Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7f6fbb4a-a0ac-3c97-b65e-41cf82d56a19.roa
File:                     7f6fbb4a-a0ac-3c97-b65e-41cf82d56a19.roa (raw, json)
Hash identifier:          hL/42q+qRC37IduOtAQoqxd0JEpUeM4GIe4epp7N73M=
Subject key identifier:   DA:C7:89:C4:64:63:7F:99:6E:3B:0D:29:05:D2:CD:E9:0B:27:0B:83
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849DF5A787114EE485F4A879B80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7f6fbb4a-a0ac-3c97-b65e-41cf82d56a19.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     395973
IP address blocks:        104.134.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:78:71:14:ee:48:5f:4a:87:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=48b2c052-da2f-43ba-b969-b01b64b67d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:79:57:a7:23:bb:40:dd:0e:93:1a:ae:72:92:
                    e3:d2:76:62:55:97:de:78:75:6f:92:dc:c4:da:51:
                    2f:77:60:75:94:39:56:8a:3e:7d:77:2a:ec:56:9a:
                    02:65:0e:d7:43:7b:92:1e:cc:26:30:2b:7e:c0:49:
                    a3:bb:ed:60:7a:40:d8:4a:b0:10:77:b3:88:ef:7a:
                    42:51:04:b9:1a:05:2d:61:ae:4c:09:7a:f3:d0:dd:
                    6a:38:7e:c8:a9:2b:c1:c7:4e:1b:95:19:d1:98:6d:
                    f3:a2:09:29:02:7d:48:d4:f1:e3:be:b7:43:28:49:
                    b8:f7:e8:d0:02:2d:72:29:29:92:e1:ec:21:a1:1a:
                    a6:ce:d6:e1:20:d0:60:b4:f6:a9:16:64:75:32:7d:
                    bf:55:0d:74:ac:54:00:0e:93:bc:ce:4b:11:e7:00:
                    be:69:ed:1a:cf:e9:1a:fd:ea:7f:57:08:00:1e:e9:
                    6c:78:09:4c:ab:08:be:8b:6e:be:20:f8:c0:6a:f5:
                    a9:b9:b8:42:76:1f:cd:ea:89:d7:01:cb:c6:6c:d1:
                    24:73:a7:75:f3:ec:99:e9:b7:c2:a3:1f:26:cb:dd:
                    52:07:51:a4:03:b2:91:d3:4c:3a:be:65:01:8e:65:
                    13:6a:97:1e:57:3e:fa:b8:c0:64:33:41:73:9c:e7:
                    c3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C7:89:C4:64:63:7F:99:6E:3B:0D:29:05:D2:CD:E9:0B:27:0B:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7f6fbb4a-a0ac-3c97-b65e-41cf82d56a19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:af:c4:f2:c3:15:0e:d9:17:39:86:10:bb:11:28:04:3c:89:
         65:c8:b2:2b:9e:0b:d1:b2:82:d2:36:d3:9f:a0:9c:e5:34:fe:
         ae:67:66:80:6d:48:ac:18:cb:b4:ef:39:a5:33:09:b2:3e:3e:
         0d:e3:54:bd:c7:63:db:e9:03:68:52:b6:e5:6b:2e:2b:20:da:
         51:e5:ea:e7:71:81:75:64:67:1a:28:eb:e3:7a:6e:6e:28:86:
         bb:80:b5:49:29:6d:d1:e6:ed:43:b0:d1:44:6e:f8:93:2b:99:
         ef:aa:aa:6e:42:bb:3d:5a:b1:38:36:30:3e:68:15:d3:df:bf:
         b8:e8:7f:86:4d:88:8f:15:55:d2:64:fa:a2:33:f2:8a:32:00:
         d6:60:63:d0:61:56:ff:6f:25:f3:a8:2d:90:3f:b7:a1:b1:06:
         e5:18:2b:9a:58:6d:28:ce:e4:c9:e1:ea:cc:b6:8d:4b:67:6f:
         c7:3f:d6:9b:c4:53:bc:1f:e6:21:6e:32:fa:df:84:a3:05:13:
         39:e1:f8:df:9a:6a:9d:bd:ff:c1:f8:1e:7e:fe:3b:d3:06:47:
         0e:e7:81:6f:c0:4f:6a:76:74:ff:c9:bf:3f:4b:fc:af:19:6b:
         8e:4c:56:47:b7:04:b4:1d:e7:d0:99:b2:80:23:8e:a8:78:5f:
         b9:f0:a9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:29:14 2025 by rpki-client