Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7891b2df-185a-3462-825e-ae609edda099.roa
File:                     7891b2df-185a-3462-825e-ae609edda099.roa (raw, json)
Hash identifier:          ooxNpSNY+x4/7CoFLwKF4FpNHxNfFyLz9N99WNKUP6o=
Subject key identifier:   4B:E3:6E:5C:33:5B:99:50:C2:87:D3:1D:E5:86:8F:E5:B7:C7:41:4B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350B18154385D5336C1C000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7891b2df-185a-3462-825e-ae609edda099.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b1:81:54:38:5d:53:36:c1:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=9931cfab-db19-4593-871c-9e543c377260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:04:bf:3b:65:bd:cb:30:79:2c:5e:a8:f0:a2:
                    96:2f:82:c9:10:43:c2:57:23:e8:59:49:18:18:5b:
                    19:2c:20:51:64:d2:ec:07:6d:cd:20:4b:5a:02:f3:
                    64:61:8e:d1:2a:a9:0d:b8:f4:10:a6:0b:b8:5e:df:
                    dd:e7:23:af:43:2b:2f:1a:4c:46:6f:4e:04:ca:3b:
                    c4:24:a8:25:bc:df:a1:b8:de:c4:6a:24:dd:1d:2a:
                    92:4f:ec:c0:c5:72:ab:72:ff:96:47:2f:0b:05:a3:
                    1d:e3:b2:1e:b1:54:cd:c4:b9:08:5f:7b:9b:19:82:
                    58:74:a9:54:69:1a:c1:3e:fb:ba:f2:5a:aa:5a:54:
                    d5:c2:80:21:90:7d:66:d4:57:16:26:72:f6:9c:1f:
                    4f:f7:63:35:6f:3e:61:a3:54:e1:c1:5b:66:67:c5:
                    f4:81:3a:83:e4:5d:04:fa:3a:e2:11:2f:5e:51:96:
                    c2:74:71:fa:3e:6a:57:fc:69:98:f7:46:e9:fc:96:
                    46:23:59:86:99:7d:bb:72:c7:a1:28:bd:35:f6:d0:
                    00:b7:b3:d4:50:81:36:d5:8b:9a:b8:b1:09:7b:38:
                    b4:45:ab:73:c9:38:fb:bc:76:4c:06:8b:6a:04:85:
                    7e:48:c6:e1:da:4e:4f:e3:b2:8c:1f:58:d4:0f:ac:
                    0a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E3:6E:5C:33:5B:99:50:C2:87:D3:1D:E5:86:8F:E5:B7:C7:41:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7891b2df-185a-3462-825e-ae609edda099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:89:05:96:78:94:7b:f2:5b:fe:43:34:fc:b4:9e:ac:27:77:
         e7:d2:18:b3:6c:87:ac:07:f5:ee:52:26:51:e7:01:b0:4e:52:
         48:29:1a:b7:1b:c1:51:0a:43:7b:03:1a:dd:79:5c:54:00:9e:
         6d:25:d6:39:d9:a4:eb:af:2e:d6:bf:1c:e0:22:0d:58:d7:d1:
         d9:ba:f8:1e:6d:47:17:72:58:e6:0e:52:98:75:b1:49:4b:da:
         71:91:13:1c:35:b8:91:9a:c3:e6:23:a7:ff:be:8f:5a:d5:12:
         84:93:41:f5:15:e8:1c:9c:55:e2:59:aa:3f:a2:d2:9f:4d:4b:
         e7:8c:85:36:58:36:e2:96:6f:5e:44:b6:6b:06:e8:88:03:0e:
         4a:f9:0b:4e:02:90:9a:fd:c5:79:7a:d9:fa:e7:10:3b:83:c8:
         b0:61:03:19:12:f0:20:c2:b9:36:38:97:88:bf:e4:c3:16:27:
         f7:60:77:46:fa:ee:c3:7b:3c:e2:e3:c3:e9:5c:d6:57:d8:e5:
         68:48:5b:65:6a:37:19:e7:07:b3:5e:d8:92:9d:28:0f:1a:f8:
         fa:83:de:36:55:7e:2d:43:2b:47:b1:c2:b6:33:f4:67:c2:67:
         f2:1e:b3:c2:62:58:2a:dd:19:d1:64:12:a3:65:99:6b:74:7a:
         9f:ed:04:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 10:48:53 2025 by rpki-client