Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e95485-4c78-3788-9f7f-f3ad1cdead0f.roa
File:                     c8e95485-4c78-3788-9f7f-f3ad1cdead0f.roa (raw, json)
Hash identifier:          PE3m4mck24ucr+IXCm+nFcxbbngG1IHaJ5Qt0nrtjRU=
Subject key identifier:   6B:43:6C:7B:9C:7E:F4:25:D1:14:43:97:45:77:8D:58:AB:62:3D:9D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350AA128BCCAB3372394580
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e95485-4c78-3788-9f7f-f3ad1cdead0f.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:aa:12:8b:cc:ab:33:72:39:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=ffaa3de6-49ff-4210-83ef-318465430d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fc:0e:32:55:29:53:2a:23:c1:65:4b:a7:50:
                    6f:30:04:7e:5d:69:80:b0:ae:d7:2e:73:98:fc:49:
                    00:85:40:f4:ce:31:67:1e:54:b2:f5:84:ec:f4:52:
                    c5:96:5e:47:93:60:1e:13:c2:73:26:c4:55:d6:1c:
                    ea:35:95:b9:a6:4d:a0:43:1b:74:31:7a:da:5e:d6:
                    c3:56:26:9e:22:3e:67:3c:81:96:8e:a3:18:5f:4f:
                    e0:5f:f9:09:dd:4f:b0:09:71:5a:12:be:64:5c:86:
                    62:fa:28:23:fd:29:36:1c:73:ea:17:38:15:db:86:
                    64:33:4f:61:65:87:e6:39:19:c9:43:6f:b0:bc:14:
                    f7:5b:bd:1d:f9:a7:4a:2b:19:45:e0:23:12:07:a0:
                    5b:b2:98:af:dd:5e:21:5a:2d:82:e0:86:08:29:40:
                    c0:65:3f:d7:73:55:db:39:9a:86:55:5f:db:a2:86:
                    bc:75:fe:38:9b:6d:ad:98:73:d8:dc:8c:5f:5b:e0:
                    66:71:c3:89:6a:4f:b0:4e:02:df:4c:bb:35:63:da:
                    1c:97:f1:08:98:2f:42:f6:31:2b:d8:e4:f9:a8:c1:
                    2f:2b:3a:00:19:08:af:fe:60:fb:35:21:e1:a6:e1:
                    6c:10:d2:b2:fc:89:64:66:65:7e:f9:00:b1:59:33:
                    0e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:43:6C:7B:9C:7E:F4:25:D1:14:43:97:45:77:8D:58:AB:62:3D:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/c8e95485-4c78-3788-9f7f-f3ad1cdead0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:0f:74:8b:4c:4f:fa:a3:0c:6c:9b:d4:ee:43:5d:40:17:
         05:d7:2c:58:7f:e1:6e:99:5a:25:80:96:cf:61:fc:47:e8:ee:
         43:9e:af:4a:d0:c0:61:a1:f9:7c:65:20:4b:c4:10:86:a6:49:
         af:50:c2:57:ea:17:ca:cc:98:e7:86:5e:e9:81:89:ca:2c:7a:
         de:52:d7:77:3d:8c:6c:e6:aa:aa:67:ca:c9:d7:e5:51:fe:f7:
         b6:13:cf:c3:f1:e3:e2:ab:00:c6:03:aa:d7:6d:4c:25:68:08:
         61:df:f0:65:be:b6:d7:cb:27:dc:f4:90:d7:94:0f:d7:63:ae:
         f6:73:ac:e4:ec:98:b2:56:00:7e:29:42:9d:f7:1d:a0:bb:dd:
         21:d5:ab:28:7b:05:13:cb:90:0b:74:d9:64:0e:e5:f1:42:11:
         97:2c:0a:31:67:d5:5c:52:3c:bd:ad:e6:e3:2e:8b:86:a5:de:
         cb:29:d2:f9:1e:b5:a1:fc:43:bb:b5:b4:1c:e0:0e:93:23:52:
         de:09:f9:57:31:dd:af:03:cf:03:53:d7:d7:98:d9:6f:1c:7b:
         c5:9e:92:c2:02:8c:29:80:fa:da:38:e9:92:72:6e:ba:c4:36:
         c4:1a:d7:41:5d:08:47:fd:ec:aa:b5:ff:01:9a:da:1d:6e:fa:
         e3:f2:c3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 09:37:07 2025 by rpki-client