Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88e9fd55-47e4-358a-863a-d86afd17b3b0.roa
File:                     88e9fd55-47e4-358a-863a-d86afd17b3b0.roa (raw, json)
Hash identifier:          uqaJW4dCaSBoSFkIz5tVbUoz2L1l9aNW8v0hs2rH1XM=
Subject key identifier:   F4:48:F3:0F:80:48:5D:28:36:23:CA:B4:08:0A:52:D3:61:CA:01:15
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9EF43809E6A328CE0DAC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88e9fd55-47e4-358a-863a-d86afd17b3b0.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     41264
IP address blocks:        104.133.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:ef:43:80:9e:6a:32:8c:e0:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=bce4071d-f6c5-41d1-a9e1-975cbe793ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:c8:32:13:a2:91:0a:d3:7e:69:bf:bf:c2:
                    0e:c3:af:6d:cf:2c:33:3e:e3:1e:86:76:3f:96:8a:
                    5f:14:97:a0:0d:c8:f4:85:ea:90:50:c0:7e:7f:3b:
                    dd:36:1b:b7:3f:ff:9b:cc:78:db:98:92:28:33:95:
                    d1:5b:50:29:c1:ca:3e:21:13:9c:2e:17:4e:36:dd:
                    5e:57:c5:f2:bd:69:bd:ad:7a:83:61:6f:37:5d:ed:
                    eb:33:7b:3e:5a:04:a3:62:10:ad:3f:16:f2:cd:95:
                    46:51:e3:a8:b9:24:2f:51:c6:bc:dc:fd:ff:34:1f:
                    52:4d:3a:6f:66:54:bc:89:67:3b:4d:d2:8f:50:25:
                    0e:aa:4c:fe:dc:17:cd:5c:99:b3:ff:6a:d9:6a:16:
                    53:75:e6:94:68:8f:aa:e7:e0:0f:ae:1a:a6:36:62:
                    90:92:a2:fc:a5:f1:b2:70:97:5b:06:bb:3a:e6:78:
                    01:59:97:9b:e8:d9:7e:54:05:6c:af:42:20:75:4c:
                    de:fd:4b:d0:1b:b1:93:46:8e:40:92:63:1a:85:5b:
                    85:b1:07:91:7d:f9:08:9e:ce:b0:08:bf:99:57:37:
                    c8:ed:fc:b4:86:f6:e0:c3:7d:f0:32:d7:fc:fc:39:
                    fd:83:63:a5:d5:d8:59:d6:e9:e3:63:04:99:66:a9:
                    47:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:48:F3:0F:80:48:5D:28:36:23:CA:B4:08:0A:52:D3:61:CA:01:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/88e9fd55-47e4-358a-863a-d86afd17b3b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:5e:47:84:db:31:4f:70:fc:b0:d8:ee:b3:23:86:3f:dd:59:
         e7:52:88:da:36:9e:e2:03:95:55:19:3a:45:2d:ea:48:28:7d:
         6c:ca:04:cf:28:5c:ed:e6:d1:27:fe:be:af:f8:65:e4:e6:b5:
         2a:23:81:c6:0e:cf:3a:5c:ee:5f:32:9d:f8:d8:c5:12:b4:28:
         d8:5e:99:fc:f1:bb:ff:80:2e:b8:3a:dd:99:fa:6a:61:43:13:
         35:89:3e:68:18:24:a9:88:b1:06:a8:c8:a1:23:78:bd:ca:32:
         f3:14:9c:36:bb:1d:be:38:16:94:08:04:e8:02:0a:8b:5a:8c:
         aa:f2:45:0e:de:4f:bc:ea:6e:0e:f6:d6:86:a5:8f:34:83:ce:
         9d:64:07:0b:4c:9d:58:7b:0f:e9:1c:88:3c:db:d1:2a:f9:1a:
         3a:b9:dd:f6:d1:94:c0:9e:5e:48:2d:72:39:c4:0c:d5:f1:fa:
         d2:64:9f:e2:2b:ed:d9:ff:56:29:ab:11:cc:7c:58:8b:18:1c:
         08:64:d7:e4:cf:c1:51:34:7d:64:99:e8:88:db:3a:8e:3c:3f:
         bf:6c:a4:ea:c5:1d:ee:d0:18:26:17:be:c4:f8:f4:1a:3e:98:
         a0:18:08:cc:7a:cc:f5:fa:d9:05:03:43:1d:65:82:8c:32:dc:
         b5:96:6b:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+e9DgJ5qMozg2sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk
YmNlNDA3MWQtZjZjNS00MWQxLWE5ZTEtOTc1Y2JlNzkzZWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst3IMhOikQrTfmm/v8IOw69tzywzPuMehnY/
lopfFJegDcj0heqQUMB+fzvdNhu3P/+bzHjbmJIoM5XRW1Apwco+IROcLhdONt1e
V8XyvWm9rXqDYW83Xe3rM3s+WgSjYhCtPxbyzZVGUeOouSQvUca83P3/NB9STTpv
ZlS8iWc7TdKPUCUOqkz+3BfNXJmz/2rZahZTdeaUaI+q5+APrhqmNmKQkqL8pfGy
cJdbBrs65ngBWZeb6Nl+VAVsr0IgdUze/UvQG7GTRo5AkmMahVuFsQeRffkIns6w
CL+ZVzfI7fy0hvbgw33wMtf8/Dn9g2Ol1dhZ1unjYwSZZqlHTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPRI8w+ASF0oNiPKtAgKUtNhygEVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODhlOWZkNTUtNDdlNC0z
NThhLTg2M2EtZDg2YWZkMTdiM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIReR4TbMU9w/LDY7rMjhj/dWedSiNo2nuIDlVUZOkUt6kgofWzKBM8o
XO3m0Sf+vq/4ZeTmtSojgcYOzzpc7l8ynfjYxRK0KNhemfzxu/+ALrg63Zn6amFD
EzWJPmgYJKmIsQaoyKEjeL3KMvMUnDa7Hb44FpQIBOgCCotajKryRQ7eT7zqbg72
1oaljzSDzp1kBwtMnVh7D+kciDzb0Sr5Gjq53fbRlMCeXkgtcjnEDNXx+tJkn+Ir
7dn/VimrEcx8WIsYHAhk1+TPwVE0fWSZ6IjbOo48P79spOrFHe7QGCYXvsT49Bo+
mKAYCMx6zPX62QUDQx1lgowy3LWWa+I=
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:04:37 2025 by rpki-client