Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/76a9d50a-914c-3794-91d5-3869f4df4c12.roa
File:                     76a9d50a-914c-3794-91d5-3869f4df4c12.roa (raw, json)
Hash identifier:          AoSnIs7gtNbosVa/zliEUP87UJllQhwXWJhWpKBiBDU=
Subject key identifier:   87:B0:6C:DB:C2:E1:4C:C4:0C:97:3A:AD:82:1A:9F:85:05:A9:B9:7A
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350B057B9CE6DCCF0F22680
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/76a9d50a-914c-3794-91d5-3869f4df4c12.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b0:57:b9:ce:6d:cc:f0:f2:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=07e97fb8-3a31-44f9-99da-cfa6108cc8dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:16:d0:11:21:b4:ca:f0:01:65:74:c1:58:96:
                    c4:65:3e:be:1a:55:9b:90:26:33:dc:ab:a7:da:1c:
                    3f:94:84:cf:40:61:be:11:d7:9d:07:8b:47:be:7b:
                    fa:27:35:9c:a5:a9:65:26:b9:6a:ee:78:b0:14:15:
                    2a:42:61:d4:cb:63:35:22:8a:d5:bc:67:a1:8f:c4:
                    1a:8e:80:8a:e8:2a:1a:18:f1:82:1c:56:ac:9d:b4:
                    cc:30:d3:7a:22:19:38:b0:87:5c:80:ef:56:91:7e:
                    aa:22:40:16:a6:81:bd:f5:a1:6d:45:8e:03:cc:96:
                    97:19:da:2f:ec:98:76:e3:57:f3:38:8f:10:85:88:
                    24:25:87:fd:76:28:29:8a:d5:08:9a:81:4e:69:04:
                    e2:f9:56:4d:08:51:ae:2d:cb:3d:4d:ca:1a:ad:d9:
                    50:44:ea:f6:a4:62:01:1b:7e:69:7b:b4:64:81:19:
                    ef:c2:6c:03:f8:6c:67:c1:6a:49:a4:d1:af:38:18:
                    39:9e:ee:aa:10:41:09:f8:d8:ba:fb:35:2f:fc:87:
                    f9:b3:79:52:3f:5a:ba:c9:57:f8:d3:b4:43:dd:66:
                    73:65:80:96:21:8e:91:de:ee:8a:c7:31:58:73:66:
                    96:03:be:ce:9c:7f:b1:7b:00:e2:f7:9a:2e:70:e1:
                    01:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B0:6C:DB:C2:E1:4C:C4:0C:97:3A:AD:82:1A:9F:85:05:A9:B9:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/76a9d50a-914c-3794-91d5-3869f4df4c12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:0f:78:61:7b:09:7a:0f:86:f6:bd:66:28:58:14:46:0e:61:
         b3:69:66:2d:b5:03:a9:98:c3:9f:f2:88:18:5c:dc:df:9a:48:
         2e:bc:8c:a5:22:af:ac:77:b9:1b:2f:49:28:9d:30:42:af:82:
         ea:f4:f1:23:b9:19:83:61:c0:23:e2:fa:19:a0:0c:bd:6e:2e:
         2a:be:4c:a4:d5:4f:6b:72:4c:4f:0a:72:b7:37:dd:71:4d:d0:
         8a:64:f3:38:00:7a:dd:97:2d:72:2f:61:51:8d:3b:da:37:73:
         f8:88:84:97:1d:fd:a7:6b:e1:a2:b9:72:ca:53:f2:66:1b:e0:
         d2:2e:39:ba:16:1b:c4:7f:0f:70:d9:db:aa:de:d2:0a:12:78:
         dd:90:e9:ef:b5:69:79:19:a1:70:46:35:93:4b:28:3c:99:2c:
         cd:3e:2e:ea:a3:af:9c:53:3c:40:40:4b:68:47:d9:c6:49:f8:
         5b:b3:b3:c4:07:19:44:8f:97:61:7f:10:5a:a6:1a:5a:77:11:
         a7:82:7f:bc:2b:a0:fd:67:0d:b9:e7:1f:21:e5:d5:cd:51:3f:
         65:62:d7:c2:41:6c:95:f2:4d:43:fa:6e:90:d6:39:82:06:9d:
         58:ca:39:3e:96:69:cb:7f:55:8a:72:a0:6e:06:c3:47:0b:8a:
         28:7e:61:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:26:41 2025 by rpki-client