Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a2d6a57-35d5-32b2-b71d-7313e1939a71.roa
File:                     8a2d6a57-35d5-32b2-b71d-7313e1939a71.roa (raw, json)
Hash identifier:          qaTP/vG/bbDrPr50Vh4m5Atvu7S7RvMChM7/3pomAdw=
Subject key identifier:   80:77:2F:2E:E4:07:3B:43:0F:BC:C8:DF:81:C8:E5:F7:E5:17:EF:4D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9EBAC19C9BB104CD15DC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a2d6a57-35d5-32b2-b71d-7313e1939a71.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     15169
IP address blocks:        104.134.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:eb:ac:19:c9:bb:10:4c:d1:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=4847d566-a032-4af4-9bff-4ce6254425c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2e:27:0e:c6:9d:f5:6c:90:a7:4f:5b:eb:d1:
                    20:f8:6a:27:22:a7:b4:12:c1:16:e2:ea:5a:b2:eb:
                    85:fc:c9:fe:15:1f:c0:8c:af:8f:7e:62:c0:f6:ab:
                    77:7f:2c:00:cf:2e:d7:66:3c:ff:1b:13:34:67:dc:
                    75:9a:fb:ff:a9:5c:5e:11:f2:48:be:7c:ad:bb:a4:
                    2b:8e:9b:5c:47:aa:c4:b0:5f:f1:15:93:e0:a9:66:
                    96:dd:d1:29:5c:5a:a4:bb:4b:cb:c9:43:2c:e5:7a:
                    dd:a4:ba:64:3f:67:f2:2a:a1:49:60:f4:49:3f:25:
                    61:24:13:f1:34:c0:d4:1e:a7:5d:b6:45:6a:da:b8:
                    97:94:53:48:25:b8:f2:b3:fc:53:02:3f:34:1a:1e:
                    9d:9c:80:ea:77:49:43:5c:e8:49:d5:e2:3c:f6:e5:
                    bf:5f:de:b4:ab:07:c1:e2:6d:9a:2d:4a:d0:6d:37:
                    bb:39:d5:77:61:b8:2a:78:31:85:20:84:66:e5:c1:
                    a1:2d:93:5f:f7:b1:1f:7f:1c:f5:ec:f8:4d:c1:03:
                    00:60:cb:85:f3:82:94:d6:3c:2c:70:b4:32:b1:80:
                    cc:89:ac:5c:b2:ab:ca:d0:51:97:67:77:79:db:05:
                    f4:46:b6:01:0d:56:5e:ec:ea:b3:eb:54:31:67:43:
                    3e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:77:2F:2E:E4:07:3B:43:0F:BC:C8:DF:81:C8:E5:F7:E5:17:EF:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8a2d6a57-35d5-32b2-b71d-7313e1939a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:2c:c0:c9:85:e9:cc:ff:9d:93:ab:0a:e9:3e:a8:9b:4e:3b:
         ac:6c:35:22:d9:46:b5:0c:5d:06:a0:91:3f:e6:40:03:68:bf:
         4c:6d:85:bf:65:10:6e:93:ca:18:fe:e1:bc:60:be:73:67:f7:
         af:8d:f7:69:79:03:ae:fc:1f:66:4e:52:a0:4b:b8:39:03:40:
         11:91:54:51:77:13:07:53:53:60:ad:8a:57:53:77:7f:34:1f:
         56:a5:aa:ce:80:5b:9d:5d:3a:3f:96:69:a5:ee:a9:e5:a4:02:
         34:8e:14:3d:78:fc:ba:ef:dc:ff:bc:d3:8b:3c:95:dc:c9:b9:
         a1:6f:f3:52:89:32:be:e9:b5:07:2d:d0:84:b0:25:62:70:be:
         da:44:0c:8c:5c:ad:4b:8b:e3:77:6e:cb:72:cf:7f:6f:85:16:
         53:11:e8:3c:0f:9a:59:7c:c2:69:ac:5b:8e:9c:e9:bf:65:eb:
         79:fa:d8:74:f2:53:73:32:9e:b6:1b:2f:0e:8d:c1:e3:03:7f:
         66:47:e6:44:1d:d9:d9:ff:3f:cf:f7:1e:f3:29:84:c8:f1:85:
         b9:ff:ea:74:39:e8:60:e7:4b:31:d4:7e:c0:87:bb:7c:c1:f4:
         79:09:7e:6d:82:e0:41:ac:ee:c6:ff:4d:db:83:8a:90:81:05:
         5c:46:c9:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+eusGcm7EEzRXcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk
NDg0N2Q1NjYtYTAzMi00YWY0LTliZmYtNGNlNjI1NDQyNWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC4nDsad9WyQp09b69Eg+GonIqe0EsEW4upa
suuF/Mn+FR/AjK+PfmLA9qt3fywAzy7XZjz/GxM0Z9x1mvv/qVxeEfJIvnytu6Qr
jptcR6rEsF/xFZPgqWaW3dEpXFqku0vLyUMs5XrdpLpkP2fyKqFJYPRJPyVhJBPx
NMDUHqddtkVq2riXlFNIJbjys/xTAj80Gh6dnIDqd0lDXOhJ1eI89uW/X960qwfB
4m2aLUrQbTe7OdV3YbgqeDGFIIRm5cGhLZNf97Effxz17PhNwQMAYMuF84KU1jws
cLQysYDMiaxcsqvK0FGXZ3d52wX0RrYBDVZe7Oqz61QxZ0M+EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIB3Ly7kBztDD7zI34HI5fflF+9NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOGEyZDZhNTctMzVkNS0z
MmIyLWI3MWQtNzMxM2UxOTM5YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKkswMmF6cz/nZOrCuk+qJtOO6xsNSLZRrUMXQagkT/mQANov0xthb9l
EG6Tyhj+4bxgvnNn96+N92l5A678H2ZOUqBLuDkDQBGRVFF3EwdTU2CtildTd380
H1alqs6AW51dOj+WaaXuqeWkAjSOFD14/Lrv3P+804s8ldzJuaFv81KJMr7ptQct
0ISwJWJwvtpEDIxcrUuL43duy3LPf2+FFlMR6DwPmll8wmmsW46c6b9l63n62HTy
U3MynrYbLw6NweMDf2ZH5kQd2dn/P8/3HvMphMjxhbn/6nQ56GDnSzHUfsCHu3zB
9HkJfm2C4EGs7sb/TduDipCBBVxGyV4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:55:27 2025 by rpki-client