Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e6015eb2-6039-321e-968d-a25a519d46d8.roa
File:                     e6015eb2-6039-321e-968d-a25a519d46d8.roa (raw, json)
Hash identifier:          R3xg/KyjVWYKYOkqBSY+He+0EbGo4ERM8adLHfhJubw=
Subject key identifier:   D3:B4:45:E2:24:97:E5:44:69:CD:B2:ED:54:2A:23:4E:73:93:F4:45
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350C3DD579D2D435CB15600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e6015eb2-6039-321e-968d-a25a519d46d8.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:c3:dd:57:9d:2d:43:5c:b1:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=6258f8ca-3554-496f-83e5-49288f8d9a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f6:cc:a8:7c:83:14:b7:a4:bc:ac:89:7b:d3:
                    d3:1e:aa:32:5b:da:d2:68:ce:de:57:39:29:db:25:
                    cc:63:78:55:fa:c6:c0:d1:b4:5e:43:72:0e:e9:72:
                    49:8c:6d:25:57:85:a0:d9:a4:39:91:0d:85:b5:12:
                    86:ae:a6:b9:9f:38:fa:70:95:5c:18:fb:2b:cd:58:
                    58:14:72:e2:ce:43:31:04:30:1d:67:22:d1:3c:f3:
                    a5:d9:68:af:80:fc:2c:9a:1c:30:d3:b5:89:d6:27:
                    12:6a:e2:1b:68:6d:2d:a9:33:47:47:db:c8:c6:2c:
                    cd:77:aa:08:1e:9f:b5:85:49:7b:35:c7:28:2c:84:
                    74:6a:18:af:6f:5f:5e:72:cb:7b:1a:08:d3:c1:75:
                    87:fa:7b:df:8b:8b:3f:e1:fb:da:2f:cb:da:17:7e:
                    58:90:5c:6f:5e:a4:0a:e7:19:32:b0:96:c8:3e:15:
                    ec:3b:a1:56:da:64:55:63:05:d0:b7:25:e5:1a:30:
                    f6:f8:ad:ae:44:52:04:d4:6e:60:ae:c5:3f:63:80:
                    9b:ad:36:bb:f3:5b:30:b7:9c:8c:b2:e3:f3:a6:b2:
                    18:6f:b6:d9:a5:e1:2c:5d:cc:51:f4:2b:53:dd:63:
                    e2:16:15:da:66:79:82:9d:d4:1d:fd:4d:d4:3d:ff:
                    4d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B4:45:E2:24:97:E5:44:69:CD:B2:ED:54:2A:23:4E:73:93:F4:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e6015eb2-6039-321e-968d-a25a519d46d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ca:8e:df:75:de:3c:4b:80:d0:3c:98:c9:22:1e:70:62:18:
         b8:b3:ee:63:37:fe:84:59:60:3c:5f:ea:9a:cc:4d:de:9b:71:
         97:a8:8c:2d:49:52:ab:e3:40:d7:a8:64:bf:ff:94:b9:93:b0:
         ba:12:25:82:de:b1:00:f6:48:ff:37:b1:4d:7e:1e:29:7d:5e:
         a8:7f:6e:66:59:05:fc:fd:5e:f3:b2:58:54:4c:12:50:22:53:
         a2:6d:6b:57:bb:2b:3d:42:df:e8:d6:92:fb:bf:01:d5:3b:a5:
         d1:81:3f:c9:21:77:25:d9:6a:56:18:c8:83:40:df:ed:8d:2d:
         51:af:6c:d1:6d:5f:04:3c:0f:62:10:0c:6d:34:07:54:38:b2:
         17:81:f7:e2:51:ba:6a:88:4f:8a:5c:72:91:cb:2f:55:07:3b:
         c9:30:10:d4:e1:34:ba:c9:8b:14:2f:e5:eb:91:a1:4f:b4:d0:
         c9:09:ff:31:06:28:6d:c4:7f:ab:b8:6f:86:03:c0:82:35:70:
         23:ff:94:1d:61:4f:42:e3:db:aa:25:9d:23:81:b3:55:c0:0a:
         f8:f8:87:77:ed:bc:e9:8a:c6:21:48:d6:ae:f7:a2:d7:5b:2b:
         e1:3a:81:cb:df:e2:b9:c0:8b:a6:40:83:4a:b7:68:05:b6:a1:
         4a:04:25:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:21:10 2025 by rpki-client