Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9ebf3b5c-d8f4-3fae-96d9-b020ba0ad9c2.roa
File:                     9ebf3b5c-d8f4-3fae-96d9-b020ba0ad9c2.roa (raw, json)
Hash identifier:          k9+QoD0tcxOVz/fusMzvx/v22a8DkmDTZ0EDkVMZst0=
Subject key identifier:   78:F0:36:06:39:21:F1:1A:80:D3:4C:24:33:91:1A:E5:8B:B9:25:84
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A6AF098A3D2D6E8736D8C87C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9ebf3b5c-d8f4-3fae-96d9-b020ba0ad9c2.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     36411
IP address blocks:        104.133.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:98:a3:d2:d6:e8:73:6d:8c:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=6d3a06e8-08f6-43e4-822d-ab33fe14e5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:0c:67:40:fe:dc:01:c9:02:68:90:2f:6d:
                    e0:7a:60:8d:ee:f5:ec:8b:cd:5c:38:2f:68:75:6a:
                    21:4a:87:c4:fd:3f:f8:9e:f1:64:04:0d:ca:25:49:
                    e4:27:32:ce:d6:78:0f:5c:03:55:99:45:e0:4f:2c:
                    af:81:7c:35:3c:60:56:6a:f4:4b:30:c2:9f:c4:c4:
                    15:e5:87:c7:d9:fa:98:d6:b6:1c:8a:7d:62:e2:98:
                    20:47:87:94:70:ca:29:33:1f:0f:5c:09:3c:79:dc:
                    f7:89:8e:7f:ba:70:cf:9e:57:2f:58:75:29:89:2e:
                    1e:5c:f0:c2:11:ce:41:42:4a:57:fa:81:5c:8a:5e:
                    62:27:12:c7:ed:6a:76:84:fd:6d:b1:16:8b:05:3b:
                    f0:10:37:b4:0a:f6:45:cf:30:2b:f0:8a:be:22:64:
                    eb:91:1f:ed:18:b0:3f:fb:f1:51:86:f5:92:2d:04:
                    15:4f:5c:7f:fe:15:70:e8:db:90:ce:71:f7:29:51:
                    ad:81:95:9e:56:77:50:f8:12:c8:ad:d5:70:de:b3:
                    6e:18:34:02:d5:71:a2:0b:cb:55:1f:fc:63:22:41:
                    5e:bc:f3:f6:74:83:b3:f4:79:63:83:86:bb:b3:38:
                    b0:6a:62:33:db:9e:99:2d:3d:de:55:b9:5b:ed:6a:
                    ad:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F0:36:06:39:21:F1:1A:80:D3:4C:24:33:91:1A:E5:8B:B9:25:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9ebf3b5c-d8f4-3fae-96d9-b020ba0ad9c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:f0:0c:6c:50:d1:45:2a:66:3e:8c:c8:7a:8f:9c:3d:61:5e:
         14:c7:1d:7e:49:aa:c0:89:e6:3f:36:ef:e6:99:40:c0:1f:07:
         b2:04:b4:3c:3a:88:85:cf:cb:68:b5:a0:4b:6e:77:e0:38:d4:
         a9:b1:90:d2:cf:30:28:fc:1d:d9:13:81:79:5a:f0:0b:3e:fa:
         da:fc:a3:28:2f:89:d4:14:56:84:c0:2d:a5:40:9a:d7:22:cc:
         01:b6:d3:b9:f4:7a:82:e3:d8:03:79:03:04:77:a2:10:9e:3d:
         a2:18:5d:58:a3:8c:76:be:9d:5a:78:ad:4e:23:60:c3:ea:d3:
         95:1a:63:94:42:3f:49:a0:c2:e3:b5:77:57:48:e0:58:63:87:
         42:61:80:b8:87:ea:58:9b:5f:6e:e4:77:be:bf:1b:0c:e9:a9:
         01:d0:eb:68:e0:0f:de:5c:f2:f5:fd:9a:05:c7:0a:b5:f1:f2:
         9b:39:00:9c:21:bd:87:53:a5:45:ad:29:12:55:29:d4:ed:22:
         f7:2d:43:34:90:a3:43:e2:7e:ab:ec:5a:a8:e7:b5:05:b9:e6:
         c0:07:f6:d3:5d:a5:c3:3d:5c:4e:d9:d4:1f:7f:78:8f:5c:a4:
         6e:ad:eb:1b:1e:03:8c:5b:d9:ba:95:a3:17:57:bf:ba:0f:4f:
         62:8f:d4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:00:13 2025 by rpki-client