Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/2792ac2f-d510-30ad-b0d2-5dc8ae836bd6.roa
File:                     2792ac2f-d510-30ad-b0d2-5dc8ae836bd6.roa (raw, json)
Hash identifier:          9atB5OjonHQFVsxcTP/wAipL/XHY5V2th1VyYacyobw=
Subject key identifier:   55:9B:74:1C:22:5B:EA:8C:CB:C5:20:CB:6B:41:22:0E:7D:2E:F0:EB
Certificate issuer:       /CN=1d255e93-b2f2-458d-ad07-ca05486ed239
Certificate serial:       010D0C9F43285849CBCF97A28D6ABD1AD2932700
Authority key identifier: 41:38:BF:DF:1B:CB:F8:04:2F:0B:CB:F3:B2:78:CE:51:03:39:C1:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/2792ac2f-d510-30ad-b0d2-5dc8ae836bd6.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        104.193.204.0/24 maxlen: 24
                          104.193.205.0/24 maxlen: 24
                          104.193.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/1d255e93-b2f2-458d-ad07-ca05486ed239.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/1d255e93-b2f2-458d-ad07-ca05486ed239.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:97:a2:8d:6a:bd:1a:d2:93:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d255e93-b2f2-458d-ad07-ca05486ed239
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=d087f967-5ac2-460f-8400-7042ec777098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:69:13:21:35:f2:de:52:ab:f4:2e:72:77:ed:
                    db:5e:17:ea:b6:b9:4f:3b:3a:3e:6d:34:91:00:ae:
                    d6:9b:7e:88:3b:3c:d9:8d:d6:6f:2a:27:45:59:02:
                    94:f6:5c:52:80:7a:f5:ec:64:89:fb:13:3e:5f:89:
                    b8:7c:7f:ad:66:30:5e:fb:13:66:17:8d:37:57:20:
                    33:51:73:53:ac:68:02:a2:4e:a4:2f:9c:7e:7a:ca:
                    88:47:ae:c8:9d:49:1e:76:e6:f5:92:96:d2:6e:84:
                    43:6e:95:57:4e:75:88:9b:15:6e:3c:a1:8e:e5:fd:
                    f7:49:f8:88:a5:1f:ea:19:c1:27:21:b3:21:33:f7:
                    ad:4e:6e:9c:81:c8:3b:01:6d:8a:6a:a4:8e:11:e5:
                    65:34:9f:5d:29:15:ad:cc:0f:ab:d3:bd:29:fc:87:
                    c1:94:01:0a:7c:d9:4a:f4:cc:88:44:a2:40:cb:94:
                    79:c7:aa:5b:6d:80:80:44:57:c1:1a:61:cf:dd:17:
                    6c:13:65:73:0a:f6:0a:93:6c:ed:a8:99:bd:23:50:
                    41:fe:e5:72:cb:d5:e8:91:92:ed:09:bf:34:14:98:
                    8e:ca:f0:3d:b3:62:eb:1b:1f:0b:d0:ae:b4:b8:4d:
                    29:b3:ae:ba:3c:24:cf:b8:dd:84:cd:c0:7f:ba:47:
                    20:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9B:74:1C:22:5B:EA:8C:CB:C5:20:CB:6B:41:22:0E:7D:2E:F0:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/2792ac2f-d510-30ad-b0d2-5dc8ae836bd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239/1d255e93-b2f2-458d-ad07-ca05486ed239.crl

            X509v3 Authority Key Identifier:
