Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/80585b3b-17f0-3e2d-b16a-68005b4aa558.roa
File:                     80585b3b-17f0-3e2d-b16a-68005b4aa558.roa (raw, json)
Hash identifier:          RqS2zbVXoU6M/o5n9yi6k+mz2BEOGJEOuQISpPODblw=
Subject key identifier:   C2:D9:F7:8D:3A:4B:99:A7:8A:8F:7A:12:2B:C9:63:C2:75:0A:52:21
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350AE17FD95ABC08879DB40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/80585b3b-17f0-3e2d-b16a-68005b4aa558.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:ae:17:fd:95:ab:c0:88:79:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=0c4d8983-fde5-427e-bb05-76dffa9a56ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:48:4b:1d:47:1a:8d:ea:36:d2:55:f8:77:29:
                    7d:a5:02:4d:9c:90:c9:45:5a:e4:0a:e1:ab:86:c5:
                    7b:22:bf:a8:04:11:7d:cd:e0:bb:74:c7:fe:10:90:
                    62:d5:a9:3e:bb:84:05:9c:44:d5:fc:3c:94:bb:b1:
                    d8:50:a4:39:da:52:df:a0:2b:df:41:0f:f0:75:27:
                    02:b4:6b:6b:e7:59:58:14:5f:52:d3:9f:6e:20:65:
                    fb:ec:84:cf:d8:86:e8:bb:33:5e:a9:5d:d9:3d:02:
                    e9:9c:a5:c1:9a:39:c5:ef:2e:19:fb:60:b7:c8:50:
                    10:16:6d:cf:18:0a:af:fd:23:c3:28:1b:fc:56:57:
                    f6:3f:ff:04:90:dd:19:34:a3:42:69:e7:44:1b:52:
                    e9:99:86:bd:8f:83:d8:13:63:20:98:8a:bd:c6:f8:
                    35:8d:f3:ac:e0:85:83:8b:ec:5a:05:d7:74:b9:c7:
                    3a:a3:20:4a:2e:82:5e:31:99:59:63:a8:28:95:75:
                    d7:b8:29:08:29:ae:c5:73:8a:51:20:86:55:4e:6c:
                    54:a1:ff:21:1f:27:cb:b6:b6:5d:31:d6:ed:67:40:
                    ad:28:8d:5f:2f:16:22:f0:f5:61:46:09:c6:69:62:
                    98:1d:5c:93:6c:a2:55:c1:cd:27:84:71:2a:fb:4d:
                    02:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D9:F7:8D:3A:4B:99:A7:8A:8F:7A:12:2B:C9:63:C2:75:0A:52:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/80585b3b-17f0-3e2d-b16a-68005b4aa558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:8b:e7:8a:a8:2d:8e:5a:bc:6e:31:b5:fc:a2:bf:0c:d2:51:
         d7:a2:8d:90:4f:a2:c4:40:0b:32:8d:0c:88:cd:39:1b:8b:00:
         59:6a:9d:a4:04:f4:9a:22:36:fa:30:4c:8d:f9:f4:af:25:b9:
         56:b0:b1:e7:28:ff:89:d1:33:b8:d0:9c:50:62:dc:f3:ea:62:
         1e:52:70:79:03:ff:80:16:e3:50:68:01:30:cc:f9:76:49:b2:
         47:1c:2f:55:23:e1:5a:6e:a3:c7:36:4d:f2:80:8b:8f:92:c3:
         07:2f:41:18:35:4f:ba:f9:83:f3:68:c9:75:3d:da:32:a5:b0:
         2b:f7:31:8f:62:e1:7a:0d:e0:e0:84:e0:1c:3a:78:71:c7:97:
         d6:94:5e:d9:ae:09:40:c5:89:5c:f3:d3:77:17:88:c8:f0:64:
         ad:76:b5:5c:e2:5a:34:d4:d6:d5:8f:74:92:75:c9:3b:c2:b1:
         a1:01:f0:8f:8a:70:9e:13:f6:63:6e:5c:d3:f7:72:06:a0:a2:
         8b:15:27:a6:7e:bd:d2:25:e2:79:54:5b:13:c5:c4:0c:31:89:
         28:c7:a1:74:20:c9:5f:a5:28:9e:4b:99:0b:d6:83:91:e1:f9:
         f4:c0:45:fd:98:eb:65:c0:0c:5f:5b:0f:93:05:3b:50:13:fc:
         42:fc:f4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 09:57:26 2025 by rpki-client