Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f729264c-5240-3f9d-949d-33ece05c029c.roa
File:                     f729264c-5240-3f9d-949d-33ece05c029c.roa (raw, json)
Hash identifier:          jMfpRG76UB0RiNCd4WZ3nyDjO5ENA3ptdO28ryGTfUI=
Subject key identifier:   32:4B:D3:12:ED:51:C6:29:03:9E:1A:21:18:C5:1B:FB:F5:97:F6:81
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A70860D3C18F386EE2BA774F0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f729264c-5240-3f9d-949d-33ece05c029c.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     41264
IP address blocks:        104.133.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:0d:3c:18:f3:86:ee:2b:a7:74:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=cdcbc26f-ecd2-4752-a66e-6c30222c25bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:75:00:3e:28:ec:ff:b2:ae:d2:67:b7:20:20:
                    8d:f4:13:a7:20:07:a4:fa:20:a4:86:dd:18:86:d8:
                    a3:79:8b:20:a8:64:87:d9:6c:40:d2:a6:cd:f9:18:
                    4c:b6:17:ba:46:76:12:65:ad:cb:c8:13:ca:4d:81:
                    30:91:88:73:25:64:ef:99:80:de:bc:06:f4:e6:cf:
                    60:5c:bd:34:5a:b6:10:db:ed:8a:95:72:46:dd:e0:
                    12:ee:19:df:c2:72:da:68:5e:62:2e:7d:5d:ce:02:
                    3a:15:e7:5a:80:96:28:35:4b:1d:c6:17:cc:61:a4:
                    d0:49:82:76:7b:83:cb:a3:1b:7e:d8:b2:9f:be:a3:
                    53:46:a5:b5:0b:ce:79:64:61:79:c8:e6:4d:df:6f:
                    62:a9:4b:b0:96:e9:4b:0f:7a:43:5b:d8:5e:9a:46:
                    2c:d0:74:25:53:d4:bd:c3:88:f8:e5:ec:f7:36:47:
                    aa:fc:04:21:3e:0e:c4:12:1f:43:17:e8:3b:7d:8e:
                    9b:30:21:08:71:52:de:4e:e4:90:97:06:60:c8:ea:
                    d9:fa:b3:a8:a8:c8:64:4a:d2:63:6f:30:c4:56:66:
                    ab:1d:54:0c:1e:24:26:6e:5a:21:1c:5e:f9:6d:b8:
                    cc:a0:c7:64:04:4a:82:94:c9:79:e8:fb:66:2b:68:
                    d7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4B:D3:12:ED:51:C6:29:03:9E:1A:21:18:C5:1B:FB:F5:97:F6:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f729264c-5240-3f9d-949d-33ece05c029c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:83:50:ef:a8:24:5c:33:3b:a7:08:1c:de:f1:76:58:15:65:
         82:cd:56:8c:d1:a9:fc:b2:eb:61:71:d1:b2:36:de:12:d9:6b:
         66:1c:7e:85:0c:e1:d3:08:4e:a6:2c:12:83:a1:c7:02:f0:d3:
         34:b6:c3:c7:40:95:b0:84:a3:31:23:ca:f3:d0:af:b5:d0:34:
         90:22:b7:09:d4:52:a5:65:62:7c:83:ce:68:c9:05:64:06:36:
         1d:78:2e:49:51:ff:e8:96:ca:24:41:96:46:b7:a9:df:e6:ec:
         c5:f5:e2:4e:33:75:e0:7b:16:3d:ab:6c:6c:c1:07:04:28:5b:
         14:2a:05:99:17:92:ea:23:0f:8a:1d:66:1b:72:39:3e:a9:61:
         e7:92:df:4b:ad:15:c6:6d:b9:9f:18:37:44:ff:26:78:3f:a2:
         21:f1:9a:de:e9:61:42:41:66:90:05:09:99:d2:03:0c:d1:86:
         99:3b:a3:99:d8:cf:1d:ab:72:0a:da:9a:9e:32:12:23:1c:b3:
         38:fc:fd:9d:e7:49:dc:31:31:76:e4:7b:52:1f:63:11:ed:91:
         a1:eb:5e:73:77:c3:25:3f:ae:75:d2:74:a7:17:1d:6e:65:12:
         a8:1d:47:63:04:8e:c0:35:f7:c1:b4:71:71:6c:fd:47:58:c4:
         8f:76:2c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 02:08:34 2025 by rpki-client