df:a7:f6:6d:15:a6:38:6c:d9:5f:19:ce:0c:85:
                    3b:7c:60:46:ce:9f:cd:3d:dc:fa:59:82:7c:10:0f:
                    2e:8a:3b:ed:b8:d3:b1:33:92:33:f7:37:f4:1e:cb:
                    59:60:f5:21:f8:f8:88:36:2b:69:1d:2a:64:89:93:
                    9d:dc:df:6c:bb:af:bc:a4:4d:ae:6a:54:20:92:7d:
                    45:b9:bf:d6:52:58:51:66:13:a0:d4:e7:13:44:37:
                    6d:de:67:f0:59:37:4f:1d:2f:ac:57:1f:cd:35:b5:
                    c1:3f:0d:ab:5c:0c:ea:08:ca:56:30:41:6f:5d:81:
                    4b:d1:01:f3:d8:54:a4:f3:68:2f:c9:45:ae:d6:a0:
                    82:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2B:2E:72:67:0F:C9:93:59:3D:34:3D:B1:13:5B:72:A6:A6:67:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4903cc85-7f01-335d-a24d-51060e4210ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:b9:d0:f8:45:06:db:8f:31:19:55:7d:d6:fe:fc:9e:bb:6e:
         2a:05:e8:8a:c9:1e:c6:5a:82:db:1b:7d:1a:97:b7:b1:bd:bb:
         00:d6:11:14:86:62:0c:cd:d7:87:76:12:2f:15:98:15:8b:bb:
         a8:f2:39:34:47:07:e2:91:71:d7:0f:33:c1:91:08:8a:f4:2d:
         df:0b:aa:d4:dd:f3:f9:4f:e1:f8:9e:93:24:34:e8:27:c8:e7:
         30:f9:cd:11:61:3b:18:56:1c:2d:0b:06:ae:31:78:91:ae:fb:
         58:89:86:bb:e8:47:14:af:ca:db:1b:16:b5:da:5c:72:cb:27:
         10:0a:de:c0:1f:0e:46:5c:d9:df:7c:77:c9:47:9f:01:6a:48:
         95:8d:6e:92:10:9c:bb:31:75:d6:66:d9:ab:fe:b0:54:6e:89:
         87:db:0e:78:1f:1e:a7:f8:56:b3:29:08:d1:43:27:3f:54:8f:
         f8:b2:a7:92:69:59:2a:65:fe:e0:94:ee:45:47:c4:d1:c9:9d:
         81:4d:e2:06:97:db:e5:30:85:76:05:64:2c:b0:fe:e8:78:2b:
         d1:2c:c5:9c:11:de:37:a4:3e:2b:c8:86:ed:55:aa:43:80:ae:
         15:4f:cd:bc:21:f3:6b:1f:60:22:80:13:66:6e:54:31:f9:ae:
         3d:c8:37:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:14:55 2025 by rpki-client