Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/21fa0b26-2a5f-3ea1-b817-189e1cdfd25d.roa
File:                     21fa0b26-2a5f-3ea1-b817-189e1cdfd25d.roa (raw, json)
Hash identifier:          Z8SFGTOchPDjemCfzztfKAHi2vyR/xIFJxCy4ICpo+M=
Subject key identifier:   AB:28:58:3D:B3:F5:D8:ED:E0:DC:5E:A4:5F:91:E8:A5:33:76:DE:A8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350ACB691F5FF78DC7F3980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/21fa0b26-2a5f-3ea1-b817-189e1cdfd25d.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     395973
IP address blocks:        104.134.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:ac:b6:91:f5:ff:78:dc:7f:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=ba2a8dd8-bace-496a-b1f8-ebb1cbcf8013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8e:d0:fc:10:50:d5:36:fb:86:ba:97:e6:e9:
                    76:ef:17:79:41:58:af:ec:7e:77:fe:68:e5:b1:36:
                    f8:74:0c:f8:86:a5:30:b7:49:7a:a9:fb:db:e6:25:
                    38:59:db:c5:04:dd:ff:d1:ed:50:b2:c9:eb:80:91:
                    10:1d:e8:e0:8a:60:0c:37:c0:1c:2f:4d:ca:10:0a:
                    c7:22:67:6b:ec:91:f5:f9:4c:ab:dd:26:7e:b0:d2:
                    8c:f1:a9:77:3e:77:f5:56:5d:87:12:a2:83:71:7b:
                    69:be:3d:fa:62:60:00:92:81:d2:4c:c0:80:66:8c:
                    db:03:3f:9d:31:49:77:56:5d:59:2e:68:ed:79:45:
                    43:ac:19:0d:1e:04:b3:55:e8:29:59:6a:1b:1e:ed:
                    36:cc:09:0b:ae:d5:da:91:17:91:18:53:75:f7:d4:
                    99:68:03:1c:7c:4c:1f:0e:52:61:2d:04:c9:b4:60:
                    52:cb:11:f2:9b:43:f3:74:34:11:48:73:60:87:fa:
                    1d:be:ba:09:6b:7f:ec:49:e3:57:5d:35:69:d4:57:
                    71:05:08:ff:40:09:40:ee:39:46:bd:9a:f3:19:c1:
                    57:8d:c3:2e:c5:e7:47:17:b8:0b:31:e3:70:e7:eb:
                    47:6a:e3:40:c7:db:76:7a:9b:49:9c:8a:c9:90:2b:
                    43:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:28:58:3D:B3:F5:D8:ED:E0:DC:5E:A4:5F:91:E8:A5:33:76:DE:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/21fa0b26-2a5f-3ea1-b817-189e1cdfd25d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:9d:a9:e0:ab:bf:c2:2e:6f:45:d3:e8:e8:5a:91:44:a4:5e:
         fe:e4:7f:1b:8b:fe:33:5a:3d:b3:55:01:cf:23:b1:be:35:30:
         ea:12:c5:78:07:a5:d6:02:fa:cd:0c:74:02:9b:e4:c2:89:57:
         73:dc:bb:aa:09:15:42:3f:3e:ca:42:73:c9:dc:97:9f:b6:5f:
         3b:a7:d3:9c:31:69:0f:2e:8a:4d:d9:a2:ca:7d:99:80:7e:e6:
         1a:b2:c2:8a:2a:9c:eb:d0:7f:61:a7:32:4a:9c:58:e2:6b:7e:
         f8:ce:53:60:e8:05:86:c9:fd:e7:af:88:ce:1d:d3:39:37:14:
         71:3e:5a:92:55:6f:21:30:b5:4c:51:66:2b:16:a8:48:7a:12:
         a0:5d:79:28:ba:f4:08:92:d8:4f:9f:01:93:68:69:ee:83:36:
         86:4e:5a:fe:f7:ff:55:48:4b:7f:4e:61:83:21:88:bb:6e:01:
         e9:e9:02:2b:0a:c5:a3:8d:2c:ba:cc:95:81:87:82:5d:6b:aa:
         3c:85:27:89:ec:0c:6e:6b:ae:77:b7:dc:7c:3d:a9:21:50:08:
         05:45:50:e9:17:d6:9f:4d:db:ea:57:e4:66:b9:d4:88:0a:61:
         ea:a6:ff:49:ab:a9:f4:00:74:c5:27:8d:62:87:0c:78:09:88:
         66:78:a6:b6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUKy2kfX/eNx/OYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk
YmEyYThkZDgtYmFjZS00OTZhLWIxZjgtZWJiMWNiY2Y4MDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY7Q/BBQ1Tb7hrqX5ul27xd5QViv7H53/mjl
sTb4dAz4hqUwt0l6qfvb5iU4WdvFBN3/0e1QssnrgJEQHejgimAMN8AcL03KEArH
Imdr7JH1+Uyr3SZ+sNKM8al3Pnf1Vl2HEqKDcXtpvj36YmAAkoHSTMCAZozbAz+d
MUl3Vl1ZLmjteUVDrBkNHgSzVegpWWobHu02zAkLrtXakReRGFN199SZaAMcfEwf
DlJhLQTJtGBSyxHym0PzdDQRSHNgh/odvroJa3/sSeNXXTVp1FdxBQj/QAlA7jlG
vZrzGcFXjcMuxedHF7gLMeNw5+tHauNAx9t2eptJnIrJkCtDFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKsoWD2z9djt4NxepF+R6KUzdt6oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjFmYTBiMjYtMmE1Zi0z
ZWExLWI4MTctMTg5ZTFjZGZkMjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIawMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACidqeCrv8Iub0XT6OhakUSkXv7kfxuL/jNaPbNVAc8jsb41MOoSxXgH
pdYC+s0MdAKb5MKJV3Pcu6oJFUI/PspCc8ncl5+2Xzun05wxaQ8uik3Zosp9mYB+
5hqywooqnOvQf2GnMkqcWOJrfvjOU2DoBYbJ/eeviM4d0zk3FHE+WpJVbyEwtUxR
ZisWqEh6EqBdeSi69AiS2E+fAZNoae6DNoZOWv73/1VIS39OYYMhiLtuAenpAisK
xaONLLrMlYGHgl1rqjyFJ4nsDG5rrne33Hw9qSFQCAVFUOkX1p9N2+pX5Ga51IgK
Yeqm/0mrqfQAdMUnjWKHDHgJiGZ4prY=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:07:33 2025 by rpki-client