                keyid:41:38:BF:DF:1B:CB:F8:04:2F:0B:CB:F3:B2:78:CE:51:03:39:C1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d255e93-b2f2-458d-ad07-ca05486ed239.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.204.0/23
                  104.193.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:d0:72:78:45:c4:be:d8:3c:87:92:4c:32:ea:b6:0a:1b:54:
         01:3c:81:e8:e9:d8:57:e5:4a:14:8c:c0:10:ed:65:f4:0b:0c:
         00:73:23:df:bf:b4:14:2a:cd:bb:74:d0:0b:85:70:6e:5e:e6:
         92:f5:8d:9f:cb:33:79:66:be:f1:7a:45:b6:d2:09:53:58:79:
         3b:ba:d4:dd:7e:f2:4b:ed:a9:2a:77:43:e6:58:90:91:37:33:
         87:cc:3b:dc:80:cf:2c:6e:48:71:5d:3a:2a:8c:66:87:25:7f:
         d4:20:da:70:c9:30:06:eb:0c:e3:d2:33:62:8a:c8:f6:d0:8d:
         cb:0a:22:a1:d5:f5:c4:32:bb:1c:e8:84:f8:7a:45:a2:cb:6a:
         31:35:e7:6d:10:ce:ab:72:ec:a9:d9:d9:2b:f5:8d:50:84:a3:
         df:bb:1b:a1:a5:22:32:6a:b0:86:36:97:f3:22:9b:a3:12:16:
         76:0d:9f:7b:58:b8:1a:c0:eb:cb:9b:bd:69:fc:e0:84:67:f9:
         94:2f:74:80:72:55:c8:d2:95:a2:00:a8:91:ab:06:78:74:55:
         ba:7a:97:4c:ed:95:8c:5a:3e:c6:a2:73:f2:ea:ae:77:79:0b:
         c1:e1:1e:8d:44:c2:39:1b:74:31:f2:cb:7b:9f:20:13:a2:94:
         ef:a3:79:b1
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnLz5eijWq9GtKTJwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQyNTVlOTMtYjJmMi00NThkLWFkMDctY2EwNTQ4NmVk
MjM5MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk
ZDA4N2Y5NjctNWFjMi00NjBmLTg0MDAtNzA0MmVjNzc3MDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WkTITXy3lKr9C5yd+3bXhfqtrlPOzo+bTSR
AK7Wm36IOzzZjdZvKidFWQKU9lxSgHr17GSJ+xM+X4m4fH+tZjBe+xNmF403VyAz
UXNTrGgCok6kL5x+esqIR67InUkedub1kpbSboRDbpVXTnWImxVuPKGO5f33SfiI
pR/qGcEnIbMhM/etTm6cgcg7AW2KaqSOEeVlNJ9dKRWtzA+r070p/IfBlAEKfNlK
9MyIRKJAy5R5x6pbbYCARFfBGmHP3RdsE2VzCvYKk2ztqJm9I1BB/uVyy9XokZLt
Cb80FJiOyvA9s2LrGx8L0K60uE0ps666PCTPuN2EzcB/ukcgvQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFFWbdBwiW+qMy8Ugy2tBIg59LvDrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDI1
NWU5My1iMmYyLTQ1OGQtYWQwNy1jYTA1NDg2ZWQyMzkvMjc5MmFjMmYtZDUxMC0z
MGFkLWIwZDItNWRjOGFlODM2YmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWQyNTVlOTMtYjJmMi00NThkLWFk
MDctY2EwNTQ4NmVkMjM5LzFkMjU1ZTkzLWIyZjItNDU4ZC1hZDA3LWNhMDU0ODZl
ZDIzOS5jcmwwHwYDVR0jBBgwFoAUQTi/3xvL+AQvC8vzsnjOUQM5wfwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDI1NWU5My1iMmYyLTQ1OGQtYWQwNy1jYTA1
NDg2ZWQyMzkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBaMHMAwQA
aMHPMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAB/QcnhFxL7YPIeSTDLqtgobVAE8gejp2FflShSMwBDtZfQL
DABzI9+/tBQqzbt00AuFcG5e5pL1jZ/LM3lmvvF6RbbSCVNYeTu61N1+8kvtqSp3
Q+ZYkJE3M4fMO9yAzyxuSHFdOiqMZoclf9Qg2nDJMAbrDOPSM2KKyPbQjcsKIqHV
9cQyuxzohPh6RaLLajE1520Qzqty7KnZ2Sv1jVCEo9+7G6GlIjJqsIY2l/Mim6MS
FnYNn3tYuBrA68ubvWn84IRn+ZQvdIByVcjSlaIAqJGrBnh0Vbp6l0ztlYxaPsai
c/Lqrnd5C8HhHo1EwjkbdDHyy3ufIBOilO+jebE=
-----END CERTIFICATE-----
Generated at Sun May 11 16:01:27 2025 by rpki-client