Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42f180de-0318-31a1-a52c-970141c3e9c7.roa
File:                     42f180de-0318-31a1-a52c-970141c3e9c7.roa (raw, json)
Hash identifier:          EHKKsy0Pgfdtkzihsm0KiEdwGGtBL/ezou4M5Nq0TWk=
Subject key identifier:   F2:0B:00:28:C8:D3:B3:18:86:56:D2:76:7D:5D:DA:BB:46:D6:35:64
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993F9E9AC5CE0DF59D1070300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42f180de-0318-31a1-a52c-970141c3e9c7.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     15169
IP address blocks:        104.134.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:f9:e9:ac:5c:e0:df:59:d1:07:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=ba97e58a-837c-4eb1-87ca-782b57e4d9b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:15:86:4c:13:d4:c1:cc:4f:b7:59:b0:32:31:
                    90:05:99:f8:fe:ad:ab:c0:88:3a:a2:04:e8:f8:80:
                    a4:47:c6:8a:00:25:7f:81:8b:5b:6a:36:9b:34:33:
                    26:6b:7a:1e:d4:20:f5:49:da:d6:e8:c6:19:bb:e2:
                    61:6a:d4:a0:46:0c:68:00:9f:75:1f:fb:4d:c7:9b:
                    9d:74:b4:d6:c4:49:6a:0a:f3:86:ad:c1:38:05:93:
                    8d:ff:6d:df:06:7b:1a:69:1e:8f:07:77:91:9d:a0:
                    78:41:fe:ba:bb:96:15:ea:cd:54:56:eb:a5:5e:2d:
                    74:15:1d:67:df:49:94:12:96:12:28:73:b2:d0:49:
                    3b:9d:5c:2a:34:4b:80:76:26:39:79:1d:0a:10:b6:
                    ed:f8:e9:5e:26:99:31:58:31:ca:3e:6d:af:0a:84:
                    2c:f9:4e:ec:9a:f0:12:67:19:19:27:79:0f:5e:57:
                    fb:3e:3f:61:14:fc:a4:17:0c:a8:6b:12:ba:9c:44:
                    42:f0:8e:d5:e2:a9:0a:2d:d7:75:37:c4:d0:28:6c:
                    f7:fc:42:6b:0c:cf:1d:b3:77:61:b6:38:20:20:a2:
                    2b:9c:d5:bb:52:78:a8:e5:b0:ba:8a:68:46:8b:19:
                    85:59:e2:36:6f:86:c9:79:dd:e8:bc:0b:d2:21:6d:
                    77:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:0B:00:28:C8:D3:B3:18:86:56:D2:76:7D:5D:DA:BB:46:D6:35:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/42f180de-0318-31a1-a52c-970141c3e9c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:34:07:f7:fd:1d:42:23:5d:b4:c1:0f:98:3b:4e:fd:b2:3d:
         7f:46:b4:f1:6e:ca:f2:cf:7a:a7:c1:96:ac:86:94:71:45:fb:
         b2:7c:26:d4:49:8d:ce:c9:21:b0:b1:45:9b:4e:dd:e2:ec:00:
         7a:be:f8:5f:a8:f5:dc:85:38:6d:df:d4:cb:25:fb:a3:93:b2:
         27:89:3e:26:0e:b6:0b:67:65:2e:7f:90:17:d2:91:1b:6b:ce:
         df:d1:c5:43:45:90:83:fe:b7:c1:5f:da:7b:4c:70:71:47:25:
         57:c3:69:33:a0:25:84:7a:bc:27:69:19:c7:5c:90:f7:5e:df:
         8f:47:10:66:be:95:d9:54:d6:ab:55:2e:8e:97:a8:1e:ab:12:
         b0:7a:34:57:42:cd:6b:b0:d1:07:4d:7d:e7:53:8f:0f:42:52:
         f0:21:16:66:21:79:52:be:e8:22:cb:5d:01:4f:03:1e:60:37:
         06:bd:ba:c0:9a:24:3f:5a:49:d6:8f:88:1c:5f:28:62:39:e7:
         4b:ba:1e:de:3b:d2:7c:5f:6d:9c:4e:a0:c0:50:87:8f:02:6a:
         5b:93:4e:36:75:d9:9c:0b:98:f4:c3:69:b2:29:41:73:33:86:
         2c:ac:65:c7:80:e2:03:ab:b8:5b:f2:19:77:b1:0e:2a:14:5f:
         65:99:22:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+emsXODfWdEHAwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk
YmE5N2U1OGEtODM3Yy00ZWIxLTg3Y2EtNzgyYjU3ZTRkOWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBWGTBPUwcxPt1mwMjGQBZn4/q2rwIg6ogTo
+ICkR8aKACV/gYtbajabNDMma3oe1CD1SdrW6MYZu+JhatSgRgxoAJ91H/tNx5ud
dLTWxElqCvOGrcE4BZON/23fBnsaaR6PB3eRnaB4Qf66u5YV6s1UVuulXi10FR1n
30mUEpYSKHOy0Ek7nVwqNEuAdiY5eR0KELbt+OleJpkxWDHKPm2vCoQs+U7smvAS
ZxkZJ3kPXlf7Pj9hFPykFwyoaxK6nERC8I7V4qkKLdd1N8TQKGz3/EJrDM8ds3dh
tjggIKIrnNW7Unio5bC6imhGixmFWeI2b4bJed3ovAvSIW13ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPILACjI07MYhlbSdn1d2rtG1jVkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNDJmMTgwZGUtMDMxOC0z
MWExLWE1MmMtOTcwMTQxYzNlOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaIaQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADo0B/f9HUIjXbTBD5g7Tv2yPX9GtPFuyvLPeqfBlqyGlHFF+7J8JtRJ
jc7JIbCxRZtO3eLsAHq++F+o9dyFOG3f1Msl+6OTsieJPiYOtgtnZS5/kBfSkRtr
zt/RxUNFkIP+t8Ff2ntMcHFHJVfDaTOgJYR6vCdpGcdckPde349HEGa+ldlU1qtV
Lo6XqB6rErB6NFdCzWuw0QdNfedTjw9CUvAhFmYheVK+6CLLXQFPAx5gNwa9usCa
JD9aSdaPiBxfKGI550u6Ht470nxfbZxOoMBQh48CaluTTjZ12ZwLmPTDabIpQXMz
hiysZceA4gOruFvyGXexDioUX2WZImY=
-----END CERTIFICATE-----
Generated at Sun May 4 11:01:40 2025 by rpki-client