Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/de618b5a-bd22-30b0-88bb-76e97b74308a.roa
File:                     de618b5a-bd22-30b0-88bb-76e97b74308a.roa (raw, json)
Hash identifier:          PD5/Q1a1hiJhyUPT0aHZoIkLE5WxXoFV6rZ3dkY1RHA=
Subject key identifier:   2E:7F:2C:47:2B:E3:4B:11:5A:61:0A:2A:38:12:DC:D2:83:11:01:72
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9EE9A62426B14C7255480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/de618b5a-bd22-30b0-88bb-76e97b74308a.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     15169
IP address blocks:        104.134.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:ee:9a:62:42:6b:14:c7:25:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=23eb76b3-2978-4a36-a666-a50d22a9519f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d4:a9:f3:ba:98:56:02:3d:bf:fc:cc:25:f6:
                    4f:5f:21:b2:91:e5:c0:92:72:f2:d8:28:5d:3f:93:
                    b2:74:8c:07:32:a7:51:2a:8e:0e:ae:a1:1b:29:c9:
                    e3:ed:ed:fc:6b:4e:39:66:ce:28:0f:1d:df:00:f3:
                    f9:75:bb:d2:97:4a:a5:f9:e6:8e:7b:5a:12:49:2a:
                    01:d4:21:f1:b0:26:46:b2:89:ae:b5:35:3a:a4:4b:
                    c5:2d:e8:26:f0:06:cf:ef:eb:a3:f4:74:7d:1d:bc:
                    4f:b1:09:ce:94:b8:8c:98:41:3a:1b:0e:05:fc:89:
                    46:30:be:6a:0e:59:db:17:06:a2:fd:d3:37:d3:07:
                    49:2e:52:9d:02:16:f9:7f:d3:6e:1d:3f:0c:b1:3f:
                    73:92:53:85:1c:dc:f0:79:c0:79:d6:0e:2c:d1:4a:
                    a7:f7:ad:4a:23:ba:bb:83:c7:6e:e0:8a:d7:73:9a:
                    c1:dc:11:95:d6:17:23:0e:af:39:fa:66:9f:9a:37:
                    eb:c6:dd:e6:50:92:c9:0e:b0:45:38:2b:fc:ff:78:
                    0b:dc:3e:d4:46:98:a7:4d:9f:42:56:51:bf:02:4c:
                    93:74:a8:79:90:69:a9:74:f5:0e:05:28:46:3f:d2:
                    7a:fa:d8:5d:d3:75:66:59:22:b1:06:7c:72:4d:f5:
                    51:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7F:2C:47:2B:E3:4B:11:5A:61:0A:2A:38:12:DC:D2:83:11:01:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/de618b5a-bd22-30b0-88bb-76e97b74308a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:97:d4:27:d9:60:f3:5d:a7:dc:21:b8:29:86:11:77:39:cd:
         a9:62:e4:0b:61:19:f6:7c:d7:15:71:05:6d:eb:77:ee:33:3f:
         0e:0c:0b:56:af:4c:c0:4b:35:2f:9f:3f:e3:da:b7:86:b3:25:
         49:67:25:8d:4c:ca:1f:aa:84:41:39:6f:0f:c7:bd:38:e8:06:
         40:4d:79:06:53:a9:3e:ac:6c:0a:38:e5:29:df:d5:c4:33:9a:
         e9:a4:55:60:48:46:b0:fc:5a:03:48:ed:b0:e5:c6:a4:f3:8c:
         92:ca:4a:b4:0e:f4:29:9b:5f:3b:67:ac:41:ad:df:c4:4e:0d:
         4c:1e:ea:c5:4b:34:87:ef:fe:e0:b9:60:75:56:e7:22:72:99:
         98:11:8a:0d:1a:62:9d:73:4f:86:8f:36:6e:66:d2:38:d7:2e:
         76:69:57:f4:4b:fe:5d:82:13:a6:69:f0:d4:4d:57:72:e1:f9:
         41:f8:7c:2a:a6:ca:2c:70:81:59:67:de:21:83:f6:0f:01:c6:
         e7:93:6b:22:b4:a2:c4:46:52:32:8e:09:31:96:35:64:ff:3c:
         53:52:34:3e:3b:d1:f1:7f:b1:c5:7b:59:c4:f2:2a:f8:9f:da:
         d8:62:16:2f:25:49:2e:a5:c7:69:99:fb:7b:60:ad:20:b3:8d:
         74:09:91:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+e6aYkJrFMclVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk
MjNlYjc2YjMtMjk3OC00YTM2LWE2NjYtYTUwZDIyYTk1MTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdSp87qYVgI9v/zMJfZPXyGykeXAknLy2Chd
P5OydIwHMqdRKo4OrqEbKcnj7e38a045Zs4oDx3fAPP5dbvSl0ql+eaOe1oSSSoB
1CHxsCZGsomutTU6pEvFLegm8AbP7+uj9HR9HbxPsQnOlLiMmEE6Gw4F/IlGML5q
DlnbFwai/dM30wdJLlKdAhb5f9NuHT8MsT9zklOFHNzwecB51g4s0Uqn961KI7q7
g8du4IrXc5rB3BGV1hcjDq85+mafmjfrxt3mUJLJDrBFOCv8/3gL3D7URpinTZ9C
VlG/AkyTdKh5kGmpdPUOBShGP9J6+thd03VmWSKxBnxyTfVRiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC5/LEcr40sRWmEKKjgS3NKDEQFyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZGU2MThiNWEtYmQyMi0z
MGIwLTg4YmItNzZlOTdiNzQzMDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIamMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADqX1CfZYPNdp9whuCmGEXc5zali5AthGfZ81xVxBW3rd+4zPw4MC1av
TMBLNS+fP+Pat4azJUlnJY1Myh+qhEE5bw/HvTjoBkBNeQZTqT6sbAo45Snf1cQz
mumkVWBIRrD8WgNI7bDlxqTzjJLKSrQO9CmbXztnrEGt38RODUwe6sVLNIfv/uC5
YHVW5yJymZgRig0aYp1zT4aPNm5m0jjXLnZpV/RL/l2CE6Zp8NRNV3Lh+UH4fCqm
yixwgVln3iGD9g8BxueTayK0osRGUjKOCTGWNWT/PFNSND470fF/scV7WcTyKvif
2thiFi8lSS6lx2mZ+3tgrSCzjXQJkUA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:58:06 2025 by rpki-client