Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa
File:                     998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa (raw, json)
Hash identifier:          5ADXWl9ljrk3i92mK63kK30ZfGg5PznyB/AUfVYVwI4=
Subject key identifier:   C1:CE:B2:40:1A:B4:52:E5:F2:C4:AA:5F:D2:B2:AD:5A:64:C7:B7:14
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A70860A9A4F9FBD18F34EB700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     41264
IP address blocks:        104.132.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:0a:9a:4f:9f:bd:18:f3:4e:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=34358269-6dc8-4e79-8a09-ca4de3f2ecba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4f:23:c4:d6:75:90:50:ad:ca:23:ab:6a:94:
                    b6:7b:4b:51:82:38:6d:e0:93:13:fd:23:77:71:21:
                    47:e5:3b:80:d5:fc:b6:74:38:ab:53:87:1e:cf:5d:
                    9f:77:5d:8b:99:01:f3:24:a8:0c:9f:7f:64:9b:e9:
                    31:21:eb:9e:87:d8:08:90:38:d7:78:92:b8:94:9e:
                    ab:e4:27:9f:cc:dd:57:b4:ab:09:6a:65:25:7f:bb:
                    7b:5b:26:a5:6f:1b:a5:d7:ec:bb:84:d2:68:2b:3e:
                    dc:f6:e7:3e:83:52:80:96:30:d9:05:0f:ff:bb:97:
                    46:b0:fc:a6:24:fb:9f:16:b7:1d:28:84:9f:b2:58:
                    0b:a2:e2:4f:02:94:15:16:8d:81:ab:89:59:25:42:
                    05:39:bd:df:7d:47:d2:1a:95:68:b5:08:f8:f4:2c:
                    0d:fa:8e:82:73:57:59:67:2c:51:3a:95:b3:aa:38:
                    1e:aa:64:53:7f:e6:cf:78:55:4c:52:9e:d2:7f:46:
                    af:c7:bd:ca:3f:11:d8:19:d8:77:d9:15:f7:74:06:
                    61:87:b5:47:99:30:fc:ae:e9:90:3c:ed:b3:ae:84:
                    4e:f2:1f:47:ea:45:0c:c1:c9:da:74:45:62:fc:9f:
                    37:3c:a6:af:b0:db:48:d8:f9:57:86:e2:b8:8a:d9:
                    a6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CE:B2:40:1A:B4:52:E5:F2:C4:AA:5F:D2:B2:AD:5A:64:C7:B7:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/998f51a9-1a6d-37e3-8548-1119e6ef3a88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:24:12:cc:fe:69:a4:a9:79:36:da:81:67:3f:74:e0:45:92:
         13:64:37:64:a6:34:7e:d3:06:16:27:d8:da:9c:dd:f7:18:14:
         60:ff:5d:9a:96:c2:86:36:24:3d:06:a4:2e:d7:45:4a:f3:8a:
         cd:b1:d0:77:72:78:bb:d4:ed:2f:b7:2a:8e:82:49:76:9c:f9:
         a0:05:d9:a2:4b:de:d6:14:df:d7:8b:a7:f4:19:fc:b0:5a:1c:
         cd:42:b8:5d:a6:54:e9:0c:39:5f:f4:4f:b5:cf:b7:cf:e0:90:
         04:01:00:0c:bb:dc:2d:0e:cc:e6:c2:fa:9d:56:d3:76:ce:5d:
         28:42:ac:6a:13:a6:b9:d7:51:11:52:fc:b9:6a:2c:69:f5:e5:
         1e:b1:06:36:7e:14:c2:81:df:f0:c3:b2:fe:8a:78:f8:cb:65:
         c5:f1:5c:b8:52:17:1c:88:d4:65:65:3e:0f:09:5f:2b:2e:43:
         58:6d:95:db:29:67:e3:a5:fe:01:54:82:d1:f2:7f:ee:62:ee:
         60:4c:10:06:43:bc:45:16:42:6e:58:86:6d:1b:90:70:0d:07:
         f0:7d:6e:07:75:97:d8:d5:d4:57:b1:2b:2d:02:f1:93:f3:2d:
         c3:5b:c9:dc:71:2b:f0:e4:55:f9:80:15:54:6a:b2:ae:e4:79:
         61:df:05:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhgqaT5+9GPNOtwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk
MzQzNTgyNjktNmRjOC00ZTc5LThhMDktY2E0ZGUzZjJlY2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh08jxNZ1kFCtyiOrapS2e0tRgjht4JMT/SN3
cSFH5TuA1fy2dDirU4cez12fd12LmQHzJKgMn39km+kxIeueh9gIkDjXeJK4lJ6r
5CefzN1XtKsJamUlf7t7Wyalbxul1+y7hNJoKz7c9uc+g1KAljDZBQ//u5dGsPym
JPufFrcdKISfslgLouJPApQVFo2Bq4lZJUIFOb3ffUfSGpVotQj49CwN+o6Cc1dZ
ZyxROpWzqjgeqmRTf+bPeFVMUp7Sf0avx73KPxHYGdh32RX3dAZhh7VHmTD8rumQ
PO2zroRO8h9H6kUMwcnadEVi/J83PKavsNtI2PlXhuK4itmmPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMHOskAatFLl8sSqX9KyrVpkx7cUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTk4ZjUxYTktMWE2ZC0z
N2UzLTg1NDgtMTExOWU2ZWYzYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIQkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkkEsz+aaSpeTbagWc/dOBFkhNkN2SmNH7TBhYn2Nqc3fcYFGD/XZqW
woY2JD0GpC7XRUrzis2x0HdyeLvU7S+3Ko6CSXac+aAF2aJL3tYU39eLp/QZ/LBa
HM1CuF2mVOkMOV/0T7XPt8/gkAQBAAy73C0OzObC+p1W03bOXShCrGoTprnXURFS
/LlqLGn15R6xBjZ+FMKB3/DDsv6KePjLZcXxXLhSFxyI1GVlPg8JXysuQ1htldsp
Z+Ol/gFUgtHyf+5i7mBMEAZDvEUWQm5Yhm0bkHANB/B9bgd1l9jV1FexKy0C8ZPz
LcNbydxxK/DkVfmAFVRqsq7keWHfBbw=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:58:37 2025 by rpki-client