Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/005f580c-421b-3051-b63f-cd67f72e44ee.roa
File:                     005f580c-421b-3051-b63f-cd67f72e44ee.roa (raw, json)
Hash identifier:          im1J/JPDZ7GfWG0ZsMeubYsEJcaA+2GN4IwQUbZ8qaI=
Subject key identifier:   34:54:17:67:71:D9:88:71:8F:E8:06:50:E6:0B:4C:21:CB:93:09:A0
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F52483297D6DDE4AE4900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/005f580c-421b-3051-b63f-cd67f72e44ee.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.133.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:52:48:32:97:d6:dd:e4:ae:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=9848a0f1-b50e-4bf8-9aaa-e981e32e39f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:66:7e:9c:47:e4:d4:e7:b9:26:9b:75:38:b8:
                    cf:77:dd:e6:69:28:57:82:3b:50:b3:d6:ca:3f:4b:
                    06:f6:7f:0c:ff:00:75:86:e3:a7:3b:64:f4:c4:74:
                    4e:d8:14:cc:45:f3:7a:6d:7a:af:b1:15:75:8f:c7:
                    b3:fd:b6:e7:9d:ec:f6:85:da:2e:05:ab:c6:f7:2e:
                    39:1a:94:9c:f5:d7:89:99:4e:e2:95:e1:34:4f:c5:
                    35:1a:fb:79:58:22:8a:9e:75:7b:36:18:4a:50:f5:
                    5a:da:26:e2:02:c1:18:56:32:a9:4c:50:8e:1b:62:
                    16:f5:25:7b:57:fe:94:64:f2:82:4c:78:96:68:68:
                    20:53:89:c9:a6:4e:e3:ae:a8:b0:61:16:9a:8a:95:
                    13:ec:9e:cd:bb:c8:e3:38:6c:75:ad:b7:11:14:bd:
                    d4:cc:da:20:14:f1:c4:12:21:28:75:99:6b:4c:df:
                    25:4c:8a:c7:77:57:5b:4c:13:2b:74:4f:75:39:71:
                    e3:bc:5e:59:0a:93:a3:ed:dc:65:22:7c:68:70:f5:
                    08:7b:3b:d2:3e:d3:4e:3d:0f:0f:2f:aa:1e:2a:02:
                    53:aa:6b:a2:f6:ff:e1:3d:15:ff:ef:6d:5f:06:eb:
                    76:04:34:ff:5b:00:3b:e3:32:5b:04:29:cb:43:55:
                    34:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:54:17:67:71:D9:88:71:8F:E8:06:50:E6:0B:4C:21:CB:93:09:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/005f580c-421b-3051-b63f-cd67f72e44ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:23:ab:ab:b4:79:ef:a4:1d:71:3e:26:fe:82:5d:f8:b6:21:
         bb:a6:d4:51:30:13:62:d2:ee:25:81:d1:5c:a6:e4:db:01:43:
         d3:fb:a2:c7:df:51:56:12:52:17:9d:5b:e5:ec:88:81:71:0b:
         97:33:9e:1c:29:5d:3f:99:40:c4:f8:2b:1e:64:81:f3:1c:df:
         09:0a:1c:72:df:6a:87:10:6c:0e:f7:b6:bb:ed:97:21:d6:c8:
         7b:f6:e7:39:d4:43:10:47:f2:25:f7:af:97:0d:c9:4a:d2:99:
         85:fc:af:23:92:75:7f:00:4f:e9:23:39:03:08:38:53:d3:c1:
         76:35:79:7f:f4:bc:c6:a2:f0:8d:60:2b:e8:3a:ca:84:2d:75:
         bc:69:b7:2f:33:92:33:23:51:96:eb:ae:df:a3:0b:ab:2f:ff:
         39:ad:4b:32:89:7b:38:cd:26:fd:b8:43:87:17:6b:27:c8:51:
         e0:53:6e:f0:4d:88:de:fb:cb:ab:3c:b8:d6:f5:fc:f0:d9:cd:
         49:61:ae:aa:05:bd:5e:ee:ea:f6:fd:1b:1a:ff:ba:76:e3:d2:
         d5:65:92:ca:2f:7e:f6:62:98:b2:a0:01:c0:dd:74:54:e5:ea:
         5e:54:a5:7f:7a:c0:90:ee:17:87:31:02:19:69:18:66:e7:43:
         fd:2a:45:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL1JIMpfW3eSuSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk
OTg0OGEwZjEtYjUwZS00YmY4LTlhYWEtZTk4MWUzMmUzOWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mZ+nEfk1Oe5Jpt1OLjPd93maShXgjtQs9bK
P0sG9n8M/wB1huOnO2T0xHRO2BTMRfN6bXqvsRV1j8ez/bbnnez2hdouBavG9y45
GpSc9deJmU7ileE0T8U1Gvt5WCKKnnV7NhhKUPVa2ibiAsEYVjKpTFCOG2IW9SV7
V/6UZPKCTHiWaGggU4nJpk7jrqiwYRaaipUT7J7Nu8jjOGx1rbcRFL3UzNogFPHE
EiEodZlrTN8lTIrHd1dbTBMrdE91OXHjvF5ZCpOj7dxlInxocPUIezvSPtNOPQ8P
L6oeKgJTqmui9v/hPRX/721fBut2BDT/WwA74zJbBCnLQ1U0YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDRUF2dx2Yhxj+gGUOYLTCHLkwmgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMDA1ZjU4MGMtNDIxYi0z
MDUxLWI2M2YtY2Q2N2Y3MmU0NGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFgjq6u0ee+kHXE+Jv6CXfi2Ibum1FEwE2LS7iWB0Vym5NsBQ9P7osff
UVYSUhedW+XsiIFxC5cznhwpXT+ZQMT4Kx5kgfMc3wkKHHLfaocQbA73trvtlyHW
yHv25znUQxBH8iX3r5cNyUrSmYX8ryOSdX8AT+kjOQMIOFPTwXY1eX/0vMai8I1g
K+g6yoQtdbxpty8zkjMjUZbrrt+jC6sv/zmtSzKJezjNJv24Q4cXayfIUeBTbvBN
iN77y6s8uNb1/PDZzUlhrqoFvV7u6vb9Gxr/unbj0tVlksovfvZimLKgAcDddFTl
6l5UpX96wJDuF4cxAhlpGGbnQ/0qRbA=
-----END CERTIFICATE-----
Generated at Sun May 4 19:01:46 2025 by rpki-client