Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40fc80eb-657f-34a3-8e76-07ca3891476f.roa
File:                     40fc80eb-657f-34a3-8e76-07ca3891476f.roa (raw, json)
Hash identifier:          WLzAqikUF+uMxpjXV/P1az4P9Mtqr7ONNgKtBKEilAI=
Subject key identifier:   F2:CA:31:46:AA:7C:C2:DF:80:71:B2:E2:CF:59:D9:75:8F:CD:47:F7
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F456C916C90D6DAD65400
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40fc80eb-657f-34a3-8e76-07ca3891476f.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:45:6c:91:6c:90:d6:da:d6:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=23111482-b6bd-439b-90cc-ea54bafb7808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6d:97:98:25:3f:e0:62:80:ab:2f:7b:5a:15:
                    6e:3c:15:c5:94:94:58:c7:ec:e4:73:f1:0a:73:6f:
                    99:f0:14:16:e7:f7:11:13:ee:c4:fe:5a:6e:d0:99:
                    95:58:5c:90:5e:fe:5f:5b:e5:7d:3c:40:ae:1c:be:
                    3f:c5:8a:a8:e6:4e:27:08:27:ce:82:e1:f6:71:72:
                    53:e6:7f:fd:0c:f0:6c:1d:29:d6:0f:8a:d6:7a:76:
                    cd:c2:15:94:b8:21:28:ba:b0:d5:c8:58:78:4d:ea:
                    2d:a6:1e:cd:e1:e7:bf:c2:4a:0a:13:a7:b8:8d:b8:
                    48:09:4e:51:59:38:38:6e:92:7a:08:02:0a:7a:a7:
                    33:9b:79:94:fd:2d:36:0c:59:43:a6:b1:86:bf:d7:
                    0b:bc:6a:09:51:22:44:c4:f9:aa:71:4b:18:08:01:
                    72:be:15:a9:45:7f:b9:90:c4:bd:5b:7b:d1:8b:ff:
                    77:ca:0f:d1:fe:d6:4f:82:58:a4:20:e8:95:d5:ba:
                    dc:18:09:ab:9e:bf:54:ab:a9:7d:69:51:8a:dc:6c:
                    14:61:0f:af:26:35:26:4a:60:a1:b8:56:fb:10:71:
                    b1:07:56:9b:01:4d:83:b7:64:d2:67:92:4b:60:05:
                    ab:02:00:d9:0e:0b:26:1a:0a:f3:35:63:df:ff:3c:
                    ab:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CA:31:46:AA:7C:C2:DF:80:71:B2:E2:CF:59:D9:75:8F:CD:47:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/40fc80eb-657f-34a3-8e76-07ca3891476f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:58:5b:87:01:95:91:ec:e7:f5:34:eb:1e:e0:99:ad:99:a1:
         5e:b0:e7:5b:50:1d:4f:24:1a:7d:2f:91:6a:d7:c6:28:f0:f1:
         06:f2:01:c7:e7:4f:f2:d0:76:a2:b7:88:33:b1:9c:99:2d:81:
         b0:3b:8a:55:d7:17:46:2a:1e:09:b2:d6:d8:3c:d2:6c:17:85:
         84:bf:de:e1:61:05:53:5b:26:ac:64:24:ab:fa:f4:e8:0a:bf:
         ce:7a:79:f3:b7:e3:c0:71:60:cc:2a:f9:7f:b1:17:0c:a0:db:
         37:0e:34:df:9a:b6:65:09:b1:9b:c4:93:d2:80:7e:c7:8a:46:
         19:31:d1:bb:91:a6:dd:0c:2e:6d:1a:87:77:93:4c:57:9e:b3:
         ab:66:43:99:eb:00:08:e9:22:bb:e2:dd:c7:2b:0f:d3:ca:59:
         44:f0:f9:0e:27:60:09:7d:6a:81:31:44:e0:cc:47:ea:7b:f8:
         c1:74:e3:fd:d1:0e:f7:69:da:49:41:99:bc:e9:b4:79:3a:d9:
         32:7b:ed:0c:86:f0:9e:f3:b5:60:2a:5a:8f:b0:a4:e9:e5:d8:
         62:79:72:38:4e:de:a1:ba:0b:0a:ca:d7:2f:f5:2a:6c:c6:c6:
         c4:fc:3c:0f:d1:1c:2f:ef:2a:32:f0:3d:ec:bb:46:2d:30:de:
         ff:3f:66:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL0VskWyQ1trWVAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk
MjMxMTE0ODItYjZiZC00MzliLTkwY2MtZWE1NGJhZmI3ODA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW2XmCU/4GKAqy97WhVuPBXFlJRYx+zkc/EK
c2+Z8BQW5/cRE+7E/lpu0JmVWFyQXv5fW+V9PECuHL4/xYqo5k4nCCfOguH2cXJT
5n/9DPBsHSnWD4rWenbNwhWUuCEourDVyFh4Teotph7N4ee/wkoKE6e4jbhICU5R
WTg4bpJ6CAIKeqczm3mU/S02DFlDprGGv9cLvGoJUSJExPmqcUsYCAFyvhWpRX+5
kMS9W3vRi/93yg/R/tZPglikIOiV1brcGAmrnr9Uq6l9aVGK3GwUYQ+vJjUmSmCh
uFb7EHGxB1abAU2Dt2TSZ5JLYAWrAgDZDgsmGgrzNWPf/zyr2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPLKMUaqfMLfgHGy4s9Z2XWPzUf3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDBmYzgwZWItNjU3Zi0z
NGEzLThlNzYtMDdjYTM4OTE0NzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB1YW4cBlZHs5/U06x7gma2ZoV6w51tQHU8kGn0vkWrXxijw8QbyAcfn
T/LQdqK3iDOxnJktgbA7ilXXF0YqHgmy1tg80mwXhYS/3uFhBVNbJqxkJKv69OgK
v856efO348BxYMwq+X+xFwyg2zcONN+atmUJsZvEk9KAfseKRhkx0buRpt0MLm0a
h3eTTFees6tmQ5nrAAjpIrvi3ccrD9PKWUTw+Q4nYAl9aoExRODMR+p7+MF04/3R
Dvdp2klBmbzptHk62TJ77QyG8J7ztWAqWo+wpOnl2GJ5cjhO3qG6CwrK1y/1KmzG
xsT8PA/RHC/vKjLwPey7Ri0w3v8/ZvI=
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:36:37 2025 by rpki-client