Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/914122a5-5a40-3ade-80b7-5b425b5ccacb.roa
File:                     914122a5-5a40-3ade-80b7-5b425b5ccacb.roa (raw, json)
Hash identifier:          BBsVbu4yvVcMo1U4bbK2C3a/M4ZwV/q85Nnc+OvAXmw=
Subject key identifier:   FA:62:55:92:A1:B6:8B:CB:80:B0:0D:CB:BC:55:F8:17:4B:BC:F7:10
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350C4D7C58BB49947F278C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/914122a5-5a40-3ade-80b7-5b425b5ccacb.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:c4:d7:c5:8b:b4:99:47:f2:78:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=bc28e1bd-76ee-4d81-88e9-86c648a344cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9b:09:dc:3f:ba:5b:e8:d5:bf:29:25:9a:e5:
                    9b:2d:e9:50:6e:ef:03:c4:57:dc:b3:36:7c:5f:70:
                    8b:4a:dc:98:19:5a:78:50:de:43:ee:06:92:7c:c1:
                    82:96:4a:fd:e5:ee:ed:62:6c:0d:3a:b0:a3:fe:6a:
                    c8:f8:dd:39:3b:e9:f2:00:0d:33:cc:6a:dc:09:80:
                    1c:02:b9:17:59:76:30:db:e4:62:45:a5:8a:ef:02:
                    46:e8:ee:8d:df:d8:87:f2:cc:0a:0b:90:ba:0c:a5:
                    fb:aa:d3:ea:ba:b9:4f:a8:ed:d5:ce:d9:65:d6:4e:
                    a7:9f:e1:06:87:b0:61:9f:2e:b4:57:47:44:fa:56:
                    5a:00:91:51:d0:8b:4b:84:43:56:d9:4c:5d:8b:db:
                    d0:ab:cc:95:d4:6e:3a:a0:92:a4:66:12:24:a2:fa:
                    30:83:94:12:c2:c2:4b:ed:75:05:2a:01:fd:36:88:
                    42:1c:14:fa:ea:04:08:76:6f:8f:d3:9c:b5:fc:bc:
                    a8:07:4d:20:5f:7e:93:95:8f:08:82:87:73:b0:9a:
                    d6:e9:85:64:28:01:1a:f9:1c:5f:dc:19:7b:01:5e:
                    6d:3e:15:50:38:fb:6f:a5:f0:ae:02:4e:dd:82:67:
                    96:ad:cb:5b:6d:73:bb:64:51:ea:8f:0c:a6:48:bc:
                    f7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:62:55:92:A1:B6:8B:CB:80:B0:0D:CB:BC:55:F8:17:4B:BC:F7:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/914122a5-5a40-3ade-80b7-5b425b5ccacb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ce:92:ab:fb:37:d2:ce:f2:a0:76:c2:89:5e:7a:c1:6c:09:
         b1:0f:d4:56:c8:70:e4:b2:59:20:19:e4:96:72:ee:2d:f6:58:
         92:1f:d3:c4:a5:a4:92:2e:d8:62:0f:f7:88:f9:95:c2:3e:fa:
         41:9d:f1:04:3c:21:f7:ee:08:ca:ef:fd:c1:dc:f5:52:5f:9a:
         ac:52:a6:2b:bb:dd:2b:1b:3c:8a:ca:cf:0f:e9:c8:cb:b3:96:
         3d:11:d7:00:7b:63:f0:50:92:03:c1:78:0c:c3:df:e4:f3:85:
         b1:fc:60:2e:0f:a8:40:09:88:ed:a5:06:79:fd:c1:9d:ef:55:
         30:3c:65:8f:07:5e:62:f2:d7:8b:d5:48:6a:6c:93:b1:44:af:
         6f:78:59:9f:64:a9:88:50:b9:f3:bb:2a:fc:38:1c:57:ec:bb:
         8a:ae:30:65:2f:2b:12:03:16:2a:29:05:f7:86:8f:fa:ce:95:
         fb:3c:9e:96:f3:85:f9:7c:fa:83:85:90:0b:f2:0a:d9:3d:ca:
         a3:3b:38:74:f6:7b:2c:89:2b:0f:0c:2a:96:df:e6:4c:bf:3f:
         fe:da:00:f3:03:71:0e:0c:cf:aa:51:57:6f:94:9d:0d:27:ea:
         cb:2c:e8:95:e4:cc:4d:93:4a:4c:74:ca:61:4b:a4:13:da:fb:
         ba:49:d5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 10:03:34 2025 by rpki-client