Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ffb354f-e928-3147-97bd-72ab560c7723.roa
File:                     0ffb354f-e928-3147-97bd-72ab560c7723.roa (raw, json)
Hash identifier:          V85evvLehE273N9BojxAcaRdVQLCn1vUAOfQeCVa3x0=
Subject key identifier:   9B:97:D1:2B:5D:25:A3:B4:30:5E:D5:93:F4:6C:CB:3C:F4:51:73:6E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7086199155BCD9DC3836E280
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ffb354f-e928-3147-97bd-72ab560c7723.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     41264
IP address blocks:        104.132.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:19:91:55:bc:d9:dc:38:36:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=2a217597-f7dc-4f1e-a568-e40d7eac57d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a4:b6:ad:d1:c0:2b:53:35:0f:a1:eb:7b:6b:
                    e5:59:b5:e2:1d:c7:37:6a:cd:70:e0:90:f5:1c:d3:
                    07:04:ca:7d:34:a6:47:e9:b7:11:26:73:27:95:34:
                    47:1e:d8:9f:a6:e0:74:a4:d6:8f:a3:dd:c7:87:ff:
                    97:b0:9c:02:d7:2e:da:f9:0e:aa:3f:0d:2c:61:ef:
                    ea:98:1e:95:7a:a7:d0:d4:ff:c0:d0:51:b5:82:4e:
                    08:16:b9:98:25:01:92:ba:f5:7e:95:b4:d4:94:70:
                    50:5c:e6:a2:a1:0a:7e:86:eb:7a:a7:4b:20:a1:54:
                    21:fa:59:07:0d:c5:b5:fb:cb:60:50:b1:42:6b:e8:
                    f7:e2:32:90:b8:6d:22:c9:e8:05:a4:74:d9:ff:dc:
                    93:47:94:95:11:1b:6b:fd:97:21:e8:8f:cf:6a:ef:
                    5a:74:05:f8:ef:f5:a4:3f:40:9a:23:4d:60:19:d3:
                    87:19:19:ad:a7:29:7a:5e:a2:fa:80:a7:bc:6e:ec:
                    43:ad:72:d6:c2:18:4f:24:48:f2:28:02:13:38:07:
                    85:a5:5d:14:bf:16:82:9d:47:69:5d:1c:95:87:34:
                    7b:49:93:40:b6:e6:41:14:20:70:08:63:c1:8e:08:
                    71:de:2d:f5:3d:d4:f2:b8:0a:d6:0b:fb:32:9b:9d:
                    df:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:97:D1:2B:5D:25:A3:B4:30:5E:D5:93:F4:6C:CB:3C:F4:51:73:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/0ffb354f-e928-3147-97bd-72ab560c7723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:38:15:df:d8:de:74:c7:ad:9a:56:a9:f7:3d:8f:a0:d5:ae:
         e9:28:c0:61:d2:c5:28:28:1c:5d:b6:22:21:5e:77:86:36:2f:
         34:3f:70:46:bd:ad:75:d3:d5:67:0f:b4:d2:45:ea:fc:fe:00:
         d0:1e:40:bc:6a:89:b6:0a:b0:a2:fc:ed:45:f6:cb:e6:c1:77:
         e4:0d:35:45:24:4c:ba:ed:67:c9:16:b1:cb:87:03:dd:f0:85:
         dc:ec:33:05:42:03:82:ae:c3:77:49:ce:e5:62:cf:21:fe:af:
         4b:86:08:4e:88:b1:7d:e1:37:e0:c2:47:a0:7d:99:73:23:17:
         2d:97:20:0f:b6:a9:ca:99:bb:e0:26:85:04:b9:aa:4b:1e:a7:
         18:55:67:30:16:20:58:0b:0f:2c:e9:62:33:50:a8:aa:1a:9e:
         6a:4b:88:41:42:1a:8d:b2:a0:62:71:7d:8d:09:26:f2:8b:37:
         23:17:4a:4c:e0:07:53:b7:78:a2:3a:ea:86:32:4f:55:04:5a:
         ed:16:d7:86:45:6a:7d:cf:99:12:21:49:90:68:b8:5a:4c:c6:
         ef:32:3c:76:d2:53:bb:8c:c3:56:f4:14:c4:9b:c3:84:ea:e3:
         84:6d:db:86:90:46:60:78:ea:22:d7:a6:3a:04:7b:72:1c:41:
         d8:9c:67:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhhmRVbzZ3Dg24oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk
MmEyMTc1OTctZjdkYy00ZjFlLWE1NjgtZTQwZDdlYWM1N2Q1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aS2rdHAK1M1D6Hre2vlWbXiHcc3as1w4JD1
HNMHBMp9NKZH6bcRJnMnlTRHHtifpuB0pNaPo93Hh/+XsJwC1y7a+Q6qPw0sYe/q
mB6VeqfQ1P/A0FG1gk4IFrmYJQGSuvV+lbTUlHBQXOaioQp+hut6p0sgoVQh+lkH
DcW1+8tgULFCa+j34jKQuG0iyegFpHTZ/9yTR5SVERtr/Zch6I/Pau9adAX47/Wk
P0CaI01gGdOHGRmtpyl6XqL6gKe8buxDrXLWwhhPJEjyKAITOAeFpV0UvxaCnUdp
XRyVhzR7SZNAtuZBFCBwCGPBjghx3i31PdTyuArWC/sym53fkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJuX0StdJaO0MF7Vk/Rsyzz0UXNuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMGZmYjM1NGYtZTkyOC0z
MTQ3LTk3YmQtNzJhYjU2MGM3NzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQ5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALM4Fd/Y3nTHrZpWqfc9j6DVrukowGHSxSgoHF22IiFed4Y2LzQ/cEa9
rXXT1WcPtNJF6vz+ANAeQLxqibYKsKL87UX2y+bBd+QNNUUkTLrtZ8kWscuHA93w
hdzsMwVCA4Kuw3dJzuVizyH+r0uGCE6IsX3hN+DCR6B9mXMjFy2XIA+2qcqZu+Am
hQS5qksepxhVZzAWIFgLDyzpYjNQqKoanmpLiEFCGo2yoGJxfY0JJvKLNyMXSkzg
B1O3eKI66oYyT1UEWu0W14ZFan3PmRIhSZBouFpMxu8yPHbSU7uMw1b0FMSbw4Tq
44Rt24aQRmB46iLXpjoEe3IcQdicZz8=
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:19:06 2025 by rpki-client