Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/499b8884-d9d1-3e06-9918-54bd93bcd828.roa
File:                     499b8884-d9d1-3e06-9918-54bd93bcd828.roa (raw, json)
Hash identifier:          DYdrMgbxhoadyrtN82547rJg5XU2ZNNA62o6RbT29X4=
Subject key identifier:   5A:2A:86:85:A8:31:8D:38:58:BE:B7:7A:97:5C:2D:51:3A:50:FC:68
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A70860F014D9188DEE49CFEC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/499b8884-d9d1-3e06-9918-54bd93bcd828.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     41264
IP address blocks:        104.132.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:0f:01:4d:91:88:de:e4:9c:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=bd3375f8-b800-4db9-b7f8-7ddae69a6f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:52:67:13:f6:a3:c3:74:da:0b:d7:c7:a9:37:
                    77:bf:ce:44:82:28:49:90:bc:ff:f0:e3:72:8a:22:
                    df:fc:3c:15:e6:18:29:8e:3a:86:f5:a9:a4:b6:a5:
                    8e:cc:78:c5:c3:c9:79:57:f7:e9:c1:80:0e:bd:cf:
                    18:93:70:74:d6:b8:5f:6a:ff:bd:17:b8:c3:ce:9c:
                    d9:4d:41:66:8e:4f:2e:d2:0b:00:fe:c0:3f:a6:46:
                    f3:a3:48:01:2b:38:9f:45:b8:fb:58:21:02:f8:88:
                    52:32:e3:90:b6:e4:79:3d:e9:60:23:9d:ec:56:5b:
                    39:56:2c:ff:23:18:f7:1d:7e:07:7b:93:df:1b:50:
                    09:31:dc:4b:d8:40:0e:a0:3f:13:14:27:ef:89:3f:
                    a2:52:5d:0e:cd:c4:c5:e1:03:4b:1f:2d:f4:26:1d:
                    cb:1d:92:a3:f0:ab:dd:e6:86:0f:aa:61:18:e9:ae:
                    d0:fd:49:93:eb:a3:c8:2d:68:6d:53:27:10:6a:c5:
                    85:3f:86:0a:30:3b:8d:46:c1:22:5e:6e:4a:8a:10:
                    0b:e5:88:18:4a:82:14:5d:9e:e7:a2:8d:7f:98:1d:
                    60:99:39:f0:4a:f7:16:58:ef:91:89:27:d9:72:be:
                    3e:13:ac:89:39:27:4a:ba:7b:0c:cf:e6:9c:d5:56:
                    1c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2A:86:85:A8:31:8D:38:58:BE:B7:7A:97:5C:2D:51:3A:50:FC:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/499b8884-d9d1-3e06-9918-54bd93bcd828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:9e:d7:2c:88:6d:3f:07:55:6b:ce:4e:c2:b1:71:57:68:6d:
         16:cc:e5:7e:17:93:12:5f:c1:8e:bf:c6:ad:66:bb:86:fc:6a:
         2b:e4:73:18:cf:31:8b:2c:00:e5:38:d2:73:95:81:08:65:58:
         32:d3:72:ec:0c:27:ed:62:f8:12:5a:e9:cf:fa:c7:53:d8:21:
         c2:cc:88:c2:a2:1e:02:30:69:de:e9:c8:1c:c6:0e:b4:f8:cc:
         50:93:f2:8d:2e:df:08:fd:65:4e:47:f6:db:ba:f5:73:c1:85:
         96:44:29:64:53:ca:f1:8f:81:0d:e9:e9:64:64:f0:46:16:94:
         57:ed:b9:9a:d0:00:38:de:86:08:4f:d6:d4:c7:c0:60:5a:11:
         d6:9d:f4:e0:23:31:b3:92:68:94:40:ad:2d:b2:dc:00:0f:69:
         a7:c2:23:8b:73:63:aa:6f:02:f7:04:45:54:16:93:ca:d6:7c:
         a8:21:2e:91:38:43:c4:4a:67:6c:73:7f:2e:07:26:e5:4a:63:
         3e:be:ed:11:7e:ee:8f:b8:5b:de:95:80:5c:65:13:18:7d:7d:
         a3:80:48:f6:1b:da:a3:81:a9:11:d8:ad:d3:09:a0:64:ca:cc:
         1f:3e:83:f3:68:76:e5:ea:62:5c:28:fa:0b:7b:fb:c4:83:99:
         01:88:98:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:25:41 2025 by rpki-client