Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/90e1e37d-dd2b-3140-92f1-b6fcded71072.roa
File:                     90e1e37d-dd2b-3140-92f1-b6fcded71072.roa (raw, json)
Hash identifier:          RaDv5oOvTcssHTk4vvrbPSQDnc7yE1Y5MOsI4TMVqiE=
Subject key identifier:   BB:4E:EC:ED:BF:67:57:EC:34:DC:A5:22:B7:66:A4:D0:1B:12:F7:46
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B8B161393FE0BCD115600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/90e1e37d-dd2b-3140-92f1-b6fcded71072.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     395973
IP address blocks:        104.134.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:8b:16:13:93:fe:0b:cd:11:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=36665d10-3546-4f7c-92de-48786cc9324d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e8:b5:15:0d:b8:7f:d4:3f:df:d3:66:2d:c9:
                    ef:b8:73:bc:11:21:55:1e:6e:fa:d3:d3:12:09:63:
                    52:11:24:03:5b:b6:24:06:ee:f7:87:aa:15:35:f4:
                    2a:9a:db:f2:91:7c:dd:44:44:79:77:5a:cb:2a:f9:
                    5a:ec:88:ea:84:c1:68:b7:2b:31:27:6e:3f:0a:89:
                    01:f9:c5:6f:d0:6a:17:ab:84:ab:55:d8:45:96:ed:
                    98:fd:1d:26:6d:db:cf:04:c6:03:c6:b7:9f:0a:94:
                    83:4f:50:c7:d1:0c:2f:8b:d4:31:2e:5e:37:d9:25:
                    ab:6b:76:e9:02:09:03:21:58:4e:3f:b8:0b:03:71:
                    83:27:d8:f4:1d:51:36:57:4d:4b:67:5c:60:4f:96:
                    8f:16:4f:a5:83:20:2e:23:dc:b5:4b:89:09:7b:67:
                    7a:69:7d:76:1f:5f:d8:0b:40:22:64:43:63:49:ff:
                    be:84:8a:77:5c:04:be:1b:26:ee:b8:e4:19:b7:f4:
                    75:22:05:fb:bd:1c:c4:b3:3e:a5:62:cc:17:8e:87:
                    2d:45:7c:3c:a8:51:20:f7:93:72:17:e5:dc:a0:2a:
                    85:91:05:68:f3:fb:88:75:95:cc:6d:c0:6a:0f:1a:
                    32:a8:b0:57:ca:4d:6f:de:34:02:49:e8:19:3b:fc:
                    9e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4E:EC:ED:BF:67:57:EC:34:DC:A5:22:B7:66:A4:D0:1B:12:F7:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/90e1e37d-dd2b-3140-92f1-b6fcded71072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:06:09:5a:09:12:9a:66:2d:a6:1d:53:6f:f7:75:3e:22:c9:
         6d:30:3a:e9:a9:2e:d2:e5:22:56:1b:c3:50:47:29:97:50:74:
         16:59:79:ef:84:f9:22:c4:59:11:be:d3:67:b3:c6:98:65:29:
         87:01:8b:14:76:74:f9:74:d9:3a:05:94:41:f2:6e:06:58:f0:
         bb:b1:1a:25:23:af:d0:54:3d:98:04:7b:cd:0e:40:56:01:1e:
         08:0c:90:44:a9:18:e5:ca:e8:da:a4:77:86:95:8e:a2:97:6e:
         a2:79:c7:fd:c4:6d:9d:e7:84:ca:b2:ba:df:00:b8:30:1a:c7:
         d8:18:04:a5:8b:46:b2:a7:9b:c6:ac:82:dc:f3:ac:5e:1f:30:
         77:ad:23:96:f5:46:0b:b7:6b:ee:21:d7:73:70:f8:5b:72:36:
         44:70:c6:dd:51:09:de:c7:32:f7:b7:6b:c6:f4:01:08:e2:ce:
         bb:8f:81:72:6f:d2:b4:f0:34:33:ae:07:7a:fc:71:02:4f:2f:
         f6:b7:a4:5c:ee:ac:03:5e:d1:94:d8:c6:d0:ba:7a:50:f6:6f:
         58:1f:30:ec:62:f0:e7:b4:32:80:2a:6d:52:33:b0:cf:e9:fb:
         c2:ff:de:11:71:aa:32:b1:9d:a9:74:c4:30:e5:40:70:0c:5e:
         58:07:47:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4sWE5P+C80RVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
MzY2NjVkMTAtMzU0Ni00ZjdjLTkyZGUtNDg3ODZjYzkzMjRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmei1FQ24f9Q/39NmLcnvuHO8ESFVHm7609MS
CWNSESQDW7YkBu73h6oVNfQqmtvykXzdRER5d1rLKvla7IjqhMFotysxJ24/CokB
+cVv0GoXq4SrVdhFlu2Y/R0mbdvPBMYDxrefCpSDT1DH0Qwvi9QxLl432SWra3bp
AgkDIVhOP7gLA3GDJ9j0HVE2V01LZ1xgT5aPFk+lgyAuI9y1S4kJe2d6aX12H1/Y
C0AiZENjSf++hIp3XAS+GybuuOQZt/R1IgX7vRzEsz6lYswXjoctRXw8qFEg95Ny
F+XcoCqFkQVo8/uIdZXMbcBqDxoyqLBXyk1v3jQCSegZO/yeMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLtO7O2/Z1fsNNylIrdmpNAbEvdGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTBlMWUzN2QtZGQyYi0z
MTQwLTkyZjEtYjZmY2RlZDcxMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK0GCVoJEppmLaYdU2/3dT4iyW0wOumpLtLlIlYbw1BHKZdQdBZZee+E
+SLEWRG+02ezxphlKYcBixR2dPl02ToFlEHybgZY8LuxGiUjr9BUPZgEe80OQFYB
HggMkESpGOXK6Nqkd4aVjqKXbqJ5x/3EbZ3nhMqyut8AuDAax9gYBKWLRrKnm8as
gtzzrF4fMHetI5b1Rgu3a+4h13Nw+FtyNkRwxt1RCd7HMve3a8b0AQjizruPgXJv
0rTwNDOuB3r8cQJPL/a3pFzurANe0ZTYxtC6elD2b1gfMOxi8Oe0MoAqbVIzsM/p
+8L/3hFxqjKxnal0xDDlQHAMXlgHR2w=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:17 2025 by rpki-client