Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/eaff3937-611c-3a53-b2f8-1169b21c859d.roa
File:                     eaff3937-611c-3a53-b2f8-1169b21c859d.roa (raw, json)
Hash identifier:          I+0CjYvcw1tQefbgBTMrFvSsAek2breR97iib4AMEQM=
Subject key identifier:   51:FC:98:D9:21:4C:95:18:51:71:2E:65:4C:5A:85:26:3D:0C:65:EB
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7E7B7B01E37B7A789BF6CD40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/eaff3937-611c-3a53-b2f8-1169b21c859d.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     395973
IP address blocks:        104.134.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:7b:01:e3:7b:7a:78:9b:f6:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=288b3699-3870-4fb9-b25d-d6dccf42b2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:52:65:2c:5a:95:d1:ce:9a:61:60:1c:f2:9d:
                    e6:50:df:a9:18:83:9e:af:5e:2f:50:57:05:3a:62:
                    19:4e:b7:01:41:f0:3f:f3:a3:2c:8a:23:5a:50:a3:
                    73:35:3b:b5:6a:b2:02:c0:f3:28:31:e3:37:24:d8:
                    03:45:8d:10:ad:ef:c2:03:a2:1a:f2:eb:f2:45:10:
                    48:ce:1f:82:7c:6d:01:61:73:a3:f8:c2:ad:da:d9:
                    c1:0f:bb:3c:95:bd:7a:35:e2:9a:4b:82:64:23:e0:
                    bc:a4:c6:e6:52:8c:11:4a:4c:4c:fc:f8:51:55:69:
                    d7:48:d5:c0:49:8d:3a:15:09:e4:bb:1f:8c:51:bb:
                    c2:08:b9:b8:8a:ca:47:c9:bf:3f:4f:75:e9:b2:c4:
                    ac:59:fc:9b:b4:23:a0:e5:31:43:3b:92:f5:16:5b:
                    60:56:d1:99:4b:d1:3d:e4:b5:ac:21:3c:4c:f6:9c:
                    8b:ad:a8:d8:e6:1f:ee:b3:53:e6:52:e3:47:84:b8:
                    40:80:b0:09:48:78:1e:95:50:83:57:d6:42:41:0b:
                    ba:88:09:e0:d3:ab:02:10:01:00:37:a4:90:44:96:
                    9f:d7:0d:c3:72:1b:d5:c6:9b:8f:f7:41:28:44:8a:
                    18:b6:63:ed:6d:58:e4:5b:fe:69:c5:51:32:dd:21:
                    e8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FC:98:D9:21:4C:95:18:51:71:2E:65:4C:5A:85:26:3D:0C:65:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/eaff3937-611c-3a53-b2f8-1169b21c859d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:07:5b:18:4f:44:df:77:a6:73:fb:a6:0e:a4:1f:cf:7f:5e:
         f0:55:f7:17:01:0e:5b:7d:7e:7c:38:d2:8c:4f:df:f2:4f:cd:
         d6:de:9f:d2:83:9e:2c:cd:ac:58:4d:85:a2:7a:9d:c0:5f:e8:
         c9:19:c3:59:37:fa:2e:5d:74:ff:7d:ae:e9:9a:41:3e:06:5d:
         92:67:23:3e:ca:5b:7d:27:f3:5b:58:2f:d6:9b:ca:62:7c:50:
         30:39:ee:93:1b:1a:c2:c7:1e:2b:5b:55:2b:f8:a9:61:b2:02:
         22:20:e2:a0:32:9b:13:3c:5e:41:5f:1b:6b:ea:d8:c9:a5:0c:
         66:22:72:40:0e:0c:bb:b6:8e:28:fd:bf:37:a5:9a:38:27:51:
         56:6a:38:32:f1:d2:97:15:5f:50:1e:e3:0b:8e:e8:8d:13:87:
         42:5e:1b:8e:24:46:ce:91:be:25:90:c2:f0:b7:35:4f:05:80:
         40:3b:55:09:f6:c3:27:e3:46:ea:78:b5:d6:30:14:e6:e8:02:
         64:79:07:e1:de:c7:ea:38:5d:c2:22:07:4a:7c:40:85:0f:d6:
         f2:5e:af:e8:92:a8:d4:68:46:15:f4:78:2a:ad:49:cd:09:39:
         68:fe:35:cd:33:37:a4:49:8b:e6:f8:40:ed:8e:31:39:21:bb:
         52:72:ea:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3sB43t6eJv2zUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
Mjg4YjM2OTktMzg3MC00ZmI5LWIyNWQtZDZkY2NmNDJiMmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlJlLFqV0c6aYWAc8p3mUN+pGIOer14vUFcF
OmIZTrcBQfA/86MsiiNaUKNzNTu1arICwPMoMeM3JNgDRY0Qre/CA6Ia8uvyRRBI
zh+CfG0BYXOj+MKt2tnBD7s8lb16NeKaS4JkI+C8pMbmUowRSkxM/PhRVWnXSNXA
SY06FQnkux+MUbvCCLm4ispHyb8/T3XpssSsWfybtCOg5TFDO5L1FltgVtGZS9E9
5LWsITxM9pyLrajY5h/us1PmUuNHhLhAgLAJSHgelVCDV9ZCQQu6iAng06sCEAEA
N6SQRJaf1w3DchvVxpuP90EoRIoYtmPtbVjkW/5pxVEy3SHoywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFH8mNkhTJUYUXEuZUxahSY9DGXrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWFmZjM5MzctNjExYy0z
YTUzLWIyZjgtMTE2OWIyMWM4NTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEYHWxhPRN93pnP7pg6kH89/XvBV9xcBDlt9fnw40oxP3/JPzdben9KD
nizNrFhNhaJ6ncBf6MkZw1k3+i5ddP99rumaQT4GXZJnIz7KW30n81tYL9abymJ8
UDA57pMbGsLHHitbVSv4qWGyAiIg4qAymxM8XkFfG2vq2MmlDGYickAODLu2jij9
vzelmjgnUVZqODLx0pcVX1Ae4wuO6I0Th0JeG44kRs6RviWQwvC3NU8FgEA7VQn2
wyfjRup4tdYwFOboAmR5B+Hex+o4XcIiB0p8QIUP1vJer+iSqNRoRhX0eCqtSc0J
OWj+Nc0zN6RJi+b4QO2OMTkhu1Jy6qo=
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:05:41 2025 by rpki-client