Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7f824371-cde0-3af8-9f87-67d0ef974a98.roa
File:                     7f824371-cde0-3af8-9f87-67d0ef974a98.roa (raw, json)
Hash identifier:          pyXImQIgxeUWkm/DvynpoxnTp0zYaaiW64shS31UWOs=
Subject key identifier:   EF:D2:E2:A9:2B:31:DC:60:0A:36:A8:4B:16:06:F0:E7:4B:7E:4D:0B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350B4CCD25D63A544A0AB60
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7f824371-cde0-3af8-9f87-67d0ef974a98.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b4:cc:d2:5d:63:a5:44:a0:ab:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=9b0d0583-6c65-4e2c-8d4b-399551bf9927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:4e:52:f2:ee:41:84:89:3e:0a:49:2b:b2:
                    56:c7:85:a6:c0:08:81:a3:8d:ba:47:02:c5:e3:49:
                    c0:56:1b:cf:42:d5:54:d4:76:23:83:8b:30:7a:2f:
                    5d:38:3c:09:09:15:87:b9:b8:f4:e9:7b:4d:46:f9:
                    d8:20:69:93:bc:ed:4f:24:c6:03:74:b7:5c:d7:d2:
                    53:d9:92:53:03:fd:0c:26:f1:6c:d8:ef:f3:f2:cc:
                    4e:9f:67:0e:d8:02:a4:c8:4b:0c:c1:e5:07:b6:d4:
                    32:1d:30:50:69:02:dd:1e:cf:35:fc:19:15:2b:8d:
                    7b:c7:bb:91:22:f0:6a:60:44:7f:02:ed:38:c3:5d:
                    c4:4e:a2:a5:c5:da:6c:32:ec:38:be:ff:aa:2a:cd:
                    da:00:70:d5:11:5e:7c:b6:9d:8e:5c:5f:70:ce:be:
                    75:90:15:33:21:80:fe:51:2e:ed:5f:60:2b:d1:79:
                    25:0f:a8:27:bc:67:db:e3:ea:84:28:1e:2f:4b:99:
                    0e:e7:1c:8b:7e:4d:9a:ab:35:70:98:5d:95:a7:35:
                    0c:d7:f8:8a:91:b6:dd:33:42:01:5a:e7:59:32:68:
                    fe:9d:29:1c:3a:6d:a9:c3:f4:76:82:bb:90:e5:7f:
                    39:02:81:70:d5:cd:2e:73:9f:b1:98:08:5d:6e:4d:
                    50:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D2:E2:A9:2B:31:DC:60:0A:36:A8:4B:16:06:F0:E7:4B:7E:4D:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7f824371-cde0-3af8-9f87-67d0ef974a98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:59:b6:d9:31:54:63:49:e5:63:ee:24:a1:ea:e0:16:8c:fb:
         83:f9:d0:9e:32:eb:0e:9d:98:18:c5:39:5b:c4:dd:ec:4d:79:
         1a:d5:71:2d:4b:32:95:30:bf:3c:de:73:91:6b:5b:e8:f1:32:
         87:c7:36:bc:9b:ef:3c:dc:88:f4:11:81:3a:62:f3:b1:c8:90:
         ae:45:f3:59:f4:c4:14:9f:2c:d6:97:26:4e:65:ec:dd:72:82:
         50:dd:d0:f0:36:73:be:dd:71:1b:a7:bc:3c:fa:b9:71:c0:03:
         d1:14:cc:92:46:01:49:92:2d:73:d1:cf:4d:bc:48:ac:7c:e5:
         48:00:b3:2d:ae:18:fa:4b:5b:c1:07:99:ff:1f:77:6f:88:81:
         92:e9:b5:2b:3f:c6:53:69:70:59:5b:af:af:f8:37:b8:d3:44:
         89:f1:91:b4:13:d2:55:ff:b3:ba:e1:40:50:8c:f7:54:2e:e8:
         04:5d:60:c9:c7:19:26:fc:14:ce:2a:63:3f:a7:71:3c:87:2a:
         0a:61:22:9c:62:26:b5:8b:c1:21:d4:dd:65:ec:3b:00:e8:f3:
         52:6b:6e:d5:5b:da:2e:24:4a:ba:cf:7b:c5:62:d5:da:a2:24:
         81:d7:4a:e9:04:82:ce:90:94:22:c0:ee:73:80:aa:f7:da:10:
         60:a0:32:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzULTM0l1jpUSgq2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk
OWIwZDA1ODMtNmM2NS00ZTJjLThkNGItMzk5NTUxYmY5OTI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzJOUvLuQYSJPgpJK7JWx4WmwAiBo426RwLF
40nAVhvPQtVU1HYjg4swei9dODwJCRWHubj06XtNRvnYIGmTvO1PJMYDdLdc19JT
2ZJTA/0MJvFs2O/z8sxOn2cO2AKkyEsMweUHttQyHTBQaQLdHs81/BkVK417x7uR
IvBqYER/Au04w13ETqKlxdpsMuw4vv+qKs3aAHDVEV58tp2OXF9wzr51kBUzIYD+
US7tX2Ar0XklD6gnvGfb4+qEKB4vS5kO5xyLfk2aqzVwmF2VpzUM1/iKkbbdM0IB
WudZMmj+nSkcOm2pw/R2gruQ5X85AoFw1c0uc5+xmAhdbk1QcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO/S4qkrMdxgCjaoSxYG8OdLfk0LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvN2Y4MjQzNzEtY2RlMC0z
YWY4LTlmODctNjdkMGVmOTc0YTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADhZttkxVGNJ5WPuJKHq4BaM+4P50J4y6w6dmBjFOVvE3exNeRrVcS1L
MpUwvzzec5FrW+jxMofHNryb7zzciPQRgTpi87HIkK5F81n0xBSfLNaXJk5l7N1y
glDd0PA2c77dcRunvDz6uXHAA9EUzJJGAUmSLXPRz028SKx85UgAsy2uGPpLW8EH
mf8fd2+IgZLptSs/xlNpcFlbr6/4N7jTRInxkbQT0lX/s7rhQFCM91Qu6ARdYMnH
GSb8FM4qYz+ncTyHKgphIpxiJrWLwSHU3WXsOwDo81JrbtVb2i4kSrrPe8Vi1dqi
JIHXSukEgs6QlCLA7nOAqvfaEGCgMu4=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:11:06 2025 by rpki-client