Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7c0fb89c-68e1-3007-94a9-c93f47ba43b6.roa
File:                     7c0fb89c-68e1-3007-94a9-c93f47ba43b6.roa (raw, json)
Hash identifier:          vm/JMgbPFBK/yjgOm0y9kbqYPJUvJsgDjIgGaOI92uQ=
Subject key identifier:   AF:9D:94:8A:BD:1A:9E:A7:D7:6A:CD:E2:D9:84:FA:3C:29:88:51:2D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F432858499F24AC04173466AA82E78400
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7c0fb89c-68e1-3007-94a9-c93f47ba43b6.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        104.134.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:ac:04:17:34:66:aa:82:e7:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=d1695530-1d06-4c58-9aff-07d6a857de2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8a:3c:48:38:09:26:50:cf:23:c9:2c:ad:d6:
                    7a:83:62:16:9c:57:62:61:75:50:70:b9:da:b0:0b:
                    30:0f:b5:5d:b0:30:79:94:c3:19:86:91:b5:2a:79:
                    7b:5c:ab:c4:ac:31:0a:bc:44:51:ac:43:92:cd:ac:
                    b1:b2:b7:27:85:26:2b:be:84:05:7d:45:50:ec:c7:
                    5b:b1:5a:ee:52:63:0b:66:22:e1:c2:1f:da:7f:06:
                    fb:c7:1c:5c:fe:32:06:89:0e:af:e2:ca:bd:40:f9:
                    fd:03:e6:37:0b:23:4e:77:8b:ea:99:e9:6c:c9:45:
                    52:1e:1e:0e:1a:85:eb:13:3d:e3:50:05:e1:b4:5c:
                    c5:2a:2c:67:ab:52:5f:29:28:23:5d:90:9c:07:07:
                    65:35:67:59:3b:51:89:e8:01:fc:cf:d9:ec:1a:db:
                    d5:9a:c8:ed:f5:1c:b0:a2:8c:b7:0c:43:0b:76:af:
                    2d:c3:8a:f4:ce:cb:ab:48:fb:f0:94:83:bd:09:0c:
                    57:4a:47:83:08:0d:56:85:b8:87:f5:77:a5:57:fb:
                    7b:9d:fd:51:f6:98:cd:b4:e6:b0:5f:12:ae:ac:b1:
                    02:e8:b1:a9:2b:fa:7d:ed:e3:2c:b4:f7:92:02:4c:
                    27:8f:e2:40:f1:b6:95:68:bc:b6:ed:56:ba:80:e2:
                    c1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9D:94:8A:BD:1A:9E:A7:D7:6A:CD:E2:D9:84:FA:3C:29:88:51:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/7c0fb89c-68e1-3007-94a9-c93f47ba43b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:96:e8:18:96:37:85:d4:37:2d:2c:e8:d3:f1:59:30:70:ef:
         e1:e3:63:75:f6:60:1a:ef:1e:11:35:7e:b7:8f:e8:4d:c3:df:
         71:ff:57:21:88:79:8e:c5:99:c6:35:a6:76:d8:a4:d5:fe:2f:
         99:cf:74:de:25:ab:d1:9b:65:43:af:7b:37:36:3a:37:88:50:
         f7:b3:3e:24:de:a1:12:a6:a4:b4:de:05:2b:75:38:26:df:9d:
         99:31:a1:bc:d4:34:a8:17:84:0b:69:c6:3a:e6:f1:50:51:f6:
         ff:81:45:8a:ff:5e:ac:6a:8f:4a:80:7b:ef:61:9f:da:44:b6:
         21:f3:04:77:1c:d0:be:ae:d7:35:f7:a9:70:cc:00:ec:4b:f6:
         ea:09:cb:b9:93:90:d5:1d:31:da:75:fa:10:08:e6:67:7b:f2:
         fe:21:54:3a:92:b5:0c:a7:16:7d:b9:3c:93:90:62:30:eb:21:
         b3:9f:3d:d9:23:1b:c6:d4:19:a8:c5:a4:32:10:e3:27:68:93:
         d0:05:9b:c3:6c:12:f8:d7:5a:5d:59:f2:b8:2f:1d:d2:2e:ec:
         56:05:e8:38:24:45:18:b8:17:40:9e:a0:06:e7:85:91:53:4e:
         6e:30:a4:4c:39:da:59:d7:20:ff:51:d7:33:2f:5f:3d:43:30:
         5a:d8:ff:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKwEFzRmqoLnhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk
ZDE2OTU1MzAtMWQwNi00YzU4LTlhZmYtMDdkNmE4NTdkZTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4o8SDgJJlDPI8ksrdZ6g2IWnFdiYXVQcLna
sAswD7VdsDB5lMMZhpG1Knl7XKvErDEKvERRrEOSzayxsrcnhSYrvoQFfUVQ7Mdb
sVruUmMLZiLhwh/afwb7xxxc/jIGiQ6v4sq9QPn9A+Y3CyNOd4vqmelsyUVSHh4O
GoXrEz3jUAXhtFzFKixnq1JfKSgjXZCcBwdlNWdZO1GJ6AH8z9nsGtvVmsjt9Ryw
ooy3DEMLdq8tw4r0zsurSPvwlIO9CQxXSkeDCA1WhbiH9XelV/t7nf1R9pjNtOaw
XxKurLEC6LGpK/p97eMstPeSAkwnj+JA8baVaLy27Va6gOLBswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK+dlIq9Gp6n12rN4tmE+jwpiFEtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvN2MwZmI4OWMtNjhlMS0z
MDA3LTk0YTktYzkzZjQ3YmE0M2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIbrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGmW6BiWN4XUNy0s6NPxWTBw7+HjY3X2YBrvHhE1freP6E3D33H/VyGI
eY7FmcY1pnbYpNX+L5nPdN4lq9GbZUOvezc2OjeIUPezPiTeoRKmpLTeBSt1OCbf
nZkxobzUNKgXhAtpxjrm8VBR9v+BRYr/Xqxqj0qAe+9hn9pEtiHzBHcc0L6u1zX3
qXDMAOxL9uoJy7mTkNUdMdp1+hAI5md78v4hVDqStQynFn25PJOQYjDrIbOfPdkj
G8bUGajFpDIQ4ydok9AFm8NsEvjXWl1Z8rgvHdIu7FYF6DgkRRi4F0CeoAbnhZFT
Tm4wpEw52lnXIP9R1zMvXz1DMFrY/zs=
-----END CERTIFICATE-----
Generated at Sun May 4 10:28:05 2025 by rpki-client