Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa
File:                     bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa (raw, json)
Hash identifier:          FqnsSFhVpPz1YACuBls+IhZPskDckCHiZv7DlbgpjOw=
Subject key identifier:   0E:52:85:66:FB:0E:0F:42:AB:D6:97:0F:11:7D:46:25:0D:F2:72:CF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350A6D0CD17BB98A74C9D80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:a6:d0:cd:17:bb:98:a7:4c:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=3b870aa0-46ba-475f-bfcd-7a0c20ec8e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:63:47:e2:43:0a:73:e0:52:78:5b:3b:e0:b2:
                    37:6d:d0:48:9f:88:2f:96:be:b5:74:9f:29:75:cd:
                    45:c3:8a:ad:34:9d:4a:a3:f9:a8:0d:d3:a5:95:82:
                    ac:fd:0c:7e:cb:e6:05:78:da:58:05:62:84:aa:4d:
                    ed:78:66:04:7d:81:13:f5:75:8e:dd:ea:d2:60:15:
                    64:dc:14:b9:b3:51:1e:ff:a9:34:64:93:5d:db:97:
                    90:75:08:81:b2:4b:11:55:c6:f7:7d:f8:e3:d0:d9:
                    d2:00:8c:29:f8:bc:96:9f:4d:39:d8:45:09:a5:7b:
                    64:82:9c:42:c2:7c:a9:bc:c2:97:ab:ad:9d:b2:97:
                    c4:7b:f3:5b:62:e6:81:00:5e:6e:16:05:9e:c6:92:
                    92:e4:d3:02:50:42:0e:b4:ff:a6:5a:55:48:17:ba:
                    c7:61:e8:1e:52:77:dc:d6:14:c0:7c:7e:6c:74:0c:
                    37:a3:71:c3:77:18:a9:2f:cf:6e:12:5c:66:3c:eb:
                    05:56:34:65:8a:0c:8e:78:a2:84:2a:23:33:fa:32:
                    85:5b:68:f3:0a:71:98:76:16:0a:ea:87:63:ad:2c:
                    8c:b7:b8:21:27:62:63:e0:34:e2:57:99:49:67:e6:
                    f4:d3:d0:b6:b2:5d:ed:32:90:71:26:94:39:ed:c7:
                    c9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:52:85:66:FB:0E:0F:42:AB:D6:97:0F:11:7D:46:25:0D:F2:72:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/bc6d12a1-6846-3547-8151-b74cb6e9aeee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:5e:97:d7:ff:83:ad:a1:1e:c5:ce:99:fb:1b:ff:c8:58:c8:
         41:83:f8:d1:3c:28:b5:d3:e2:0e:85:3b:22:55:f8:1e:b1:d4:
         79:40:75:c5:44:b2:c7:ba:b6:7a:93:2a:8d:3e:4d:e7:09:7d:
         24:33:96:48:fc:bf:59:01:fc:f2:5a:f0:ea:d7:4e:cc:47:ee:
         06:93:d0:cb:c5:03:f3:3b:84:b9:7c:5e:d3:71:ef:c8:12:f3:
         89:2e:0f:cd:9f:e5:23:31:58:8a:3f:53:fe:21:56:cc:b8:d8:
         9b:1f:6f:13:4a:25:9d:34:2b:80:b3:2c:53:5c:b9:32:b4:ae:
         9b:48:a8:b5:f8:cf:7a:b9:12:6c:d8:5d:07:20:dd:8b:58:22:
         fb:8c:1b:89:5d:d7:a8:dd:36:29:ad:1f:54:21:e6:c0:c4:d4:
         e7:05:f1:85:51:07:6c:1a:b1:95:a1:50:7f:2d:2a:d2:00:63:
         07:17:4f:75:16:60:af:41:a4:01:ca:c6:6a:19:35:c9:2a:44:
         bb:0b:cd:ce:6a:f4:31:72:56:f3:64:d5:0d:e7:6f:88:4c:f0:
         05:8f:43:f8:9d:b3:57:7c:46:c5:e2:ae:e7:b1:26:3f:2c:fb:
         ac:e5:61:f2:f7:ce:48:bb:ec:af:15:8c:77:7f:cd:bc:7e:e4:
         41:b7:5c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:08:29 2025 by rpki-client