Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1eed248c-0a05-3b75-b22d-b1d2bd264b71.roa
File:                     1eed248c-0a05-3b75-b22d-b1d2bd264b71.roa (raw, json)
Hash identifier:          GkxuA9GQc4kCjFn9jHkTMIs01eRngdb7hQzRyTswpdo=
Subject key identifier:   D5:9F:4D:E0:F4:66:A1:3C:B9:D6:E3:23:7E:08:D7:F9:E0:01:60:A2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9F9BCB866F4229366E670
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1eed248c-0a05-3b75-b22d-b1d2bd264b71.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     15169
IP address blocks:        104.134.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:f9:bc:b8:66:f4:22:93:66:e6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=e1fecd14-07b9-43c2-8cf1-a2f930d1d8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:67:ce:c6:b6:d9:34:92:09:db:fa:ab:7b:71:
                    f0:98:d6:69:36:40:d3:ea:3c:82:a9:0c:59:ea:2d:
                    31:9c:eb:93:dc:4a:38:38:20:61:61:16:44:0b:41:
                    47:8f:52:ca:05:9e:d4:23:f2:8f:d9:46:be:0c:cc:
                    65:fb:65:c9:55:60:1d:81:be:f6:84:ad:26:90:5a:
                    3a:b7:d5:da:41:c8:99:34:9d:bb:32:e8:f2:ba:95:
                    57:49:cf:68:25:df:c0:80:96:00:d3:e8:88:1d:6a:
                    ca:93:4f:d3:e5:07:8e:4e:1c:7f:9f:bb:5f:33:53:
                    22:26:b1:ab:dd:e0:f1:f0:45:dd:ed:f5:ca:33:4c:
                    62:ff:e0:33:e1:23:42:61:2b:00:67:9b:1d:54:8d:
                    83:68:a8:d9:ad:d9:fa:a6:0d:d9:a2:ce:87:db:7b:
                    37:fe:0f:02:2f:21:45:d5:e6:bc:49:59:4d:3e:5d:
                    e5:60:82:22:30:c9:16:39:ac:0e:2c:96:c6:3c:03:
                    98:03:f5:24:95:b6:22:95:ea:32:17:2c:c8:7f:fc:
                    c4:b7:12:f2:0f:2b:43:c0:ee:dd:62:1c:92:8f:28:
                    eb:42:ec:90:ca:ab:bd:c9:97:3e:f6:a5:2c:d8:e2:
                    67:aa:12:7b:94:86:10:36:f9:72:8f:3e:d0:08:02:
                    ae:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9F:4D:E0:F4:66:A1:3C:B9:D6:E3:23:7E:08:D7:F9:E0:01:60:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/1eed248c-0a05-3b75-b22d-b1d2bd264b71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:fa:d8:e4:be:6b:8a:d6:0b:53:12:91:ee:33:ac:07:a9:97:
         52:a9:39:ac:4f:56:53:cf:86:36:1c:16:1e:17:55:13:17:f4:
         31:70:05:ad:6a:2b:86:87:b0:e0:9b:e3:42:5f:08:c8:6c:09:
         db:8a:52:43:68:e8:ec:2a:e0:98:82:70:e7:a0:85:1d:6a:22:
         10:3a:90:f9:21:d1:01:07:29:ea:1b:f2:e7:91:85:3d:c5:e3:
         c5:a6:c4:29:15:4a:e1:f2:41:34:8d:92:47:ac:c2:b0:a5:fa:
         2f:b8:cc:55:ca:2f:28:9d:5d:f0:8f:c1:03:ae:41:b0:b6:99:
         65:e9:03:b3:4f:cf:c4:8f:1e:cb:5b:cb:45:a9:11:4e:65:18:
         60:fb:f1:7e:05:a0:bc:95:61:ae:95:4d:f2:69:65:6d:a8:ca:
         55:25:af:06:f6:5c:16:bd:47:41:89:8e:d5:73:c8:74:60:47:
         0e:fd:eb:fb:ce:26:85:9a:95:fc:ae:64:60:c2:77:c7:eb:b4:
         90:37:1e:d7:57:3d:a7:86:20:1d:4d:0e:71:d5:4a:c9:ec:fc:
         ea:c6:5d:4c:a4:9d:50:eb:21:75:23:b1:3b:55:a5:17:8e:b7:
         3a:ac:d8:83:14:0e:d7:5c:f4:d8:13:69:da:2e:01:ba:7d:6b:
         26:fb:ca:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+fm8uGb0IpNm5nAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk
ZTFmZWNkMTQtMDdiOS00M2MyLThjZjEtYTJmOTMwZDFkOGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2fOxrbZNJIJ2/qre3HwmNZpNkDT6jyCqQxZ
6i0xnOuT3Eo4OCBhYRZEC0FHj1LKBZ7UI/KP2Ua+DMxl+2XJVWAdgb72hK0mkFo6
t9XaQciZNJ27MujyupVXSc9oJd/AgJYA0+iIHWrKk0/T5QeOThx/n7tfM1MiJrGr
3eDx8EXd7fXKM0xi/+Az4SNCYSsAZ5sdVI2DaKjZrdn6pg3Zos6H23s3/g8CLyFF
1ea8SVlNPl3lYIIiMMkWOawOLJbGPAOYA/UklbYileoyFyzIf/zEtxLyDytDwO7d
YhySjyjrQuyQyqu9yZc+9qUs2OJnqhJ7lIYQNvlyjz7QCAKuBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWfTeD0ZqE8udbjI34I1/ngAWCiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMWVlZDI0OGMtMGEwNS0z
Yjc1LWIyMmQtYjFkMmJkMjY0YjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIaoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAz62OS+a4rWC1MSke4zrAepl1KpOaxPVlPPhjYcFh4XVRMX9DFwBa1q
K4aHsOCb40JfCMhsCduKUkNo6Owq4JiCcOeghR1qIhA6kPkh0QEHKeob8ueRhT3F
48WmxCkVSuHyQTSNkkeswrCl+i+4zFXKLyidXfCPwQOuQbC2mWXpA7NPz8SPHstb
y0WpEU5lGGD78X4FoLyVYa6VTfJpZW2oylUlrwb2XBa9R0GJjtVzyHRgRw796/vO
JoWalfyuZGDCd8frtJA3HtdXPaeGIB1NDnHVSsns/OrGXUyknVDrIXUjsTtVpReO
tzqs2IMUDtdc9NgTadouAbp9ayb7yvI=
-----END CERTIFICATE-----
Generated at Sun Apr 27 03:13:38 2025 by rpki-client