Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/90381858-833d-3bd9-b44d-29d4467a9dcb.roa
File:                     90381858-833d-3bd9-b44d-29d4467a9dcb.roa (raw, json)
Hash identifier:          qLTADKW9gJaLeJgcm4B85Ix2ODNs5Xu9H1/d3kG7JWk=
Subject key identifier:   DA:63:13:CA:E0:72:41:10:73:CB:16:28:AF:2E:FD:1A:EE:BF:58:B1
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350B1708A977888DB8D2380
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/90381858-833d-3bd9-b44d-29d4467a9dcb.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b1:70:8a:97:78:88:db:8d:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=8fc701f7-3f1c-4610-aa33-a0e67dca802e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:38:98:41:81:0f:75:9a:ea:a3:db:c0:7c:d9:
                    84:49:83:b9:24:86:ee:6d:a3:e1:6b:e0:32:25:86:
                    ba:23:22:5a:42:2e:1e:af:99:81:7c:18:0e:10:0a:
                    c5:73:52:e7:e6:77:fb:49:db:1b:e9:89:d9:03:93:
                    5a:71:c3:15:34:24:72:86:b2:cf:b1:10:89:a1:64:
                    d6:5a:9b:85:5d:5f:0b:68:67:b5:1f:3d:61:7e:c0:
                    46:d3:5b:01:38:73:70:5a:5f:df:3c:39:20:1f:7a:
                    c0:18:67:ad:83:6f:7d:74:65:5b:c0:e3:00:69:96:
                    81:d6:ab:1e:54:b2:2c:1d:c2:b9:f1:e9:4d:00:5f:
                    e2:b5:4f:6c:63:ed:dc:e0:7d:de:96:e8:be:45:d1:
                    bc:93:f2:0b:e5:91:af:31:b3:7e:86:c0:80:4d:40:
                    44:c0:8f:e4:15:6c:6a:26:59:4a:94:95:d2:e4:c4:
                    bf:f8:7b:17:7d:9d:7f:00:b6:52:69:d2:40:64:b0:
                    ed:2e:ef:07:1a:88:0c:14:a7:97:82:84:06:f3:b1:
                    a9:f3:20:f4:10:88:13:3b:02:5c:a6:a0:91:25:6a:
                    ff:e7:6b:f3:ba:60:01:17:63:67:b5:c5:82:c7:c5:
                    fe:97:00:e1:f1:f4:bd:e0:98:c3:77:24:8f:d2:46:
                    e2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:63:13:CA:E0:72:41:10:73:CB:16:28:AF:2E:FD:1A:EE:BF:58:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/90381858-833d-3bd9-b44d-29d4467a9dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:18:0f:80:77:4b:fb:ef:13:58:f3:0b:91:25:d6:93:61:ca:
         c5:84:91:c9:8d:1a:cd:37:f6:fa:45:26:01:ee:65:91:22:07:
         e9:d8:ad:e9:a9:19:fe:61:c2:15:ef:d9:fd:ae:dc:d0:23:16:
         9f:68:bd:7e:ca:40:80:b1:7b:b7:2a:fb:64:d0:48:1b:1e:29:
         ec:ea:bf:21:3f:58:00:9c:e9:49:71:7b:96:f4:1c:14:98:31:
         69:4d:85:64:b6:c5:6a:87:39:d1:91:6b:28:5f:0a:51:4c:ae:
         30:99:42:1c:1f:18:70:81:1e:02:d9:5e:cb:08:3e:5b:2c:6f:
         f7:b1:8c:f1:4f:dc:7c:56:82:47:99:03:e7:7d:f0:74:69:40:
         63:db:38:e8:c9:6b:af:16:69:98:ec:10:bd:a6:d1:04:0b:1b:
         1e:7a:0a:cd:20:63:a9:00:40:f7:05:52:e7:01:b3:86:09:9a:
         88:c7:d3:fd:54:71:72:94:c9:38:93:01:c1:90:3d:bf:29:74:
         c7:24:7f:7e:e0:9c:aa:d6:ef:94:67:67:7b:f9:33:49:7b:9d:
         7d:34:fe:cd:ba:89:c1:62:e9:11:45:9a:8e:2c:27:c9:f7:89:
         43:be:9d:17:b6:4e:00:fb:54:a0:77:ef:d5:71:a9:78:72:80:
         5f:95:7b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 10:10:33 2025 by rpki-client