Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10ef1877-c0c5-3e4e-b34b-dc7258983421.roa
File:                     10ef1877-c0c5-3e4e-b34b-dc7258983421.roa (raw, json)
Hash identifier:          uiehAZuZbY4jQ0fIRU0RPeEMsCNzElVtFmcbJOfCT9Y=
Subject key identifier:   D9:98:5B:90:DC:62:DE:D9:2F:CE:6E:18:32:6C:16:4B:E5:8B:3F:26
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F4832BA1A8DE973061200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10ef1877-c0c5-3e4e-b34b-dc7258983421.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:48:32:ba:1a:8d:e9:73:06:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=0bed7187-80d2-47e4-a38a-4fa583b341ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:32:7f:d7:f2:82:ac:42:c9:9c:7a:ae:6d:3b:
                    10:18:6e:f0:9d:3e:62:81:50:ec:99:f4:92:ca:f3:
                    d9:f6:2f:59:e9:90:05:10:69:29:d8:e3:b6:78:5e:
                    11:66:7a:e1:55:5d:09:02:c0:88:3d:42:13:bb:60:
                    51:02:f6:fe:d7:04:29:af:32:9d:67:c2:ba:a2:51:
                    e9:9d:ed:f1:56:d7:f6:0f:07:c9:f0:0c:5f:8e:b5:
                    7a:cd:4a:8a:d3:94:88:5b:63:3f:6d:d9:d0:e8:21:
                    e6:3e:33:87:0f:fa:e9:d4:39:b0:ea:d8:74:60:bb:
                    01:4b:56:38:84:cb:20:25:7f:43:3e:49:8f:83:2b:
                    8e:f0:0e:fe:ae:cf:63:75:55:08:ad:04:04:53:e4:
                    94:90:82:2e:24:89:6e:2c:c4:ce:09:bd:fa:8e:a4:
                    86:1a:a6:ab:69:6d:9d:75:ad:54:0e:dc:ae:2a:3d:
                    31:aa:3b:25:ac:21:b3:79:b8:bb:79:57:e8:43:6d:
                    cf:c5:2d:00:c0:4a:20:26:2b:50:33:4f:7b:10:9c:
                    aa:5a:33:cb:5e:7e:ed:b1:06:04:dc:14:3e:29:6a:
                    fa:2e:06:0a:ff:48:cd:b3:9d:63:ce:72:e4:b5:3e:
                    ee:f0:94:3b:09:d3:66:29:9d:57:2f:33:f3:21:3d:
                    4f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:98:5B:90:DC:62:DE:D9:2F:CE:6E:18:32:6C:16:4B:E5:8B:3F:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/10ef1877-c0c5-3e4e-b34b-dc7258983421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:36:30:e6:db:0f:ab:53:53:03:d1:aa:e7:e7:c6:0e:0f:60:
         5b:e0:c4:13:d3:07:05:06:dd:b9:37:84:4e:cf:bd:34:ee:b5:
         e4:4b:d9:ed:78:7c:ca:8d:e9:13:a3:66:45:95:10:1d:ff:3e:
         18:3d:e0:a0:04:2b:70:19:e1:ee:63:e7:b9:22:13:aa:c0:3e:
         ff:3e:58:f5:90:77:18:72:83:6c:52:bf:92:73:ae:e3:6f:86:
         59:b3:a6:6d:a4:31:e7:cb:25:b0:91:df:32:48:f7:73:90:a4:
         a1:e4:df:25:e8:19:4d:93:dc:1e:a2:22:b4:5f:2d:66:fd:84:
         f5:c2:24:5a:40:07:e6:c5:30:6d:bb:2b:f0:6d:45:be:4e:23:
         35:ca:41:6a:21:1e:ab:5c:0c:cf:5b:61:0c:a8:ab:fe:3d:5c:
         95:ec:cd:3d:16:7c:cf:97:33:b7:65:b3:bb:57:fe:96:22:fa:
         70:a7:ac:8d:dc:1a:91:8d:87:66:47:8a:a5:7a:39:cc:b2:a8:
         bc:b1:87:9d:e3:3b:b8:7b:37:7a:55:b2:b3:fd:7c:7d:c5:2e:
         eb:cd:85:7a:53:2d:a8:b4:a8:41:e1:21:3e:79:43:fb:2c:b1:
         b5:45:fc:1e:e4:57:77:54:25:3c:8d:b3:64:94:9e:c9:cf:ac:
         55:e3:ea:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL0gyuhqN6XMGEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk
MGJlZDcxODctODBkMi00N2U0LWEzOGEtNGZhNTgzYjM0MWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDJ/1/KCrELJnHqubTsQGG7wnT5igVDsmfSS
yvPZ9i9Z6ZAFEGkp2OO2eF4RZnrhVV0JAsCIPUITu2BRAvb+1wQprzKdZ8K6olHp
ne3xVtf2DwfJ8AxfjrV6zUqK05SIW2M/bdnQ6CHmPjOHD/rp1Dmw6th0YLsBS1Y4
hMsgJX9DPkmPgyuO8A7+rs9jdVUIrQQEU+SUkIIuJIluLMTOCb36jqSGGqaraW2d
da1UDtyuKj0xqjslrCGzebi7eVfoQ23PxS0AwEogJitQM097EJyqWjPLXn7tsQYE
3BQ+KWr6LgYK/0jNs51jznLktT7u8JQ7CdNmKZ1XLzPzIT1PJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNmYW5DcYt7ZL85uGDJsFkvliz8mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTBlZjE4NzctYzBjNS0z
ZTRlLWIzNGItZGM3MjU4OTgzNDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGU2MObbD6tTUwPRqufnxg4PYFvgxBPTBwUG3bk3hE7PvTTuteRL2e14
fMqN6ROjZkWVEB3/Phg94KAEK3AZ4e5j57kiE6rAPv8+WPWQdxhyg2xSv5JzruNv
hlmzpm2kMefLJbCR3zJI93OQpKHk3yXoGU2T3B6iIrRfLWb9hPXCJFpAB+bFMG27
K/BtRb5OIzXKQWohHqtcDM9bYQyoq/49XJXszT0WfM+XM7dls7tX/pYi+nCnrI3c
GpGNh2ZHiqV6OcyyqLyxh53jO7h7N3pVsrP9fH3FLuvNhXpTLai0qEHhIT55Q/ss
sbVF/B7kV3dUJTyNs2SUnsnPrFXj6mE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:41:27 2025 by rpki-client