Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/730c39f2-d6ea-32b8-bcdc-7ffd6b45faef.roa
File:                     730c39f2-d6ea-32b8-bcdc-7ffd6b45faef.roa (raw, json)
Hash identifier:          znfJ/xoOxRg7Ua6vL1UH78yTBGd7X8qwb90VGKqzsRo=
Subject key identifier:   E9:44:DE:2F:72:22:B0:E7:08:CD:22:4D:BA:19:FB:2C:0A:BB:61:B6
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285849BDDA20C123F7961AE46243C0
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/730c39f2-d6ea-32b8-bcdc-7ffd6b45faef.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     1239
IP address blocks:        104.218.198.0/24 maxlen: 24
                          104.218.199.0/24 maxlen: 24
                          104.251.93.0/24 maxlen: 24
                          104.251.94.0/24 maxlen: 24
                          207.230.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:20:c1:23:f7:96:1a:e4:62:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=5f6e1af2-c9c3-4504-a032-ecf5f0b18be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:ed:e6:2e:67:56:d4:99:ed:b1:ac:67:7c:
                    23:4d:8e:ab:dd:d6:5d:74:91:fb:89:f4:50:b0:b4:
                    f3:15:92:e6:e4:37:6a:e9:97:cb:18:81:41:73:bf:
                    9c:6b:50:4b:6f:13:39:ca:af:36:40:84:1a:45:38:
                    d6:e1:d9:da:ae:ea:b5:8a:b7:12:8b:09:ff:52:31:
                    1e:bd:b4:da:b5:4a:33:1c:c1:dd:29:ef:38:e1:8f:
                    70:3a:d8:25:be:c2:a4:1b:86:53:eb:05:af:de:4e:
                    e5:f8:ab:d6:6f:3c:48:2a:70:c8:24:ce:66:ae:a4:
                    88:93:8b:a0:05:60:23:c7:8a:1f:67:bc:b1:58:22:
                    32:f3:a5:6d:9d:cf:7a:17:0c:e4:b9:6a:ac:f6:64:
                    b5:42:7e:9a:c1:2a:e9:45:80:81:17:ce:4e:64:05:
                    97:49:e0:de:c5:05:fb:c8:7b:ca:82:08:e7:6c:0b:
                    49:11:8e:5b:11:f7:33:c4:24:0d:bf:00:35:4d:f1:
                    1a:8e:8f:cc:b8:74:ab:95:f5:15:6f:36:08:ea:d2:
                    cc:02:b1:fa:07:95:af:1e:4f:e8:5e:a2:52:47:97:
                    10:33:eb:ff:e8:e3:a7:4f:7d:a1:0d:d1:57:39:f8:
                    25:b1:98:66:c8:a4:24:18:15:b1:15:68:7a:c2:7f:
                    ea:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:44:DE:2F:72:22:B0:E7:08:CD:22:4D:BA:19:FB:2C:0A:BB:61:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/730c39f2-d6ea-32b8-bcdc-7ffd6b45faef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.198.0/23
                  104.251.93.0-104.251.94.255
                  207.230.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:99:da:e7:33:2b:72:f2:2e:32:ba:ea:b9:49:9e:d8:93:d6:
         90:d7:01:0c:5e:14:f7:e5:e6:46:c0:ee:9a:dd:0a:cb:88:d6:
         d3:58:9f:8a:2d:d0:4c:8e:a3:70:84:bd:39:8c:85:31:e6:ae:
         2c:b6:a7:27:f2:4a:00:88:ff:79:a1:78:0b:62:d0:12:65:fd:
         3f:91:aa:27:a3:9b:44:b0:4f:59:5a:10:9f:22:e3:cd:48:73:
         a1:4b:db:25:3f:a3:1f:18:b6:37:ca:51:12:5b:bf:59:a0:cb:
         9d:d7:19:f4:73:39:3c:c1:3d:f0:07:2c:7a:51:a7:a8:8d:fc:
         11:33:60:d6:c5:c9:bb:63:10:bb:e5:23:3f:e1:e2:28:c3:20:
         1b:9d:e7:cd:d2:99:00:8b:e9:08:84:a2:3b:6c:36:14:68:08:
         3f:30:76:cf:24:c2:fe:5d:1e:c2:82:ab:0c:be:1b:65:95:43:
         64:6b:5a:0c:22:36:34:1e:66:63:4b:38:2a:ee:95:0a:df:6e:
         99:26:ed:ca:88:98:42:7b:d1:60:f4:8b:d8:b8:81:cf:32:18:
         f9:cc:61:e1:5c:f2:6b:bb:00:a6:c5:5d:43:c0:1e:29:5e:cf:
         5e:0a:7b:af:39:a3:ec:3d:20:9c:ab:e1:10:80:86:8a:90:d6:
         24:29:a2:28
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEm92iDBI/eWGuRiQ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk
NWY2ZTFhZjItYzljMy00NTA0LWEwMzItZWNmNWYwYjE4YmU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp77t5i5nVtSZ7bGsZ3wjTY6r3dZddJH7ifRQ
sLTzFZLm5Ddq6ZfLGIFBc7+ca1BLbxM5yq82QIQaRTjW4dnaruq1ircSiwn/UjEe
vbTatUozHMHdKe844Y9wOtglvsKkG4ZT6wWv3k7l+KvWbzxIKnDIJM5mrqSIk4ug
BWAjx4ofZ7yxWCIy86Vtnc96FwzkuWqs9mS1Qn6awSrpRYCBF85OZAWXSeDexQX7
yHvKggjnbAtJEY5bEfczxCQNvwA1TfEajo/MuHSrlfUVbzYI6tLMArH6B5WvHk/o
XqJSR5cQM+v/6OOnT32hDdFXOfglsZhmyKQkGBWxFWh6wn/qrQIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFOlE3i9yIrDnCM0iTboZ+ywKu2G2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNzMwYzM5ZjItZDZlYS0z
MmI4LWJjZGMtN2ZmZDZiNDVmYWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBaNrGMAwD
BABo+10DBABo+14DBADP5nIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUZna5zMrcvIuMrrquUme2JPWkNcB
DF4U9+XmRsDumt0Ky4jW01ifii3QTI6jcIS9OYyFMeauLLanJ/JKAIj/eaF4C2LQ
EmX9P5GqJ6ObRLBPWVoQnyLjzUhzoUvbJT+jHxi2N8pRElu/WaDLndcZ9HM5PME9
8AcselGnqI38ETNg1sXJu2MQu+UjP+HiKMMgG53nzdKZAIvpCISiO2w2FGgIPzB2
zyTC/l0ewoKrDL4bZZVDZGtaDCI2NB5mY0s4Ku6VCt9umSbtyoiYQnvRYPSL2LiB
zzIY+cxh4Vzya7sApsVdQ8AeKV7PXgp7rzmj7D0gnKvhEICGipDWJCmiKA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:53:02 2025 by rpki-client