Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a0f0c7e-cca3-3f60-8bd9-4ee7f8ddb9c8.roa
File:                     2a0f0c7e-cca3-3f60-8bd9-4ee7f8ddb9c8.roa (raw, json)
Hash identifier:          2HtFVm2jVByRDwCHIVlOeyXdLVqxs9jajhWxb3CbC4s=
Subject key identifier:   BF:22:22:B0:ED:FF:E9:D8:40:B3:38:61:57:31:68:7D:48:CD:B9:D7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F437B7DB5197579D99600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a0f0c7e-cca3-3f60-8bd9-4ee7f8ddb9c8.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:43:7b:7d:b5:19:75:79:d9:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=6fd45236-f8b2-4518-8b3d-4418351ee79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b6:af:5f:f1:4a:aa:b2:f3:8d:8c:e1:f8:7e:
                    17:d8:3f:da:4d:59:92:8a:6c:5b:e9:67:cf:19:e7:
                    4e:8e:47:ba:e4:83:35:c0:9f:48:62:02:68:36:78:
                    23:3a:0d:ee:39:52:5b:26:bf:a3:9f:36:5f:d2:c2:
                    92:3d:1d:d1:a1:59:a3:c5:71:ed:bf:7f:fd:63:19:
                    5d:be:b6:9c:45:1b:96:f1:72:5c:30:96:ea:fa:51:
                    6c:f5:ca:7e:f3:ab:eb:be:93:bd:3f:54:81:8d:59:
                    c9:07:a4:cc:9f:5a:89:2d:5b:5e:cb:fb:d9:a3:86:
                    22:eb:57:5c:b5:a4:7e:f6:c8:cb:0a:98:b1:7d:10:
                    d2:d2:bf:cc:92:d6:3b:39:b7:13:a2:51:98:46:eb:
                    ec:20:4b:d0:f8:b8:a4:55:b3:68:60:42:08:fb:bf:
                    d9:f9:c1:23:1b:f3:55:72:a6:ee:6d:9b:06:9c:39:
                    bd:11:ec:27:ac:aa:24:04:16:6a:8f:cb:30:e7:71:
                    63:57:e5:70:c4:a8:c5:93:f0:b2:23:85:c1:5b:f9:
                    e6:73:f3:f8:49:77:6a:11:d6:63:3a:b6:db:8c:72:
                    19:02:3d:76:cb:07:2f:e1:14:b2:4b:41:8d:dd:46:
                    7f:fe:42:7e:2c:78:84:64:c7:14:79:bf:85:9e:77:
                    90:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:22:22:B0:ED:FF:E9:D8:40:B3:38:61:57:31:68:7D:48:CD:B9:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/2a0f0c7e-cca3-3f60-8bd9-4ee7f8ddb9c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:9b:b5:58:0d:c4:39:e7:76:95:24:c3:fc:8a:7b:c5:5f:cb:
         97:7c:24:2f:26:fe:92:0f:79:79:a5:eb:2b:a9:41:f5:f7:9e:
         52:05:f8:bb:ba:21:c4:82:42:0d:f2:bc:ca:c0:36:b4:4c:e1:
         8d:94:2e:a3:a5:35:3e:22:cd:d9:81:60:87:6a:51:d9:6a:3c:
         75:1f:c7:21:e1:b0:84:62:b4:93:2c:74:97:bf:f5:5e:be:f0:
         de:59:eb:dd:e3:26:74:65:65:84:2e:17:ca:5d:36:ff:a2:23:
         36:6d:8e:1c:71:43:c1:80:12:10:d0:1e:23:29:00:22:c3:b9:
         8d:04:fb:d0:33:85:c5:49:8f:9e:7d:ef:f2:2c:8c:95:64:2e:
         a6:ac:de:88:fa:66:a9:67:1a:f4:14:10:b1:99:a5:76:31:67:
         ad:a5:fd:9b:ea:ce:ac:30:d4:1d:03:db:f0:c7:78:2a:c1:3c:
         92:ac:34:f8:fc:14:e4:cb:2b:43:6c:d6:24:ed:49:8d:27:64:
         e9:be:84:f2:eb:1d:39:f2:2a:5f:2e:18:f3:98:16:5d:22:73:
         5c:82:73:76:59:b5:b3:5c:4d:d5:7a:21:a9:e3:8f:f1:35:fd:
         7b:bc:be:09:5e:7a:d9:9b:0f:3c:87:63:a2:ed:a5:8f:a8:47:
         95:f7:b3:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL0N7fbUZdXnZlgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk
NmZkNDUyMzYtZjhiMi00NTE4LThiM2QtNDQxODM1MWVlNzljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLavX/FKqrLzjYzh+H4X2D/aTVmSimxb6WfP
GedOjke65IM1wJ9IYgJoNngjOg3uOVJbJr+jnzZf0sKSPR3RoVmjxXHtv3/9Yxld
vracRRuW8XJcMJbq+lFs9cp+86vrvpO9P1SBjVnJB6TMn1qJLVtey/vZo4Yi61dc
taR+9sjLCpixfRDS0r/MktY7ObcTolGYRuvsIEvQ+LikVbNoYEII+7/Z+cEjG/NV
cqbubZsGnDm9EewnrKokBBZqj8sw53FjV+VwxKjFk/CyI4XBW/nmc/P4SXdqEdZj
OrbbjHIZAj12ywcv4RSyS0GN3UZ//kJ+LHiEZMcUeb+FnneQeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL8iIrDt/+nYQLM4YVcxaH1IzbnXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMmEwZjBjN2UtY2NhMy0z
ZjYwLThiZDktNGVlN2Y4ZGRiOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB6btVgNxDnndpUkw/yKe8Vfy5d8JC8m/pIPeXml6yupQfX3nlIF+Lu6
IcSCQg3yvMrANrRM4Y2ULqOlNT4izdmBYIdqUdlqPHUfxyHhsIRitJMsdJe/9V6+
8N5Z693jJnRlZYQuF8pdNv+iIzZtjhxxQ8GAEhDQHiMpACLDuY0E+9AzhcVJj559
7/IsjJVkLqas3oj6ZqlnGvQUELGZpXYxZ62l/Zvqzqww1B0D2/DHeCrBPJKsNPj8
FOTLK0Ns1iTtSY0nZOm+hPLrHTnyKl8uGPOYFl0ic1yCc3ZZtbNcTdV6Ianjj/E1
/Xu8vgleetmbDzyHY6LtpY+oR5X3s0s=
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:15:27 2025 by rpki-client