Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/30a653e2-3bea-3f49-a3c7-ee3c97de19f3.roa
File:                     30a653e2-3bea-3f49-a3c7-ee3c97de19f3.roa (raw, json)
Hash identifier:          Il7SKX//cYsRN93LUkm4AnufgLwpAKWvJWDMdeE7UxA=
Subject key identifier:   57:08:17:68:78:14:3C:A6:B5:0E:4C:27:30:03:90:DC:C3:39:24:D2
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993FA04E73E7CDBC8F57027C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/30a653e2-3bea-3f49-a3c7-ee3c97de19f3.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     15169
IP address blocks:        104.134.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:fa:04:e7:3e:7c:db:c8:f5:70:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=5154cd0f-0111-4997-95cf-6c8e64088aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:29:58:e4:d1:16:9b:1f:0f:b0:79:3d:8e:64:
                    03:46:92:cb:f7:91:c9:24:c1:ed:f2:7b:9d:8e:ef:
                    ae:ad:f0:31:6e:88:00:c4:ff:cd:a0:32:df:3b:5e:
                    d7:b3:5a:c6:67:0b:86:5f:65:ee:10:9e:8b:ab:2c:
                    02:29:6e:75:02:59:9a:c7:35:63:5b:41:9b:07:1f:
                    19:ae:ee:8d:f7:39:00:17:f8:19:37:67:b7:93:9b:
                    6f:b2:db:99:99:c2:f0:df:a3:40:18:02:8a:dd:7f:
                    47:82:30:19:12:6b:d0:9e:79:63:b0:05:5c:8e:28:
                    af:3b:66:bd:ed:c5:60:cf:3f:f9:85:73:20:09:91:
                    db:99:84:8a:6e:27:ef:eb:7f:0a:45:98:db:69:35:
                    92:c3:37:8f:6d:7c:6a:84:f0:66:a0:ad:d5:a5:c6:
                    c7:94:9c:0d:b0:06:57:8a:c0:f5:49:2c:77:d0:46:
                    8b:7c:56:c8:09:25:3e:49:97:fc:b4:20:99:ae:08:
                    74:54:06:ea:21:36:74:dd:cc:45:67:92:ca:b8:1f:
                    9a:94:84:d0:45:96:15:49:af:6a:97:43:29:d4:fb:
                    c7:2a:38:bb:34:6d:c2:e3:c0:86:85:e1:29:06:54:
                    7f:36:7c:d6:66:ae:46:49:ac:d2:f4:28:33:8e:73:
                    97:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:08:17:68:78:14:3C:A6:B5:0E:4C:27:30:03:90:DC:C3:39:24:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/30a653e2-3bea-3f49-a3c7-ee3c97de19f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:7b:03:72:98:13:57:1f:77:fb:5a:18:a3:47:3f:d7:1b:4a:
         cb:76:9a:cd:72:07:5f:b5:26:c3:71:a3:33:f0:78:73:84:57:
         ef:8f:a8:b8:de:bb:f8:c4:54:d5:cb:cb:f2:be:7a:ea:39:6f:
         90:3e:84:f8:81:d6:33:96:bd:66:71:5e:35:6f:83:80:b2:c9:
         b8:cf:1b:cf:98:67:a5:93:36:57:bb:2c:b1:78:16:98:e2:c7:
         d2:4e:de:72:80:52:73:c9:70:b7:c5:a8:b6:30:ab:77:95:77:
         ea:d5:61:e6:5a:6b:e8:0c:ba:bb:a4:27:5a:dd:7f:d5:ed:08:
         f4:f1:c4:3d:c5:ab:be:90:27:13:60:0a:09:04:35:e8:84:d4:
         94:c8:ab:44:fb:65:92:fd:f5:80:79:fc:97:f7:b0:ab:de:65:
         6b:a9:1d:2b:c9:c0:93:76:47:95:32:42:ef:50:6e:b0:40:47:
         c7:ea:f7:5a:3e:cf:c3:72:11:2a:ef:17:12:a6:d0:0c:e7:5d:
         db:76:a1:a6:ed:f4:e4:8d:d8:a3:53:8b:24:11:9f:ca:22:ab:
         46:99:de:76:78:33:e9:01:6c:7e:da:1a:88:85:e2:e3:d2:44:
         17:a5:0a:49:13:db:e6:e4:9e:b7:81:b4:ee:88:35:23:56:da:
         2c:da:24:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gTnPnzbyPVwJ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk
NTE1NGNkMGYtMDExMS00OTk3LTk1Y2YtNmM4ZTY0MDg4YWE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgylY5NEWmx8PsHk9jmQDRpLL95HJJMHt8nud
ju+urfAxbogAxP/NoDLfO17Xs1rGZwuGX2XuEJ6LqywCKW51AlmaxzVjW0GbBx8Z
ru6N9zkAF/gZN2e3k5tvstuZmcLw36NAGAKK3X9HgjAZEmvQnnljsAVcjiivO2a9
7cVgzz/5hXMgCZHbmYSKbifv638KRZjbaTWSwzePbXxqhPBmoK3VpcbHlJwNsAZX
isD1SSx30EaLfFbICSU+SZf8tCCZrgh0VAbqITZ03cxFZ5LKuB+alITQRZYVSa9q
l0Mp1PvHKji7NG3C48CGheEpBlR/NnzWZq5GSazS9CgzjnOXzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFcIF2h4FDymtQ5MJzADkNzDOSTSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzBhNjUzZTItM2JlYS0z
ZjQ5LWEzYzctZWUzYzk3ZGUxOWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIanMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABJ7A3KYE1cfd/taGKNHP9cbSst2ms1yB1+1JsNxozPweHOEV++PqLje
u/jEVNXLy/K+euo5b5A+hPiB1jOWvWZxXjVvg4CyybjPG8+YZ6WTNle7LLF4Fpji
x9JO3nKAUnPJcLfFqLYwq3eVd+rVYeZaa+gMurukJ1rdf9XtCPTxxD3Fq76QJxNg
CgkENeiE1JTIq0T7ZZL99YB5/Jf3sKveZWupHSvJwJN2R5UyQu9QbrBAR8fq91o+
z8NyESrvFxKm0AznXdt2oabt9OSN2KNTiyQRn8oiq0aZ3nZ4M+kBbH7aGoiF4uPS
RBelCkkT2+bknreBtO6INSNW2izaJDI=
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:34:25 2025 by rpki-client