Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/beb52f88-a05e-37ef-9a78-a6c3803d1c91.roa
File:                     beb52f88-a05e-37ef-9a78-a6c3803d1c91.roa (raw, json)
Hash identifier:          sL0m7mcw9TsgH6gRIVJqmYntOC8DkGBmqtACCKWOqyI=
Subject key identifier:   3E:1C:56:3A:70:0F:7C:09:AA:2A:CD:AF:FC:F3:8E:29:8C:66:81:05
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350BFDC365DFA5A0D8F5AE0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/beb52f88-a05e-37ef-9a78-a6c3803d1c91.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:bf:dc:36:5d:fa:5a:0d:8f:5a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=df599120-8ba4-4be0-8b90-74b60a77bf30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c7:29:9c:95:9a:de:de:3c:7d:ea:10:c3:d5:
                    39:5d:46:2a:f2:fd:a1:c0:85:b2:70:90:3e:d8:9d:
                    39:03:13:eb:48:ce:b7:f7:2b:76:88:15:ca:ea:64:
                    84:48:c1:96:dd:16:4d:f7:8a:a9:4d:fc:60:9c:2f:
                    12:ae:29:91:4f:12:51:3d:84:07:13:08:09:59:52:
                    05:23:2a:60:75:ff:1f:61:d0:f8:1a:72:3e:2a:ad:
                    b2:bc:ad:2f:51:d2:5b:fe:6c:31:24:28:e9:06:53:
                    66:fe:6f:9b:ab:c3:ce:48:d8:7c:13:62:71:63:cc:
                    4c:c6:fa:c5:ea:bb:0b:a9:f4:30:29:9a:59:0e:11:
                    a5:7d:f0:5c:2f:31:42:b6:9b:43:f8:0c:16:32:7a:
                    f7:cc:f6:b2:b7:13:35:da:b6:19:67:bb:b6:18:46:
                    9d:ed:4c:c0:10:93:24:e6:72:a1:2f:8e:ac:ca:9a:
                    24:3f:d2:5a:eb:cd:6d:63:f2:92:82:ff:07:25:1d:
                    5f:25:f7:81:bf:98:98:bf:ad:0b:55:c3:af:e7:4e:
                    0b:43:2c:b2:e6:36:a0:5b:16:99:0e:62:f9:51:79:
                    00:52:08:a2:20:2a:d4:02:60:91:ff:7a:c3:93:56:
                    d3:16:b0:5c:8a:30:d6:29:75:90:d6:f4:8f:7c:60:
                    31:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:1C:56:3A:70:0F:7C:09:AA:2A:CD:AF:FC:F3:8E:29:8C:66:81:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/beb52f88-a05e-37ef-9a78-a6c3803d1c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:91:54:c7:ac:ca:79:49:18:92:b6:47:0c:19:d9:20:a7:8d:
         57:1b:b5:e8:7b:ba:23:92:03:84:a2:63:ff:a2:c9:ba:29:03:
         e3:a5:21:8f:0c:a1:34:bc:10:5d:66:07:86:a1:d4:99:da:6d:
         d7:f4:e0:46:4c:b1:e5:bc:9e:ae:e5:a9:e5:0e:c0:c2:90:bc:
         01:ef:9a:90:78:ce:08:ef:7f:46:9d:60:8d:c6:16:3c:34:1a:
         b9:07:c2:37:20:55:c9:fd:4d:2e:ec:6f:a0:d8:6b:84:58:53:
         e6:8e:c5:ed:d5:14:fe:99:0c:5f:c5:dd:dd:a4:db:ad:9c:a3:
         91:45:23:1c:72:e8:75:87:4e:ca:4c:6e:a1:26:97:b1:f3:78:
         e1:f2:8d:35:b4:a3:63:02:b6:27:c4:ba:c6:72:4e:17:8c:e0:
         30:bd:d7:80:88:ff:b5:05:ae:37:6a:c4:ec:e1:84:d7:88:80:
         97:1d:25:ed:d5:79:26:67:62:41:11:ec:1d:25:e0:af:08:21:
         bb:2a:7d:f4:e1:75:f3:8a:38:27:91:b5:58:20:83:bd:b4:9a:
         6b:51:6c:c9:94:59:19:2e:d7:b5:f6:6a:15:90:04:6b:eb:eb:
         f5:da:66:6b:0b:5d:66:20:61:28:6e:af:e9:fb:df:fa:87:f8:
         90:12:89:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:48:08 2025 by rpki-client