Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0695bd1b-3d32-3524-8219-4cb43b128b72.roa
File:                     0695bd1b-3d32-3524-8219-4cb43b128b72.roa (raw, json)
Hash identifier:          UITRe7cwlq80rMaplNiahbfCBPknUKTEqnmWdMRp3Ek=
Subject key identifier:   EB:0B:2D:20:4C:6A:15:35:0B:90:6C:77:35:28:3B:A7:41:DE:04:02
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350C6C402BBAD72103BCE00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0695bd1b-3d32-3524-8219-4cb43b128b72.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:c6:c4:02:bb:ad:72:10:3b:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=2cf60fdc-bc4c-49a4-b020-c5eb8b2a150e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6c:77:87:36:c1:6f:a1:cd:ab:7a:b3:aa:69:
                    b0:15:d3:c0:9a:5d:59:fe:20:40:34:32:76:0f:b3:
                    6e:08:24:48:58:32:e5:46:54:5a:73:56:3d:33:fd:
                    9c:a1:a1:92:ba:a2:e4:d6:8a:40:93:5c:fe:1b:d0:
                    a2:e9:ab:76:60:52:df:2e:06:27:ac:08:41:30:70:
                    ef:f6:b0:2b:e9:08:3d:1d:d1:a2:37:72:aa:cc:2a:
                    93:aa:e7:aa:06:1d:0b:90:4b:7c:81:69:a0:04:eb:
                    5b:0b:e2:30:8f:a6:db:44:3b:4d:84:70:47:4d:ba:
                    d0:63:49:79:40:61:d5:4d:6f:ff:1b:8d:3e:7d:3a:
                    89:8e:eb:c5:8a:b3:ca:6a:08:9e:bd:3c:2c:92:11:
                    af:5a:28:42:76:d5:80:45:56:f5:37:1e:3d:92:17:
                    e8:b2:79:44:43:49:07:2d:38:2c:71:19:31:bd:90:
                    17:72:f5:03:24:d7:03:f6:be:8a:4c:3e:cd:d9:3d:
                    a8:62:e5:03:9a:62:a8:a2:20:60:4b:e1:21:bb:5e:
                    52:05:0d:2f:20:a8:2c:96:bf:87:89:4c:1f:56:c7:
                    29:8f:16:fa:9b:00:ba:83:e2:c6:80:c8:4d:cd:44:
                    79:fb:e6:8e:19:9e:e9:2d:f4:00:52:3e:f5:4d:06:
                    68:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0B:2D:20:4C:6A:15:35:0B:90:6C:77:35:28:3B:A7:41:DE:04:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0695bd1b-3d32-3524-8219-4cb43b128b72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:3e:80:d3:7b:af:eb:94:29:00:54:41:a0:66:0b:86:31:ce:
         b9:b5:08:aa:bf:29:7a:cf:eb:2f:a0:7a:1c:b2:7f:0f:2a:cb:
         c7:94:32:82:ef:46:d7:33:d0:30:c1:2c:08:d0:1e:f8:c6:ed:
         a5:e4:67:3a:2b:ba:9d:6f:bc:cd:66:86:3b:8f:87:f6:b5:97:
         78:c8:4a:d8:26:d9:a7:be:84:58:7e:a2:82:1a:80:09:1f:ac:
         f5:15:b1:3b:bb:46:b1:ba:ee:88:a0:ca:f6:45:9e:1c:fa:ea:
         fd:c7:dd:93:23:48:5a:30:22:3a:cb:20:ab:66:58:21:76:76:
         c3:fd:40:e1:77:1a:32:8e:cd:dd:c8:ff:88:30:e0:97:09:9e:
         8b:d4:c3:4a:81:d3:e5:9d:da:84:82:08:c2:41:24:7f:84:d4:
         47:5e:51:3d:29:fc:1f:b6:7d:11:01:56:f7:70:5f:1b:6e:ea:
         1b:6a:3a:86:f0:60:b4:dd:91:66:8c:0d:ee:f4:d9:e4:c6:6b:
         ec:38:9b:0d:f1:19:28:0d:06:29:b9:14:44:26:17:d8:45:85:
         66:1b:82:6d:21:ac:ce:b8:b0:17:ba:72:23:bf:67:a8:33:d3:
         d1:84:c3:f4:d5:84:c9:56:f6:92:4f:fb:76:a1:b5:3e:46:f3:
         a2:4d:ca:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUMbEArutchA7zgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk
MmNmNjBmZGMtYmM0Yy00OWE0LWIwMjAtYzVlYjhiMmExNTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmx3hzbBb6HNq3qzqmmwFdPAml1Z/iBANDJ2
D7NuCCRIWDLlRlRac1Y9M/2coaGSuqLk1opAk1z+G9Ci6at2YFLfLgYnrAhBMHDv
9rAr6Qg9HdGiN3KqzCqTqueqBh0LkEt8gWmgBOtbC+Iwj6bbRDtNhHBHTbrQY0l5
QGHVTW//G40+fTqJjuvFirPKagievTwskhGvWihCdtWARVb1Nx49khfosnlEQ0kH
LTgscRkxvZAXcvUDJNcD9r6KTD7N2T2oYuUDmmKooiBgS+Ehu15SBQ0vIKgslr+H
iUwfVscpjxb6mwC6g+LGgMhNzUR5++aOGZ7pLfQAUj71TQZoFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOsLLSBMahU1C5BsdzUoO6dB3gQCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDY5NWJkMWItM2QzMi0z
NTI0LTgyMTktNGNiNDNiMTI4YjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHw+gNN7r+uUKQBUQaBmC4Yxzrm1CKq/KXrP6y+gehyyfw8qy8eUMoLv
Rtcz0DDBLAjQHvjG7aXkZzorup1vvM1mhjuPh/a1l3jIStgm2ae+hFh+ooIagAkf
rPUVsTu7RrG67oigyvZFnhz66v3H3ZMjSFowIjrLIKtmWCF2dsP9QOF3GjKOzd3I
/4gw4JcJnovUw0qB0+Wd2oSCCMJBJH+E1EdeUT0p/B+2fREBVvdwXxtu6htqOobw
YLTdkWaMDe702eTGa+w4mw3xGSgNBim5FEQmF9hFhWYbgm0hrM64sBe6ciO/Z6gz
09GEw/TVhMlW9pJP+3ahtT5G86JNytk=
-----END CERTIFICATE-----
Generated at Tue Aug 5 23:05:01 2025 by rpki-client