Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b2f12e49-c175-39bd-9378-29bc76725d2d.roa
File:                     b2f12e49-c175-39bd-9378-29bc76725d2d.roa (raw, json)
Hash identifier:          NSwqKx/Z8s0vdAZGBgfq2z8X+1L/rR13620WZwMgads=
Subject key identifier:   16:F4:0D:F9:39:2B:8F:80:DA:CF:2F:3E:00:05:94:07:D8:32:6D:CC
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350BFB1686153F0E754D8C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b2f12e49-c175-39bd-9378-29bc76725d2d.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:bf:b1:68:61:53:f0:e7:54:d8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=fdeda284-0d5d-4767-adee-335b63a60120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:87:2f:50:f3:67:c6:36:cc:92:93:d8:db:c9:
                    d1:cf:89:b6:f5:86:e7:50:ba:be:27:f8:7b:90:10:
                    93:c3:43:6a:34:9c:47:fd:f9:c5:32:52:96:b7:64:
                    6d:e0:35:35:c5:4f:44:c4:0c:ad:c6:5f:a4:8c:16:
                    c4:2a:11:31:53:aa:ac:a7:a8:b5:c7:8c:ee:5c:97:
                    12:ed:25:c1:29:e6:f7:88:83:45:db:25:a7:15:4d:
                    d9:1c:3c:12:dc:a4:df:dd:e8:bf:e8:e0:f9:ad:58:
                    a7:4d:cb:89:b2:0b:01:22:2e:0f:6e:e7:77:53:08:
                    e3:e2:c7:d1:93:3a:72:5f:f5:59:a9:74:f5:39:a7:
                    26:37:e0:ba:5d:6f:ab:b3:50:fc:c1:e4:b3:a6:c5:
                    fb:0e:3c:ae:21:e2:3d:bf:09:ec:61:66:fb:8a:9c:
                    67:5e:75:78:d7:e6:af:15:58:f3:10:2d:f6:60:c8:
                    50:e0:d0:45:cb:ea:34:5b:b8:eb:e9:d6:0a:c4:39:
                    35:49:f9:fc:06:f3:fb:7c:1a:40:b8:61:6a:e8:df:
                    1d:69:1f:09:88:0b:2c:ad:48:2d:fc:09:17:1c:ac:
                    77:74:b2:b4:96:4b:19:61:d5:32:df:ad:55:d3:0c:
                    42:63:c1:bc:9b:0c:cf:66:67:24:ff:3d:fc:00:e5:
                    70:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F4:0D:F9:39:2B:8F:80:DA:CF:2F:3E:00:05:94:07:D8:32:6D:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b2f12e49-c175-39bd-9378-29bc76725d2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:1f:84:ac:9b:cc:2c:49:94:6e:b9:e6:39:c5:c9:27:6c:c4:
         48:05:52:12:6e:62:5b:65:39:49:57:ad:f3:b6:06:2d:55:14:
         91:de:83:b1:7e:d2:83:fc:b8:54:a8:f5:4b:23:1a:35:fc:ec:
         0c:05:2a:de:ff:8c:3f:08:07:ae:ac:b4:4e:ed:10:94:41:f2:
         4a:34:bf:b9:5e:5e:23:84:99:cf:d9:b7:95:79:f1:28:2a:fe:
         09:c0:ed:18:37:b4:ca:f0:c4:bc:86:f9:b0:88:8f:b8:54:1e:
         68:9f:03:e4:a6:cd:79:2b:5b:4e:a7:fb:94:a6:0d:48:b3:75:
         5c:b5:59:be:5e:aa:ec:ab:ff:57:6e:51:d7:15:e0:52:2f:5b:
         bf:b7:d3:d6:b5:e4:46:58:8a:a7:f5:52:88:4a:61:f0:04:6f:
         be:4b:47:a9:4b:39:e3:c7:10:bd:0c:ac:a7:a8:73:a7:b7:77:
         f4:81:84:55:03:27:7b:ef:6f:50:93:9c:ce:8f:fb:52:34:47:
         63:75:64:9c:21:93:d0:86:72:6a:ba:6c:33:3b:25:cd:c7:76:
         51:74:77:68:c0:0e:35:4e:7f:c2:89:4c:8f:34:03:5d:4c:c1:
         9a:c1:6b:5e:09:aa:40:5a:9d:de:b6:35:66:50:d2:7e:9d:20:
         6a:c9:e9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:22:28 2025 by rpki-client