Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e015ab14-ca07-3927-ac76-d992b6ba0a5f.roa
File:                     e015ab14-ca07-3927-ac76-d992b6ba0a5f.roa (raw, json)
Hash identifier:          ezf9fb2udl6cYSrUnOSlHxW0m2GOz8pC8EuBCccxtl8=
Subject key identifier:   00:44:26:5A:0D:A8:8C:83:21:0D:6D:20:2B:50:7E:75:89:3E:77:F8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24AC53CAF0E6BC65315940
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e015ab14-ca07-3927-ac76-d992b6ba0a5f.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.134.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:ac:53:ca:f0:e6:bc:65:31:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=e4f77f5b-8935-4be7-8a44-737976a55b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5c:a8:5d:aa:83:5b:80:6c:b8:ca:87:f0:0e:
                    31:eb:ef:04:10:3e:51:52:3a:29:8a:01:fb:72:ca:
                    f1:a4:0d:6a:fd:e9:cf:57:71:76:f2:b9:5d:0e:7e:
                    b7:3d:3b:2b:31:29:ab:d1:93:a9:de:7e:4d:c4:ec:
                    f8:c5:76:35:0f:a7:36:a1:17:69:1d:67:c9:84:e1:
                    c6:f5:d4:2a:eb:37:e2:f9:56:90:db:8e:23:ba:26:
                    55:20:e4:94:95:8d:37:e8:0a:17:18:fe:13:58:be:
                    54:c9:2c:d8:d5:ce:53:20:f6:d8:47:e7:8e:bc:1f:
                    8a:db:f1:6b:13:94:3b:84:ee:63:d8:9b:64:67:37:
                    50:fe:b6:8b:87:3d:bf:f4:ba:f7:a9:b8:2f:d0:16:
                    bc:b6:45:28:8d:b8:5e:9c:0b:e1:94:8c:d6:a5:d5:
                    0a:26:14:8f:e0:2d:75:47:cc:b9:54:a6:42:60:bd:
                    6e:c1:d8:90:5f:e0:55:d0:23:61:0f:d4:c4:29:00:
                    1d:43:e5:56:0f:91:94:75:24:fe:32:96:b9:95:b0:
                    98:88:65:9d:47:ed:54:c4:ff:f3:b9:4a:07:8c:70:
                    ca:3b:f4:e7:99:26:08:6f:89:63:df:17:da:ea:29:
                    d4:3e:72:38:73:cf:33:28:9b:aa:b9:98:0e:2e:6b:
                    2c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:44:26:5A:0D:A8:8C:83:21:0D:6D:20:2B:50:7E:75:89:3E:77:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e015ab14-ca07-3927-ac76-d992b6ba0a5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:5c:af:f6:a6:be:8b:89:48:20:09:ff:1d:85:f3:af:64:c9:
         df:3a:e6:23:81:1f:04:e4:44:dd:ca:a7:92:99:37:d7:4e:42:
         ae:cc:a8:9e:48:dd:60:3f:6c:57:db:c8:9f:38:fc:8a:3d:02:
         cc:2b:7c:ee:5a:a5:94:3c:7c:f2:d8:8d:25:b4:8e:e4:a9:44:
         6e:04:34:08:7f:b6:ea:1a:93:86:ac:6c:58:b4:c9:47:d0:50:
         c3:2e:43:79:f9:6d:e4:fc:09:87:cf:72:71:a1:aa:f9:bc:cc:
         9c:e1:ba:3c:7d:7b:aa:23:51:c9:59:e9:17:bc:0c:d5:b2:99:
         d0:42:85:6f:18:a7:4e:43:7d:11:db:d3:56:2b:3e:64:47:df:
         e9:ab:ae:ee:38:a2:d9:b6:3f:04:54:b6:37:8a:88:d2:02:d8:
         f7:ef:00:ab:cd:df:81:f0:7a:1a:d7:19:88:0e:38:c0:a3:8b:
         59:6b:ce:3c:85:44:ab:aa:de:c7:ef:3e:43:d0:f6:44:b9:4f:
         fd:ca:e9:5d:86:9a:d1:60:81:70:eb:bb:5f:68:11:28:08:a5:
         01:53:95:a7:16:3b:15:6c:bf:b5:a3:4b:3a:c5:0f:75:36:4f:
         5d:67:64:98:fd:aa:f3:a7:29:73:e1:03:2c:6f:1e:74:72:ef:
         94:de:8e:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKxTyvDmvGUxWUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk
ZTRmNzdmNWItODkzNS00YmU3LThhNDQtNzM3OTc2YTU1YjMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1yoXaqDW4BsuMqH8A4x6+8EED5RUjopigH7
csrxpA1q/enPV3F28rldDn63PTsrMSmr0ZOp3n5NxOz4xXY1D6c2oRdpHWfJhOHG
9dQq6zfi+VaQ244juiZVIOSUlY036AoXGP4TWL5UySzY1c5TIPbYR+eOvB+K2/Fr
E5Q7hO5j2JtkZzdQ/raLhz2/9Lr3qbgv0Ba8tkUojbhenAvhlIzWpdUKJhSP4C11
R8y5VKZCYL1uwdiQX+BV0CNhD9TEKQAdQ+VWD5GUdST+Mpa5lbCYiGWdR+1UxP/z
uUoHjHDKO/TnmSYIb4lj3xfa6inUPnI4c88zKJuquZgOLmssLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFABEJloNqIyDIQ1tICtQfnWJPnf4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZTAxNWFiMTQtY2EwNy0z
OTI3LWFjNzYtZDk5MmI2YmEwYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKdcr/amvouJSCAJ/x2F869kyd865iOBHwTkRN3Kp5KZN9dOQq7MqJ5I
3WA/bFfbyJ84/Io9AswrfO5apZQ8fPLYjSW0juSpRG4ENAh/tuoak4asbFi0yUfQ
UMMuQ3n5beT8CYfPcnGhqvm8zJzhujx9e6ojUclZ6Re8DNWymdBChW8Yp05DfRHb
01YrPmRH3+mrru44otm2PwRUtjeKiNIC2PfvAKvN34HwehrXGYgOOMCji1lrzjyF
RKuq3sfvPkPQ9kS5T/3K6V2GmtFggXDru19oESgIpQFTlacWOxVsv7WjSzrFD3U2
T11nZJj9qvOnKXPhAyxvHnRy75Tejok=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:55:45 2025 by rpki-client