Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/950d1e58-7e2f-3c3a-94fc-602dd6903988.roa
File:                     950d1e58-7e2f-3c3a-94fc-602dd6903988.roa (raw, json)
Hash identifier:          063mYr9UFwS0koPG8Kz1x+lUqCzF09r4Z2x1KxiPNhI=
Subject key identifier:   40:36:BD:8A:8A:A5:0C:EC:C2:B9:61:88:BA:BB:8F:4B:71:1D:80:9C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24AD89D8DF310E45D9EDE8
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/950d1e58-7e2f-3c3a-94fc-602dd6903988.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.134.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:ad:89:d8:df:31:0e:45:d9:ed:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=863d5125-b9a0-4ab5-8d83-3cca4917e251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:26:02:45:91:06:e7:18:15:1b:c0:81:98:a3:
                    45:a3:6c:c2:46:56:d8:18:53:0f:3c:fc:fc:6f:c2:
                    41:58:48:d2:11:8e:68:f3:60:f9:11:e4:73:96:90:
                    e7:6e:76:69:93:b5:38:37:bc:63:56:2a:ed:bc:e1:
                    94:16:39:c1:8d:01:3b:9b:00:1c:53:12:d3:97:55:
                    93:a6:4c:02:28:12:03:ec:0b:82:09:9b:d9:16:8a:
                    43:31:0b:92:ae:ac:25:e7:fd:7e:46:8b:5c:d5:34:
                    10:f7:94:bb:34:8f:28:69:1a:be:c9:09:7d:e0:2a:
                    f2:23:4e:a1:1c:af:18:aa:41:5b:43:10:5c:db:a5:
                    90:c8:13:8a:22:d4:76:72:15:99:69:cd:7c:b9:01:
                    ff:01:98:22:6f:22:2d:44:4b:eb:77:78:f3:78:b7:
                    77:c3:ee:92:ed:54:c4:91:bc:98:2c:9a:0f:7b:41:
                    1c:8f:a7:f1:bb:93:24:0a:11:3e:ea:16:b0:b7:fa:
                    60:c4:fe:34:72:96:43:26:de:c2:0d:87:24:77:0f:
                    82:e5:6f:61:60:1a:34:ff:2f:c9:de:8f:29:03:33:
                    03:33:88:8e:4a:86:de:64:ba:9a:76:81:b0:54:89:
                    2b:fa:2f:ee:8c:ac:7f:e5:73:68:cf:13:81:c8:1a:
                    5d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:36:BD:8A:8A:A5:0C:EC:C2:B9:61:88:BA:BB:8F:4B:71:1D:80:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/950d1e58-7e2f-3c3a-94fc-602dd6903988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:df:26:39:54:ba:b3:58:a2:98:2d:88:90:c7:56:f1:64:37:
         93:c0:d1:6a:5a:f8:7e:ee:5a:4b:32:ac:01:08:b2:13:d8:d5:
         c6:20:2f:88:5b:87:7d:1c:26:2b:a4:69:88:c7:96:dd:b0:57:
         47:14:8f:8d:8d:81:81:9d:4f:f5:d0:a7:25:2b:75:fc:12:fb:
         21:46:41:31:84:68:eb:37:f2:36:49:c7:9e:47:7a:28:bc:72:
         17:f4:09:12:fc:c5:27:49:97:04:ed:3b:87:c9:77:4f:36:41:
         1f:dc:5e:c5:e0:98:c7:f1:0e:a4:b9:37:b5:93:40:0f:73:a1:
         ef:10:02:c4:ff:0e:4d:ab:a9:fa:3c:e0:59:08:03:f4:7b:e7:
         87:04:4c:19:18:48:9f:90:77:95:5e:bc:1b:a6:fd:29:03:b3:
         9d:fc:23:51:b6:38:e1:89:d3:ff:d2:97:3a:46:db:86:a1:8e:
         72:f9:dc:93:eb:8a:dd:04:3e:ad:9a:6c:23:78:58:20:b4:cb:
         59:30:d3:dd:cb:f0:96:5f:c1:0d:e2:1b:0b:44:20:26:a7:ac:
         52:e4:21:61:64:cb:15:f2:2f:e4:cc:0c:68:57:8e:ad:43:7e:
         cd:c1:50:de:b9:1e:db:a6:9f:30:f7:31:4b:91:7d:0e:b6:5a:
         15:45:e2:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJK2J2N8xDkXZ7egwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk
ODYzZDUxMjUtYjlhMC00YWI1LThkODMtM2NjYTQ5MTdlMjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCYCRZEG5xgVG8CBmKNFo2zCRlbYGFMPPPz8
b8JBWEjSEY5o82D5EeRzlpDnbnZpk7U4N7xjVirtvOGUFjnBjQE7mwAcUxLTl1WT
pkwCKBID7AuCCZvZFopDMQuSrqwl5/1+Rotc1TQQ95S7NI8oaRq+yQl94CryI06h
HK8YqkFbQxBc26WQyBOKItR2chWZac18uQH/AZgibyItREvrd3jzeLd3w+6S7VTE
kbyYLJoPe0Ecj6fxu5MkChE+6hawt/pgxP40cpZDJt7CDYckdw+C5W9hYBo0/y/J
3o8pAzMDM4iOSobeZLqadoGwVIkr+i/ujKx/5XNozxOByBpdawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEA2vYqKpQzswrlhiLq7j0txHYCcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTUwZDFlNTgtN2UyZi0z
YzNhLTk0ZmMtNjAyZGQ2OTAzOTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIbUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF/fJjlUurNYopgtiJDHVvFkN5PA0Wpa+H7uWksyrAEIshPY1cYgL4hb
h30cJiukaYjHlt2wV0cUj42NgYGdT/XQpyUrdfwS+yFGQTGEaOs38jZJx55Heii8
chf0CRL8xSdJlwTtO4fJd082QR/cXsXgmMfxDqS5N7WTQA9zoe8QAsT/Dk2rqfo8
4FkIA/R754cETBkYSJ+Qd5VevBum/SkDs538I1G2OOGJ0//SlzpG24ahjnL53JPr
it0EPq2abCN4WCC0y1kw093L8JZfwQ3iGwtEICanrFLkIWFkyxXyL+TMDGhXjq1D
fs3BUN65HtumnzD3MUuRfQ62WhVF4hc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:57:17 2025 by rpki-client