Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/96b7a736-94e0-3ece-8b5a-b6268c20fa59.roa
File:                     96b7a736-94e0-3ece-8b5a-b6268c20fa59.roa (raw, json)
Hash identifier:          4GQdmhTELKCHg7h5U4Dt4x/atCDF37P5HEhuyDo5DFk=
Subject key identifier:   5F:90:65:3C:5C:30:37:CD:FC:D7:78:D4:DE:D9:7C:BD:A0:AB:88:8F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A708618ED0BAA9C275BC8D360
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/96b7a736-94e0-3ece-8b5a-b6268c20fa59.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     41264
IP address blocks:        104.133.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:18:ed:0b:aa:9c:27:5b:c8:d3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=5a294b43-a5e1-4d35-9471-204601c16b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e7:79:ed:ee:1b:0c:0e:fd:66:b9:c0:0b:f5:
                    0b:40:1b:57:28:85:0e:12:3b:c1:81:1f:c6:d6:72:
                    85:5b:9e:23:57:6c:2d:aa:7d:ac:14:ac:da:b1:18:
                    c3:34:1f:7f:37:3d:e4:9e:84:ab:1a:f2:c2:2d:23:
                    10:4e:07:8b:64:4c:c8:0e:f0:49:b6:bb:08:41:3d:
                    1d:f3:8d:0b:89:7a:3e:23:41:ce:e2:af:c3:58:73:
                    81:d3:f2:96:dd:ea:15:a1:bd:f5:9e:0f:fc:16:06:
                    15:59:8b:a1:70:d6:e3:e3:1f:28:62:27:d3:60:35:
                    ac:da:8c:d2:3d:42:49:d6:9d:df:0f:1a:b9:e8:5a:
                    88:d5:f9:4b:ec:9c:f3:a9:94:4a:b4:f1:c8:92:5b:
                    5a:4e:7b:dc:d9:98:5c:6b:e6:f0:9b:fb:cd:1a:ea:
                    42:d2:d1:48:29:c1:90:65:fb:c2:59:48:60:d1:d1:
                    6f:06:4d:e8:63:7e:2e:e4:11:8e:1c:eb:5c:19:08:
                    85:18:14:c4:6a:f6:4b:cc:5e:c3:d9:84:c6:c3:75:
                    dc:fd:4a:84:de:38:d9:f9:a4:53:b3:39:84:23:2d:
                    26:52:9b:83:9f:0d:14:db:aa:35:73:40:70:a4:07:
                    d8:ef:bc:cc:76:17:92:ff:59:93:10:95:15:6f:e9:
                    47:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:90:65:3C:5C:30:37:CD:FC:D7:78:D4:DE:D9:7C:BD:A0:AB:88:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/96b7a736-94e0-3ece-8b5a-b6268c20fa59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:15:cc:79:35:4d:aa:f9:82:e7:9d:88:70:e1:13:4b:bd:9b:
         97:0f:68:86:33:45:0a:aa:d1:df:d7:89:0b:45:c4:91:37:18:
         bb:79:32:b5:26:ef:75:e0:1b:0c:ef:cc:46:ae:87:59:1a:a2:
         17:71:62:e2:30:c0:1e:b7:3a:5a:ac:3d:73:ef:a2:1e:aa:ad:
         19:c2:b6:dc:e8:22:18:da:3a:c1:c5:47:d2:de:ea:23:85:45:
         e0:4e:de:93:59:e9:c0:f0:72:a6:da:83:5a:3d:2f:53:2f:e5:
         41:29:f0:19:03:b8:ee:2c:15:cb:87:96:29:15:fd:cb:1b:8a:
         a2:0e:e3:a9:6c:07:c6:1c:ad:89:1a:25:2f:22:ea:87:ad:43:
         6a:6e:82:aa:4e:58:0e:ff:9f:fa:3b:93:47:d4:6e:84:e4:5b:
         ce:b7:f3:d1:3e:1e:49:9c:c5:f2:21:8c:9d:83:63:ce:c7:bf:
         71:d4:89:09:a3:88:f6:9a:bd:b1:b6:b6:5b:a2:09:bd:cd:7a:
         ee:ab:9e:63:01:3b:72:8c:b5:2f:48:73:a1:b3:e7:72:ad:72:
         9c:da:31:a6:f7:63:21:d6:50:6a:66:3b:21:34:e2:80:ce:61:
         1e:ef:7b:31:18:aa:3a:bb:75:d4:38:a6:7e:22:b2:3d:6e:1b:
         70:d8:31:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 00:56:29 2025 by rpki-client