Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/80f7d4d7-487f-3638-a386-c2c90556e0c6.roa
File:                     80f7d4d7-487f-3638-a386-c2c90556e0c6.roa (raw, json)
Hash identifier:          3aLUhKwFM/OzALTiaqCVghwe70i2C+yACJ7fAPkQrmg=
Subject key identifier:   BF:54:A1:95:0D:03:21:04:95:ED:36:EC:46:4C:2E:A4:81:39:24:44
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B9204E4D73D0FAF04DB88
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/80f7d4d7-487f-3638-a386-c2c90556e0c6.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:92:04:e4:d7:3d:0f:af:04:db:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=c55bb1b4-93e9-4cc7-822c-23d7b6870a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:89:aa:8f:03:3d:f1:eb:97:8e:59:8e:79:
                    52:66:6b:ad:5d:27:9a:88:3b:3e:b6:3b:6c:77:47:
                    16:e2:4b:42:33:36:2d:86:0e:0a:c4:3a:87:8e:a7:
                    34:35:83:9b:d3:06:c9:a5:b3:6a:04:3a:c4:85:5a:
                    74:b9:9e:66:09:d5:ac:e1:b0:bc:34:55:2b:8c:2d:
                    52:58:c2:22:28:c8:86:13:67:ea:c2:64:46:f1:1e:
                    fc:af:43:bb:c2:bb:e7:92:99:4c:b5:87:26:1d:39:
                    62:27:37:41:52:91:ed:65:e5:10:f1:35:10:b6:0d:
                    46:55:ff:c4:0e:52:83:7f:e5:f3:66:f5:6e:3f:97:
                    b1:d4:ed:f1:5d:0c:5e:90:45:67:d4:54:b6:71:cf:
                    4e:41:7a:72:f7:0f:6a:0d:c6:a2:26:f8:b5:d1:aa:
                    6f:e1:2a:4d:69:c7:c0:ce:cc:16:04:03:1a:26:79:
                    81:64:b2:30:9b:08:9c:95:0c:10:1a:0d:9d:36:2f:
                    fc:b6:55:8c:11:9e:0f:5c:9c:8c:7e:95:43:d0:fc:
                    76:a8:0c:40:52:52:1f:83:f4:d0:ac:29:b8:8f:d9:
                    4d:a4:28:80:c8:0e:43:4c:bd:07:1e:9a:c3:d0:9b:
                    10:d4:7a:26:d2:03:60:b4:80:df:1c:57:d7:86:b9:
                    cf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:54:A1:95:0D:03:21:04:95:ED:36:EC:46:4C:2E:A4:81:39:24:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/80f7d4d7-487f-3638-a386-c2c90556e0c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:05:80:e9:d8:0c:36:e4:56:b6:a1:fe:31:b4:89:59:d3:e6:
         19:c8:ec:42:77:a2:eb:ed:49:b1:17:7e:9b:f2:de:b8:0c:24:
         58:a6:a2:49:e9:9d:1d:df:b8:37:44:2e:86:a9:70:19:37:a7:
         ed:49:2a:bf:6b:67:07:82:d0:ab:f8:32:45:66:a4:12:75:fe:
         cc:1a:5b:c6:16:7e:29:19:80:d7:f1:c0:68:76:25:3b:d0:60:
         bb:72:bc:dd:74:01:9a:00:a7:44:ed:6f:1f:c1:9e:1c:a6:d1:
         90:eb:e4:03:6d:0a:b3:fe:fe:8f:90:9a:80:95:1f:11:75:3d:
         56:1e:49:35:96:0e:38:41:4c:5e:ad:8b:5d:f4:55:b4:38:48:
         59:1c:91:90:a0:27:17:8e:82:7e:6b:ca:bf:9d:cd:67:ba:d6:
         ed:95:bd:f3:61:7b:31:a9:b4:57:89:7d:f7:49:a3:26:68:68:
         99:80:3f:60:02:31:82:b3:cb:ff:18:54:fa:be:4b:31:4a:b5:
         2d:e9:47:60:6b:52:0c:e6:af:50:18:36:b8:c8:83:3c:4e:42:
         4e:77:07:30:df:9a:9b:54:13:2d:9f:86:1c:a2:f2:d1:4b:52:
         05:81:9d:56:26:2f:2d:c6:c4:2f:5c:88:67:f7:40:3b:f4:70:
         c4:e1:a1:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5IE5Nc9D68E24gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
YzU1YmIxYjQtOTNlOS00Y2M3LTgyMmMtMjNkN2I2ODcwYTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMGJqo8DPfHrl45ZjnlSZmutXSeaiDs+tjts
d0cW4ktCMzYthg4KxDqHjqc0NYOb0wbJpbNqBDrEhVp0uZ5mCdWs4bC8NFUrjC1S
WMIiKMiGE2fqwmRG8R78r0O7wrvnkplMtYcmHTliJzdBUpHtZeUQ8TUQtg1GVf/E
DlKDf+XzZvVuP5ex1O3xXQxekEVn1FS2cc9OQXpy9w9qDcaiJvi10apv4SpNacfA
zswWBAMaJnmBZLIwmwiclQwQGg2dNi/8tlWMEZ4PXJyMfpVD0Px2qAxAUlIfg/TQ
rCm4j9lNpCiAyA5DTL0HHprD0JsQ1Hom0gNgtIDfHFfXhrnPYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL9UoZUNAyEEle027EZMLqSBOSREMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODBmN2Q0ZDctNDg3Zi0z
NjM4LWEzODYtYzJjOTA1NTZlMGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIb0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgFgOnYDDbkVrah/jG0iVnT5hnI7EJ3ouvtSbEXfpvy3rgMJFimoknp
nR3fuDdELoapcBk3p+1JKr9rZweC0Kv4MkVmpBJ1/swaW8YWfikZgNfxwGh2JTvQ
YLtyvN10AZoAp0Ttbx/Bnhym0ZDr5ANtCrP+/o+QmoCVHxF1PVYeSTWWDjhBTF6t
i130VbQ4SFkckZCgJxeOgn5ryr+dzWe61u2VvfNhezGptFeJffdJoyZoaJmAP2AC
MYKzy/8YVPq+SzFKtS3pR2BrUgzmr1AYNrjIgzxOQk53BzDfmptUEy2fhhyi8tFL
UgWBnVYmLy3GxC9ciGf3QDv0cMThoVE=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:24:08 2025 by rpki-client