Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6707d4a-cd25-3cb2-9ea2-4540418817e0.roa
File:                     a6707d4a-cd25-3cb2-9ea2-4540418817e0.roa (raw, json)
Hash identifier:          uAUQU00oc3tH+2p1mLBgplCreoYoX3eQpA4CSXW/eAE=
Subject key identifier:   A2:4D:7A:50:44:B2:D0:C7:5E:76:8B:1F:AA:78:F7:0C:9D:7D:78:70
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350C80FC32A1523FC0465A8
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6707d4a-cd25-3cb2-9ea2-4540418817e0.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:c8:0f:c3:2a:15:23:fc:04:65:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=7adee37f-7082-4174-a3fc-1d3b8b3e13df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:d6:39:8f:0f:eb:03:17:dd:7d:0a:f2:6e:
                    1d:1e:fb:42:70:69:c6:ee:7a:67:cd:b9:01:0f:a6:
                    33:2c:08:0a:fa:bc:a3:77:91:78:0a:d7:aa:7a:37:
                    6a:33:1d:97:ea:93:de:36:2f:36:b0:c7:de:a5:33:
                    53:78:9c:09:c6:27:1e:8d:e1:36:66:b8:65:7c:90:
                    76:a1:03:47:d6:82:12:45:3b:a8:9f:1a:d5:1b:e6:
                    bb:2d:85:f9:7c:99:40:df:f2:2d:69:90:1a:93:3b:
                    36:a5:79:58:4e:e3:7a:71:ea:7b:82:21:cd:09:31:
                    3f:76:8b:b9:0f:bd:30:0d:d2:f9:2f:c2:5d:f5:43:
                    7a:76:1c:96:23:fc:4e:73:50:69:a7:b0:90:b3:20:
                    3c:e8:5f:75:45:bd:67:c8:41:d7:30:0e:7c:d4:24:
                    1b:0d:b6:04:41:e5:84:92:69:75:45:e7:b1:2f:28:
                    67:35:28:2a:ea:58:31:8b:eb:01:ec:41:71:9f:2d:
                    fb:1f:86:4a:20:ab:23:89:49:d0:53:32:b7:00:db:
                    0b:47:9c:8e:c2:89:c5:9b:b1:5b:06:6c:39:2c:0a:
                    29:e7:93:7e:21:80:c2:bc:9c:b6:5f:d2:9d:37:90:
                    73:6b:c5:44:2c:f3:7c:dc:f3:49:97:53:d3:6b:3d:
                    ae:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4D:7A:50:44:B2:D0:C7:5E:76:8B:1F:AA:78:F7:0C:9D:7D:78:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6707d4a-cd25-3cb2-9ea2-4540418817e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:fa:ad:a1:ce:b1:80:f7:d5:15:fa:ac:59:1d:76:77:22:d0:
         c7:98:2e:31:38:ff:8e:5b:7c:33:6e:78:b6:3b:02:78:72:a3:
         44:7a:23:2f:9a:ae:bc:3a:dd:1d:35:95:07:97:7c:22:19:ec:
         bd:92:4f:29:e8:90:62:66:19:9e:a6:7d:15:0b:e5:65:3a:8c:
         52:9b:3b:c2:44:06:86:02:4f:83:0a:92:96:31:a1:29:fa:6c:
         99:24:db:8f:a8:fc:a8:3e:ae:61:e5:9e:5a:cd:9d:cc:99:02:
         c2:f6:d2:c9:d0:1a:af:93:c6:cd:77:4e:36:52:61:98:e9:f8:
         43:c7:b9:10:b9:ee:53:99:3e:73:4a:41:c4:86:de:20:ec:53:
         bf:a7:19:ad:e9:21:5e:2f:01:51:3a:66:b3:11:9f:38:d3:ec:
         6c:63:0d:34:70:65:a1:bb:86:3e:e0:03:18:d4:3f:88:0a:c0:
         55:94:2e:6f:08:fa:30:03:f3:82:ce:e6:f6:21:5c:b6:3f:ba:
         af:d3:04:be:3a:b4:dd:b3:a5:ab:49:c6:7c:43:ea:40:cd:fa:
         22:93:74:0c:67:77:4a:a2:32:8e:e6:67:f1:b5:a9:fd:b9:9f:
         45:47:3a:cd:f5:ad:10:7d:f6:a5:ad:37:f3:df:d4:f4:0b:1f:
         fd:b4:ee:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 10:39:33 2025 by rpki-client