Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/136e1e58-e4bb-35c6-9f0f-478209b54a2c.roa
File:                     136e1e58-e4bb-35c6-9f0f-478209b54a2c.roa (raw, json)
Hash identifier:          9OtpbAtV9lLOgGaLetMsfDotB2+XyWTce41NzWDDd40=
Subject key identifier:   03:BC:E3:81:9E:83:16:C0:93:37:AF:EE:E8:FB:1E:EE:E8:EE:0F:A2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F44C3FA68A31167005BC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/136e1e58-e4bb-35c6-9f0f-478209b54a2c.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:44:c3:fa:68:a3:11:67:00:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=db0e39b7-7e32-4920-9e5f-9a84beb37ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e2:66:5a:a6:12:5e:40:fc:58:70:eb:28:12:
                    ca:39:09:db:9f:34:30:57:8e:7d:96:0e:d2:1a:18:
                    90:ac:de:69:20:b6:5b:d0:70:da:c9:31:e5:b6:c2:
                    c3:c2:ea:d9:e3:84:dd:48:09:1b:c8:0e:57:cb:01:
                    c8:dc:2a:5c:fd:46:c5:ce:7b:75:48:d2:9a:fc:ee:
                    27:0a:25:42:ae:22:60:21:49:91:bc:bf:19:4f:e2:
                    0e:9b:87:93:b9:6c:ec:cd:9b:4d:46:e3:52:ab:ea:
                    d1:63:9a:7c:bd:86:84:07:fb:23:db:ba:40:e6:ef:
                    9c:e4:4d:55:6c:35:cf:34:04:e3:4d:04:93:c5:19:
                    ea:79:06:76:1f:9c:ba:95:9e:e7:3a:63:c5:d2:6f:
                    3b:1b:ed:1c:6d:37:4d:83:4c:4c:39:52:99:e7:aa:
                    c9:ac:09:6e:ee:1a:f6:d5:a7:63:36:8d:56:e3:ce:
                    74:5d:f5:5f:1c:10:b6:e0:23:73:c1:6c:c1:43:c6:
                    6d:c2:da:c4:be:8a:cf:56:b5:df:b4:44:e3:37:29:
                    bf:e3:0c:93:98:63:e9:0b:31:a7:00:98:4b:12:5a:
                    09:12:45:52:05:ff:da:92:85:0e:9c:8f:ee:ca:2c:
                    db:72:18:23:8b:12:b2:58:69:38:0f:a5:ae:84:3f:
                    9e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BC:E3:81:9E:83:16:C0:93:37:AF:EE:E8:FB:1E:EE:E8:EE:0F:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/136e1e58-e4bb-35c6-9f0f-478209b54a2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:3d:7d:6b:aa:aa:31:b1:6d:cd:ef:30:2d:fd:9a:70:fa:e0:
         d1:d8:47:bd:57:75:0b:a6:4c:f3:54:1a:27:03:c3:3c:5a:99:
         9c:6e:c4:f4:9f:a3:9d:ca:d1:87:4b:21:93:69:59:52:d6:de:
         fb:0d:e7:cc:8e:de:9e:fd:69:3a:7f:8b:83:eb:0a:a9:52:da:
         9f:c3:fe:c9:6e:07:65:80:9f:89:2d:32:e2:94:d5:0a:65:b6:
         0a:42:73:e4:35:eb:c2:93:cb:84:c6:23:89:66:f2:2b:ee:ca:
         48:d9:89:d6:af:72:1b:75:e3:df:a9:8b:1e:52:1d:39:25:d6:
         ea:5c:be:b4:50:7f:ea:16:16:e3:96:2b:80:39:55:c0:0f:fd:
         cb:56:8d:34:33:61:de:8b:9f:94:bc:f6:01:df:61:51:59:51:
         e3:c3:51:28:f5:dd:24:2d:53:e5:6d:1c:8c:c3:9c:2d:de:d8:
         d7:e3:8a:bd:9a:98:5a:55:39:18:df:9a:af:a8:b7:8c:5d:46:
         8d:7b:86:58:38:1e:52:fd:15:51:5b:8f:1b:e2:58:6c:ba:6a:
         c0:47:79:c8:17:94:01:1b:d5:cc:f8:c9:48:c4:e4:42:c7:cc:
         cf:de:3a:c5:e2:93:42:f4:85:e0:be:d3:03:b6:8a:e7:72:a5:
         93:1b:1a:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL0TD+mijEWcAW8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk
ZGIwZTM5YjctN2UzMi00OTIwLTllNWYtOWE4NGJlYjM3YWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeJmWqYSXkD8WHDrKBLKOQnbnzQwV459lg7S
GhiQrN5pILZb0HDayTHltsLDwurZ44TdSAkbyA5XywHI3Cpc/UbFznt1SNKa/O4n
CiVCriJgIUmRvL8ZT+IOm4eTuWzszZtNRuNSq+rRY5p8vYaEB/sj27pA5u+c5E1V
bDXPNATjTQSTxRnqeQZ2H5y6lZ7nOmPF0m87G+0cbTdNg0xMOVKZ56rJrAlu7hr2
1adjNo1W4850XfVfHBC24CNzwWzBQ8ZtwtrEvorPVrXftETjNym/4wyTmGPpCzGn
AJhLEloJEkVSBf/akoUOnI/uyizbchgjixKyWGk4D6WuhD+eDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAO844GegxbAkzev7uj7Hu7o7g+iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMTM2ZTFlNTgtZTRiYi0z
NWM2LTlmMGYtNDc4MjA5YjU0YTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIT6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH09fWuqqjGxbc3vMC39mnD64NHYR71XdQumTPNUGicDwzxamZxuxPSf
o53K0YdLIZNpWVLW3vsN58yO3p79aTp/i4PrCqlS2p/D/sluB2WAn4ktMuKU1Qpl
tgpCc+Q168KTy4TGI4lm8ivuykjZidavcht149+pix5SHTkl1upcvrRQf+oWFuOW
K4A5VcAP/ctWjTQzYd6Ln5S89gHfYVFZUePDUSj13SQtU+VtHIzDnC3e2Nfjir2a
mFpVORjfmq+ot4xdRo17hlg4HlL9FVFbjxviWGy6asBHecgXlAEb1cz4yUjE5ELH
zM/eOsXik0L0heC+0wO2iudypZMbGu0=
-----END CERTIFICATE-----
Generated at Sun Apr 27 18:29:17 2025 by rpki-client