Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/712ce186-3f65-3b01-bf97-438903031744.roa
File:                     712ce186-3f65-3b01-bf97-438903031744.roa (raw, json)
Hash identifier:          xmNXT6OUnQU4GAeAmu8zaIKip5RdUbcVLnYqtSU6sMk=
Subject key identifier:   D2:28:5B:9F:92:E5:55:97:23:3D:89:C2:05:E6:03:2A:02:9A:DE:7D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350C5FF3B202E60CC2656C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/712ce186-3f65-3b01-bf97-438903031744.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:c5:ff:3b:20:2e:60:cc:26:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=0d35da2d-c28c-4882-9365-ee5fc6204dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:5c:91:56:2a:ea:61:7e:65:0d:06:df:0b:
                    f5:2b:17:d3:12:03:c3:4c:30:bb:cb:98:56:2a:33:
                    ff:b4:a2:99:14:e6:7a:52:2e:ad:32:54:d1:e5:82:
                    c3:0d:b3:36:c4:fc:36:38:b2:f6:47:57:ab:b4:a2:
                    7d:94:63:1e:c6:07:59:1e:1f:99:9b:6f:de:9c:ef:
                    6f:48:11:1b:cc:3a:c2:09:ca:91:43:71:56:ba:e8:
                    f6:11:66:4a:bd:07:9e:38:1e:f1:69:05:e7:56:9c:
                    64:86:72:a6:fb:40:ec:0a:38:87:f0:8f:a7:0f:fc:
                    95:de:bc:ef:1f:64:56:f6:a0:d5:89:d4:98:59:49:
                    5b:06:e1:09:75:05:a7:1c:c7:9d:fa:5d:77:ad:76:
                    db:c8:bc:63:f1:fe:3f:34:6e:c2:30:86:7a:17:d9:
                    5f:51:62:04:d1:37:f1:3f:e1:b2:17:e1:94:2a:90:
                    c6:7c:57:3e:b5:8a:3a:47:5e:58:db:52:72:37:bc:
                    0d:e8:d2:d8:85:6e:88:38:82:72:98:5f:e6:d9:bc:
                    11:a3:80:10:ae:b7:04:77:fa:57:90:d5:48:89:6c:
                    b2:45:04:fb:4c:ba:d0:47:0f:1a:41:90:9a:35:7e:
                    a9:1c:f4:c5:6e:bf:3a:77:b4:a8:87:66:e5:47:a0:
                    73:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:28:5B:9F:92:E5:55:97:23:3D:89:C2:05:E6:03:2A:02:9A:DE:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/712ce186-3f65-3b01-bf97-438903031744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:47:dd:9c:62:85:c2:0b:64:50:98:44:bc:b4:5a:5d:a4:67:
         f6:c8:4e:72:5d:af:8d:e5:1e:74:51:fa:d8:23:ef:c3:ff:ca:
         3a:78:75:bc:a1:58:f3:dc:b9:a2:3c:42:6f:4c:49:55:bc:2e:
         b1:06:f4:0d:8e:c2:b0:d4:dc:6c:cd:cc:b8:3f:1d:30:c2:5f:
         51:22:59:93:22:de:be:99:23:b7:0d:24:46:a0:8e:3f:63:ff:
         8d:b9:98:5f:2f:33:0d:89:16:87:68:c8:a5:de:96:5c:b2:1b:
         b7:07:cb:7a:d9:ab:1e:9e:00:72:5b:4e:87:96:ae:3c:7d:65:
         41:50:29:b1:f1:70:aa:97:d1:e3:89:d4:a7:3d:f6:0e:03:20:
         21:c3:1a:f4:2a:7b:64:bb:53:0b:be:d6:ac:fc:a6:05:96:b9:
         4d:ab:99:04:ae:75:e0:94:d6:af:96:9f:b0:f8:37:d3:61:87:
         1d:4c:42:29:af:58:2b:8d:ef:0f:b7:0b:60:e9:b4:34:09:4c:
         3a:86:aa:ce:c2:08:e4:44:be:d3:c9:24:ee:4f:48:08:bb:e0:
         e2:12:9f:a1:3e:d6:64:b6:ba:fe:c7:5e:e9:b2:bd:1d:01:5b:
         36:b5:ee:5d:85:cb:5d:45:85:60:a3:ae:3b:6e:49:cc:f7:12:
         e3:92:ca:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:52:59 2025 by rpki-client