Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61ea1429-2237-3dee-95fe-89a342c89790.roa
File:                     61ea1429-2237-3dee-95fe-89a342c89790.roa (raw, json)
Hash identifier:          i1oONu3wT+w6gU2pwtB9/DpEBLXQ24kAhzFalGQT/ks=
Subject key identifier:   9F:93:B5:62:0A:7A:74:C4:72:A7:ED:FE:BC:9E:96:B6:8A:16:0F:33
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B75B2DF764BAF79682980
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61ea1429-2237-3dee-95fe-89a342c89790.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:75:b2:df:76:4b:af:79:68:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=a4bc977f-8f42-4e35-b4bd-5d6b21d2cb4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a9:46:d5:8f:1c:d4:a3:df:8a:80:1e:d5:7c:
                    7e:09:50:2d:c1:3f:5f:e7:a1:77:3d:f9:d4:49:d7:
                    23:9e:c4:66:b8:be:df:65:68:76:ee:58:1c:6f:e6:
                    9d:12:59:90:1f:9b:e5:d8:aa:d2:41:db:e6:e6:af:
                    2d:ac:91:be:66:30:c4:94:07:e6:5e:e7:68:ca:69:
                    07:f0:52:50:29:c7:9d:fa:85:4b:2c:1b:fb:4a:f1:
                    48:63:fa:87:ac:01:8e:43:36:79:b6:70:5c:36:03:
                    cd:6b:26:7a:bb:1d:20:4d:21:59:8a:a0:6d:04:4f:
                    a5:e1:4f:07:4a:3e:dd:b0:2e:56:1a:6e:c2:d5:bf:
                    7e:6d:dd:75:c1:fb:b6:f3:8d:b7:0d:db:ab:85:46:
                    81:43:59:69:35:9d:8f:ef:e6:40:d1:50:a0:2f:42:
                    82:bd:ed:bf:99:0d:fc:46:68:7f:0f:45:9d:0c:f1:
                    40:d7:27:23:dc:65:30:a7:86:7e:d0:27:e3:87:a9:
                    53:2d:f9:1e:6d:e2:89:34:fc:65:49:16:96:83:29:
                    95:ca:88:43:d8:02:54:cb:6e:13:09:2b:7d:a0:fd:
                    7d:e7:02:fa:85:b8:c8:b8:d1:04:b9:d3:49:02:38:
                    7e:16:9f:89:95:8d:f1:89:df:24:d5:27:c3:6c:ce:
                    a1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:93:B5:62:0A:7A:74:C4:72:A7:ED:FE:BC:9E:96:B6:8A:16:0F:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/61ea1429-2237-3dee-95fe-89a342c89790.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e4:76:db:34:48:65:56:05:c9:a2:16:33:d3:d6:56:18:da:
         5e:54:be:c2:ff:61:28:42:11:c6:d4:8c:22:29:16:6e:de:de:
         ec:b9:2d:9f:c7:0c:3d:be:2d:7e:d4:6d:a4:88:73:62:ad:e4:
         45:f0:4f:ab:ff:19:1b:23:cf:0b:fc:71:ea:a3:a5:3c:d7:29:
         40:07:a7:b7:49:08:5c:f1:2a:4f:74:15:eb:a1:b2:86:4f:d0:
         dc:40:47:2c:39:7c:db:67:5a:6d:06:e8:4b:db:e7:93:a4:65:
         13:be:a4:5a:86:bd:14:9a:d4:99:18:59:67:56:83:9d:14:d7:
         9e:72:1f:a6:ec:bf:d3:0e:49:b1:4d:6f:85:27:a4:99:56:1d:
         af:0a:20:9b:41:fd:1c:47:ea:e4:2a:08:47:8c:a9:b1:2e:97:
         fa:66:a7:b8:ae:20:f6:36:dc:f1:69:54:6e:b8:5a:f1:b6:45:
         ff:48:db:19:e4:d1:b2:95:2e:f9:86:6b:b6:34:a0:c9:d8:ee:
         ec:69:39:98:5b:37:42:b5:b1:65:fe:7e:84:13:18:b3:2e:8c:
         cf:05:76:ba:1a:af:04:de:5a:93:dc:0b:ee:fd:04:89:b3:90:
         9c:d4:09:b9:5f:90:1a:3e:7f:02:74:b3:24:62:3e:d1:83:ed:
         41:9b:63:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3Wy33ZLr3loKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
YTRiYzk3N2YtOGY0Mi00ZTM1LWI0YmQtNWQ2YjIxZDJjYjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1alG1Y8c1KPfioAe1Xx+CVAtwT9f56F3PfnU
SdcjnsRmuL7fZWh27lgcb+adElmQH5vl2KrSQdvm5q8trJG+ZjDElAfmXudoymkH
8FJQKced+oVLLBv7SvFIY/qHrAGOQzZ5tnBcNgPNayZ6ux0gTSFZiqBtBE+l4U8H
Sj7dsC5WGm7C1b9+bd11wfu28423DdurhUaBQ1lpNZ2P7+ZA0VCgL0KCve2/mQ38
Rmh/D0WdDPFA1ycj3GUwp4Z+0Cfjh6lTLfkebeKJNPxlSRaWgymVyohD2AJUy24T
CSt9oP195wL6hbjIuNEEudNJAjh+Fp+JlY3xid8k1SfDbM6hSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ+TtWIKenTEcqft/ryelraKFg8zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNjFlYTE0MjktMjIzNy0z
ZGVlLTk1ZmUtODlhMzQyYzg5NzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIbcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGHkdts0SGVWBcmiFjPT1lYY2l5UvsL/YShCEcbUjCIpFm7e3uy5LZ/H
DD2+LX7UbaSIc2Kt5EXwT6v/GRsjzwv8ceqjpTzXKUAHp7dJCFzxKk90FeuhsoZP
0NxARyw5fNtnWm0G6Evb55OkZRO+pFqGvRSa1JkYWWdWg50U155yH6bsv9MOSbFN
b4UnpJlWHa8KIJtB/RxH6uQqCEeMqbEul/pmp7iuIPY23PFpVG64WvG2Rf9I2xnk
0bKVLvmGa7Y0oMnY7uxpOZhbN0K1sWX+foQTGLMujM8FdroarwTeWpPcC+79BImz
kJzUCblfkBo+fwJ0syRiPtGD7UGbY10=
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:53:59 2025 by rpki-client