Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4903cc85-7f01-335d-a24d-51060e4210ca.roa
File:                     4903cc85-7f01-335d-a24d-51060e4210ca.roa (raw, json)
Hash identifier:          faGjg4PcGUYU6IO50HNq01M5sTaIasYTNNsjKo403jI=
Subject key identifier:   2D:C8:4B:A8:6D:46:80:C0:00:F6:7A:CB:26:56:B4:C0:E4:4F:B1:6F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24D70403AB048441E41A00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4903cc85-7f01-335d-a24d-51060e4210ca.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36383
IP address blocks:        104.135.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:d7:04:03:ab:04:84:41:e4:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=e9187131-9fe1-4dd0-bed5-572ca3b867ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7b:3e:cc:d9:f5:7c:3a:b9:82:2e:85:27:d7:
                    d8:a4:28:73:51:09:85:41:05:4d:91:91:5d:41:9e:
                    c1:20:64:89:ce:9d:65:f1:41:df:29:56:b3:83:a6:
                    01:94:95:c8:00:47:92:fc:f4:3e:0c:d5:c6:90:b2:
                    33:27:82:57:13:c4:77:f1:48:7b:b4:d7:df:bb:f3:
                    1e:b5:f3:1f:f2:90:d8:d6:3f:ec:18:6c:86:93:0d:
                    17:5d:b4:c1:fd:ed:76:88:b2:ff:40:73:a8:96:fd:
                    50:d8:a0:01:71:23:03:0e:c2:51:40:3f:53:c5:1b:
                    7f:59:1d:0c:71:83:9e:3a:49:0c:19:21:48:ec:07:
                    79:08:f4:fa:d5:23:95:fe:43:e8:1a:af:c7:2f:9a:
                    a8:5e:f5:cb:6d:ff:e3:15:61:be:10:9e:5b:af:b4:
                    80:20:ff:3d:c9:fd:fd:94:6f:b7:03:dd:75:2b:42:
                    3e:3e:22:af:0b:f1:e8:e9:8d:3a:10:20:fe:53:6b:
                    b1:9d:f6:34:77:6a:d1:3c:5d:31:35:e4:e0:fd:16:
                    cf:67:da:3c:48:37:02:f4:b9:97:c9:1d:ac:b0:2a:
                    8b:c8:30:75:af:08:d0:4f:a8:b7:96:e8:49:15:d8:
                    19:dc:08:cc:d2:89:b2:09:d6:68:9c:8a:ae:9c:47:
                    10:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C8:4B:A8:6D:46:80:C0:00:F6:7A:CB:26:56:B4:C0:E4:4F:B1:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4903cc85-7f01-335d-a24d-51060e4210ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:55:e1:bf:08:b2:12:20:94:86:ef:f4:2f:37:81:65:43:0e:
         e4:2a:45:ba:d5:55:60:17:ce:41:4e:90:93:5b:64:30:b1:ac:
         ac:d3:e3:28:6b:fe:db:99:1c:a5:bd:94:fb:6b:d8:dd:bd:91:
         48:9a:b4:f5:e5:be:91:41:19:80:7c:58:05:e5:82:6c:b2:83:
         b8:77:dd:c6:d6:90:33:30:30:1e:6a:17:f1:1c:c6:f3:0d:41:
         b3:30:ca:09:83:e9:aa:35:77:71:ef:a6:6f:ff:20:fe:9d:5a:
         66:cc:b1:8c:37:21:a7:0a:b4:aa:46:ae:9e:b6:ad:e3:8f:fc:
         92:a4:a8:18:25:be:36:6d:f2:7f:a2:0b:86:1c:f5:8c:69:6c:
         e6:c4:1b:8b:87:ae:68:15:8e:e7:44:94:4c:02:76:47:c8:23:
         2a:dd:e0:f5:f6:28:34:42:f4:8d:c7:3b:10:bb:ff:7c:86:48:
         34:f4:dc:d0:a2:7e:98:59:8b:89:95:99:d1:64:1e:b2:17:5b:
         d7:d3:d5:59:fc:ff:40:ee:e1:ed:75:41:1b:f9:81:f9:e4:dc:
         33:63:cb:3a:1e:6e:1e:40:f1:11:01:02:5b:48:b6:e9:70:a8:
         fd:17:82:5b:2a:25:73:f9:ca:13:fb:47:4c:69:4e:55:1e:3b:
         5c:00:b0:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNcEA6sEhEHkGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk
ZTkxODcxMzEtOWZlMS00ZGQwLWJlZDUtNTcyY2EzYjg2N2FjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Hs+zNn1fDq5gi6FJ9fYpChzUQmFQQVNkZFd
QZ7BIGSJzp1l8UHfKVazg6YBlJXIAEeS/PQ+DNXGkLIzJ4JXE8R38Uh7tNffu/Me
tfMf8pDY1j/sGGyGkw0XXbTB/e12iLL/QHOolv1Q2KABcSMDDsJRQD9TxRt/WR0M
cYOeOkkMGSFI7Ad5CPT61SOV/kPoGq/HL5qoXvXLbf/jFWG+EJ5br7SAIP89yf39
lG+3A911K0I+PiKvC/Ho6Y06ECD+U2uxnfY0d2rRPF0xNeTg/RbPZ9o8SDcC9LmX
yR2ssCqLyDB1rwjQT6i3luhJFdgZ3AjM0omyCdZonIqunEcQYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC3IS6htRoDAAPZ6yyZWtMDkT7FvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDkwM2NjODUtN2YwMS0z
MzVkLWEyNGQtNTEwNjBlNDIxMGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIfBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1V4b8IshIglIbv9C83gWVDDuQqRbrVVWAXzkFOkJNbZDCxrKzT4yhr
/tuZHKW9lPtr2N29kUiatPXlvpFBGYB8WAXlgmyyg7h33cbWkDMwMB5qF/EcxvMN
QbMwygmD6ao1d3Hvpm//IP6dWmbMsYw3IacKtKpGrp62reOP/JKkqBglvjZt8n+i
C4Yc9YxpbObEG4uHrmgVjudElEwCdkfIIyrd4PX2KDRC9I3HOxC7/3yGSDT03NCi
fphZi4mVmdFkHrIXW9fT1Vn8/0Du4e11QRv5gfnk3DNjyzoebh5A8REBAltItulw
qP0XglsqJXP5yhP7R0xpTlUeO1wAsLo=
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:40:32 2025 by rpki-client