Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3a434729-cac5-3196-b991-47e7685c7e69.roa
File:                     3a434729-cac5-3196-b991-47e7685c7e69.roa (raw, json)
Hash identifier:          i3gZZM3qK58iX+a8/XZSrjIlNmLf4EG3iJN99N+U5OQ=
Subject key identifier:   D7:4A:E7:E6:8D:70:23:47:47:FF:B5:0E:DF:19:9E:CF:BB:31:2E:59
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584A7E7B8C885C2DF31F33885F80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3a434729-cac5-3196-b991-47e7685c7e69.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        104.237.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:8c:88:5c:2d:f3:1f:33:88:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=a8b567db-a768-40f1-b698-492fa03d65eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c0:32:f5:54:3f:17:5f:01:48:8a:1c:68:9b:
                    cf:27:97:3f:07:8c:7a:79:a4:9c:fa:d3:bb:a3:2b:
                    43:f7:43:4f:9d:60:f8:cc:80:0e:33:4b:42:d7:74:
                    74:53:bc:04:24:62:4c:d8:dd:17:e3:f2:64:4c:71:
                    7b:e2:86:58:4c:50:f5:82:39:47:fa:9f:05:56:6d:
                    6c:42:3f:6e:4e:8f:ea:87:8e:05:bd:6e:be:7d:1d:
                    af:9e:82:5d:18:ec:32:0f:b8:2f:76:45:74:0c:d7:
                    76:4d:ae:01:d9:83:ed:74:39:7d:18:91:13:4f:ed:
                    1e:f8:7b:2e:0d:3b:33:bc:81:f9:8d:db:b4:cb:38:
                    0e:47:74:4a:4a:60:63:3f:33:06:d7:35:d2:2e:f7:
                    e7:35:d7:db:96:19:29:33:2e:47:4f:2a:18:7d:4b:
                    22:7f:f6:2e:cc:93:31:a8:4c:a8:79:8c:04:f3:d0:
                    aa:d7:27:fa:26:35:73:cd:e0:fc:36:9d:bc:60:e4:
                    66:7c:26:9c:ff:d2:9b:eb:0f:d4:24:c3:11:8e:9e:
                    f3:f9:04:fc:8c:84:cf:8d:7f:32:6a:8e:c7:40:93:
                    6a:b5:d0:c6:dc:d7:55:84:b3:b7:e1:99:ce:6b:90:
                    50:4e:03:a1:29:2e:ad:7d:19:d6:30:cf:cc:18:bb:
                    dd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4A:E7:E6:8D:70:23:47:47:FF:B5:0E:DF:19:9E:CF:BB:31:2E:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3a434729-cac5-3196-b991-47e7685c7e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:c4:3b:f0:1c:08:db:46:fd:40:05:f0:28:9b:86:21:a4:fc:
         a2:53:21:a3:db:f3:a0:82:c6:43:7d:81:2a:8a:ed:23:70:a1:
         00:54:b6:b1:39:1f:7b:b9:ca:d6:99:07:f7:06:31:1e:c2:ab:
         30:ae:6e:60:1d:0c:97:54:0c:1c:e9:50:ea:65:e6:d5:57:1d:
         40:b6:89:d7:fc:37:a5:05:6c:de:00:fd:44:4a:e7:18:92:ef:
         bf:9f:32:8d:26:ac:fa:8c:65:fb:2e:d8:f8:0f:2f:48:72:be:
         4c:6a:8b:19:fd:59:71:dd:8c:7c:b2:19:49:ad:67:85:b6:d1:
         83:b4:4a:75:8f:62:09:c6:c1:0d:b8:8f:d3:ac:0a:ea:f5:d1:
         86:aa:85:a3:93:21:2f:6c:cc:95:3a:a5:4d:18:0e:1b:68:c2:
         dc:01:cd:9c:43:b2:c0:d1:fa:1f:e8:f1:ad:3c:5c:fa:71:eb:
         f0:c0:da:53:b0:77:f2:9a:5b:ab:41:00:b8:05:1b:41:c0:e8:
         69:6a:d1:bf:5e:31:b6:eb:e5:c9:ba:f3:63:df:d4:3c:bd:26:
         b0:fc:1b:84:2b:b8:b1:d7:0d:90:25:23:7b:b8:d8:e1:28:ed:
         8a:6a:9e:c2:e2:ab:55:82:7c:43:31:c2:69:b6:70:45:fc:35:
         58:03:8b:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4yIXC3zHzOIX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
YThiNTY3ZGItYTc2OC00MGYxLWI2OTgtNDkyZmEwM2Q2NWViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucAy9VQ/F18BSIocaJvPJ5c/B4x6eaSc+tO7
oytD90NPnWD4zIAOM0tC13R0U7wEJGJM2N0X4/JkTHF74oZYTFD1gjlH+p8FVm1s
Qj9uTo/qh44FvW6+fR2vnoJdGOwyD7gvdkV0DNd2Ta4B2YPtdDl9GJETT+0e+Hsu
DTszvIH5jdu0yzgOR3RKSmBjPzMG1zXSLvfnNdfblhkpMy5HTyoYfUsif/YuzJMx
qEyoeYwE89Cq1yf6JjVzzeD8Np28YORmfCac/9Kb6w/UJMMRjp7z+QT8jITPjX8y
ao7HQJNqtdDG3NdVhLO34ZnOa5BQTgOhKS6tfRnWMM/MGLvdOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNdK5+aNcCNHR/+1Dt8Zns+7MS5ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvM2E0MzQ3MjktY2FjNS0z
MTk2LWI5OTEtNDdlNzY4NWM3ZTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaO2qMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALPEO/AcCNtG/UAF8CibhiGk/KJTIaPb86CCxkN9gSqK7SNwoQBUtrE5
H3u5ytaZB/cGMR7CqzCubmAdDJdUDBzpUOpl5tVXHUC2idf8N6UFbN4A/URK5xiS
77+fMo0mrPqMZfsu2PgPL0hyvkxqixn9WXHdjHyyGUmtZ4W20YO0SnWPYgnGwQ24
j9OsCur10YaqhaOTIS9szJU6pU0YDhtowtwBzZxDssDR+h/o8a08XPpx6/DA2lOw
d/KaW6tBALgFG0HA6Glq0b9eMbbr5cm682Pf1Dy9JrD8G4QruLHXDZAlI3u42OEo
7YpqnsLiq1WCfEMxwmm2cEX8NVgDix0=
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:00:38 2025 by rpki-client