Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/752cc9bf-1f19-3b84-98be-45790d2ac109.roa
File:                     752cc9bf-1f19-3b84-98be-45790d2ac109.roa (raw, json)
Hash identifier:          A7sljAlzTkWMrrXjGzzCbHcBEwvrBB5/4o6cefD4tgw=
Subject key identifier:   8A:42:4C:F1:F2:61:D2:13:EF:94:D4:AA:52:D8:E5:57:7E:36:D1:39
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350C294CF07EB251BC21920
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/752cc9bf-1f19-3b84-98be-45790d2ac109.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     395973
IP address blocks:        104.134.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:c2:94:cf:07:eb:25:1b:c2:19:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=87bb3897-0be3-4cbb-85dd-93761a7db5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:dc:aa:54:3e:2e:03:3b:d2:22:3c:30:3f:eb:
                    f8:49:1a:0a:fa:c3:4f:d7:2f:a8:51:b2:60:fc:53:
                    72:e4:40:1e:43:8b:58:bf:40:1a:fe:d5:31:f9:b5:
                    93:ce:80:03:9e:cf:41:9a:af:74:fa:b3:48:6d:39:
                    1c:f8:6a:c5:9b:aa:30:3f:47:b7:7f:aa:32:c5:11:
                    60:c4:2e:4f:b0:10:6a:05:3e:a8:14:33:31:d4:c8:
                    ab:10:14:7f:06:ac:4e:06:94:fc:1e:49:24:a9:c4:
                    e6:40:ce:c8:79:94:02:4f:16:b3:47:89:bf:c3:11:
                    55:ee:c0:03:d8:d3:ca:67:8f:bf:e1:37:39:ad:59:
                    ab:4c:a6:6e:1e:d2:3d:56:47:3f:31:aa:d5:6e:5c:
                    3f:6e:0f:1e:18:d4:02:cd:dc:1e:c9:cc:bc:a6:ca:
                    9c:d2:9c:e1:f1:d4:56:8a:50:75:49:24:0f:f4:e1:
                    10:01:9e:59:31:bc:6e:ac:a8:e4:d5:f0:37:39:9a:
                    79:89:11:18:87:d3:d8:02:c8:62:be:22:c8:9d:e9:
                    80:3a:a3:25:6b:e4:86:4c:b3:67:23:5d:8f:b8:f3:
                    a7:1a:d9:76:2d:75:2c:b6:90:6a:a7:c5:78:62:0c:
                    2f:3e:fb:b4:17:42:7b:66:37:e0:31:f2:12:5b:bd:
                    84:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:42:4C:F1:F2:61:D2:13:EF:94:D4:AA:52:D8:E5:57:7E:36:D1:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/752cc9bf-1f19-3b84-98be-45790d2ac109.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:9f:e9:87:7e:29:16:bc:a9:83:05:6a:cf:8b:01:88:83:97:
         c3:c2:15:b3:03:37:a5:c1:ff:5b:0d:db:60:49:bf:31:fd:54:
         f0:79:3c:50:70:4e:75:87:10:65:08:f9:85:d5:ef:d0:67:1c:
         71:78:1b:ef:30:d7:00:bd:03:00:1a:f1:aa:c0:a9:e4:19:16:
         f9:44:86:c4:9f:4f:76:82:15:44:33:0e:04:98:5c:b4:ce:c0:
         89:ca:e1:2f:fd:75:b3:94:67:30:14:32:1b:a7:40:78:cc:96:
         df:d5:a4:35:0b:49:cd:c4:57:25:ea:96:f0:20:7a:68:dc:28:
         17:d6:42:0d:ad:fd:78:96:3b:41:88:31:12:85:5a:81:af:0d:
         db:5e:7e:8a:59:63:68:64:d4:cb:f2:53:75:a8:70:05:bd:2d:
         11:c5:83:ca:95:74:4c:78:0e:76:8f:59:7d:f2:82:0f:32:b7:
         5e:b8:b6:34:53:b5:7c:af:1c:11:f3:7d:50:65:f9:33:13:3e:
         4b:05:4d:fc:44:03:78:0d:41:04:19:bf:cd:29:5b:ba:25:19:
         f8:85:c6:66:fa:b0:c6:b4:8e:d1:19:69:83:bf:25:3c:cd:01:
         ee:a8:14:29:05:e0:67:45:8a:32:72:2e:53:b9:fe:f6:70:a2:
         cc:c1:5f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:26:00 2025 by rpki-client