Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e24b68be-f60c-30e3-9c1c-c81c0faf2f7e.roa
File:                     e24b68be-f60c-30e3-9c1c-c81c0faf2f7e.roa (raw, json)
Hash identifier:          Im1DnooevulahpYUQ6Igq3On/vWy4MmcohouflMKXiY=
Subject key identifier:   AE:A0:5A:54:2E:36:BA:49:76:C2:1B:7F:64:39:B1:7F:05:5B:A0:99
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350AFE216ABA7EE3C25D000
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e24b68be-f60c-30e3-9c1c-c81c0faf2f7e.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:af:e2:16:ab:a7:ee:3c:25:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=271c9b71-a598-4e38-8863-fe8eb7cbfbe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4c:75:37:84:c6:eb:6f:2c:8b:4c:95:d2:46:
                    a9:de:be:2d:d3:0a:e2:32:0c:d1:00:c7:99:72:1f:
                    6d:7d:f9:67:fe:f8:4c:8d:e2:08:b7:8f:fd:c2:31:
                    60:c0:99:7f:ac:59:67:47:02:0c:19:60:48:44:e8:
                    17:57:e5:2d:e6:e1:f4:1e:1b:54:75:65:6d:74:67:
                    33:30:2c:0e:71:b4:27:2f:ae:11:53:45:e0:a6:fc:
                    9e:d2:03:6a:cd:db:fc:0d:15:d8:0e:43:ef:a3:29:
                    f2:2b:34:88:70:e8:4d:14:4a:13:9d:97:27:d5:8d:
                    4b:af:51:8d:a8:65:10:81:17:b3:a3:17:06:95:86:
                    06:9f:aa:45:bf:59:ba:e3:ea:5b:d6:14:45:93:d8:
                    8d:b0:ea:c8:5a:db:32:a0:19:88:e9:5c:4e:ab:90:
                    c4:87:5e:f1:c2:49:67:97:fe:76:4d:79:f7:a1:66:
                    92:62:0f:80:65:0f:95:ca:18:b1:97:9f:1e:f2:8c:
                    3a:f0:78:77:7f:7f:fd:02:ee:b1:6f:d9:fa:01:9f:
                    3b:c9:a4:7c:d5:6b:74:fb:8c:83:e0:d5:fd:e7:80:
                    5d:73:ed:e4:82:f3:ae:a0:f0:5d:7e:e3:89:64:ef:
                    1f:a9:56:39:e1:0c:64:10:09:8d:9a:60:94:8f:e6:
                    fd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A0:5A:54:2E:36:BA:49:76:C2:1B:7F:64:39:B1:7F:05:5B:A0:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/e24b68be-f60c-30e3-9c1c-c81c0faf2f7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:36:7c:a2:85:aa:52:37:3e:ba:30:a5:ad:1e:e3:3d:ac:12:
         bb:2c:cb:06:9d:39:df:3c:1e:13:f9:33:5e:21:b8:cb:51:01:
         34:6d:91:3c:aa:4f:9d:f5:93:a5:12:fe:28:9b:7e:21:01:5b:
         0f:36:1f:5b:1c:5f:8f:73:ed:ab:89:97:68:dc:f5:3d:c3:40:
         2a:cf:4a:7e:0e:34:0b:3e:d7:da:93:40:2c:b8:58:f7:7f:4c:
         c6:7b:8b:57:46:5b:68:54:51:23:29:4f:7a:02:0a:5a:c2:47:
         16:a8:f8:d0:24:58:87:a8:3a:ef:44:e0:a7:0f:c8:56:54:04:
         6a:ad:67:9d:2e:e1:8a:9b:d8:a4:b2:50:4c:c9:6c:31:7c:63:
         25:51:1b:15:5e:f6:be:83:23:95:3e:3e:52:89:cc:b0:81:69:
         5b:c5:82:03:1b:67:b7:83:bf:85:a5:72:a7:80:ce:38:98:4c:
         29:d1:f6:79:8a:59:00:d4:f6:b7:d1:ad:26:e7:ec:95:09:cc:
         33:fc:da:bf:5b:a5:3b:af:a7:94:92:c2:07:4a:2b:3d:b0:57:
         1f:eb:79:68:78:10:af:84:f6:97:29:93:da:45:61:f7:d1:63:
         14:5f:f3:24:e6:23:7e:49:08:1b:74:ce:98:cc:b4:a1:f0:44:
         6e:ed:09:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUK/iFqun7jwl0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk
MjcxYzliNzEtYTU5OC00ZTM4LTg4NjMtZmU4ZWI3Y2JmYmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUx1N4TG628si0yV0kap3r4t0wriMgzRAMeZ
ch9tffln/vhMjeIIt4/9wjFgwJl/rFlnRwIMGWBIROgXV+Ut5uH0HhtUdWVtdGcz
MCwOcbQnL64RU0Xgpvye0gNqzdv8DRXYDkPvoynyKzSIcOhNFEoTnZcn1Y1Lr1GN
qGUQgRezoxcGlYYGn6pFv1m64+pb1hRFk9iNsOrIWtsyoBmI6VxOq5DEh17xwkln
l/52TXn3oWaSYg+AZQ+Vyhixl58e8ow68Hh3f3/9Au6xb9n6AZ87yaR81Wt0+4yD
4NX954Bdc+3kgvOuoPBdfuOJZO8fqVY54QxkEAmNmmCUj+b9TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK6gWlQuNrpJdsIbf2Q5sX8FW6CZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZTI0YjY4YmUtZjYwYy0z
MGUzLTljMWMtYzgxYzBmYWYyZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABM2fKKFqlI3Prowpa0e4z2sErssywadOd88HhP5M14huMtRATRtkTyq
T531k6US/iibfiEBWw82H1scX49z7auJl2jc9T3DQCrPSn4ONAs+19qTQCy4WPd/
TMZ7i1dGW2hUUSMpT3oCClrCRxao+NAkWIeoOu9E4KcPyFZUBGqtZ50u4Yqb2KSy
UEzJbDF8YyVRGxVe9r6DI5U+PlKJzLCBaVvFggMbZ7eDv4WlcqeAzjiYTCnR9nmK
WQDU9rfRrSbn7JUJzDP82r9bpTuvp5SSwgdKKz2wVx/reWh4EK+E9pcpk9pFYffR
YxRf8yTmI35JCBt0zpjMtKHwRG7tCb8=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:05:51 2025 by rpki-client