Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/86315bc0-e17e-3585-a589-c134fdd71ff2.roa
File:                     86315bc0-e17e-3585-a589-c134fdd71ff2.roa (raw, json)
Hash identifier:          7qKWH+ksHRPct5DWckHphzAc+8pPeCe8aCutUqc9evg=
Subject key identifier:   55:E6:6E:68:7F:53:5C:CE:33:56:C9:EF:BC:CC:1F:E6:7C:FE:51:6D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849B6DF4975F7E71DCE590A4280
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/86315bc0-e17e-3585-a589-c134fdd71ff2.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     36383
IP address blocks:        104.135.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:49:75:f7:e7:1d:ce:59:0a:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=f4e782e7-477d-46f3-ac04-304634e6e3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ca:eb:19:a4:09:0c:82:96:3b:82:0e:e9:59:
                    b1:fc:2a:e1:f7:33:bb:dc:6f:27:6a:1c:cd:11:d2:
                    56:44:55:bb:f6:dd:68:7d:de:ae:63:fb:71:93:47:
                    b5:80:07:75:9b:4d:38:7b:d9:17:3f:88:40:00:da:
                    c3:55:37:0a:76:be:ee:c5:fa:b2:2c:95:c7:0c:87:
                    33:ee:81:76:36:8c:45:74:15:14:79:98:ab:dd:13:
                    8d:01:3a:c4:ae:f3:a7:12:2c:96:b2:26:24:fd:ac:
                    d4:85:17:13:02:f6:f6:0c:98:c7:3c:fb:d7:cc:28:
                    da:d6:d4:1c:d6:65:84:5a:50:4b:2d:a7:4f:41:2b:
                    99:35:9f:8b:b9:bc:cc:fc:24:fb:96:43:b8:3c:ff:
                    28:7e:20:67:0a:ac:09:72:8f:cf:15:a3:0d:bc:72:
                    8b:e8:a4:d4:81:5a:a5:88:44:bc:08:a7:ac:3e:54:
                    77:65:70:2e:f1:f2:74:5c:3a:82:40:62:97:ee:fa:
                    9c:8a:2f:cd:75:ac:e0:2f:f2:35:05:c8:f0:6c:3b:
                    40:70:02:73:62:84:94:eb:26:a1:49:a6:eb:91:de:
                    6b:b1:f0:b4:0c:60:fc:60:d3:b1:57:da:73:fa:ee:
                    5c:62:46:ff:a1:8a:32:ad:6c:a5:c3:99:16:f3:20:
                    79:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E6:6E:68:7F:53:5C:CE:33:56:C9:EF:BC:CC:1F:E6:7C:FE:51:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/86315bc0-e17e-3585-a589-c134fdd71ff2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.135.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:88:3e:e5:33:5a:ec:f8:36:de:08:e3:e7:6c:71:1a:34:4b:
         fd:16:ab:fb:26:fd:33:6a:1d:2c:eb:33:3c:fc:a0:34:9a:2f:
         bb:59:f8:6b:07:34:4d:d8:5b:0c:df:93:ec:91:ff:0f:b2:e6:
         02:d4:00:cb:be:db:95:74:01:d4:bf:41:79:d8:ff:29:f0:a6:
         4b:3c:6b:03:36:92:ad:77:59:c8:92:13:90:45:fa:67:2f:81:
         9e:04:0e:6f:46:d8:f4:67:7e:ad:3b:7c:23:e7:74:83:e3:92:
         47:a7:3b:30:b8:8a:96:8c:84:b5:be:f1:bb:6b:52:95:2e:b9:
         29:9c:51:97:2b:79:09:94:b8:cf:20:90:e1:8f:3e:43:19:bc:
         ed:f2:df:84:74:3c:45:dd:f3:76:41:85:91:aa:e2:aa:c2:b9:
         93:c0:be:ce:12:7d:41:1a:e3:e0:57:c8:eb:37:b2:48:70:d4:
         54:18:f7:65:41:3d:22:bf:f3:6f:3d:ba:46:85:bb:fb:45:02:
         29:15:fe:60:9d:ab:f1:89:45:87:e0:81:c6:88:8a:0c:24:8f:
         2e:bf:8c:5b:3c:10:99:8b:1e:9e:9a:3a:dd:b1:fd:06:f8:bb:
         53:dd:05:be:f1:22:fe:8b:4d:97:19:0f:4b:f8:ba:2c:d0:73:
         28:81:8c:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm230l19+cdzlkKQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk
ZjRlNzgyZTctNDc3ZC00NmYzLWFjMDQtMzA0NjM0ZTZlM2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48rrGaQJDIKWO4IO6Vmx/Crh9zO73G8nahzN
EdJWRFW79t1ofd6uY/txk0e1gAd1m004e9kXP4hAANrDVTcKdr7uxfqyLJXHDIcz
7oF2NoxFdBUUeZir3RONATrErvOnEiyWsiYk/azUhRcTAvb2DJjHPPvXzCja1tQc
1mWEWlBLLadPQSuZNZ+LubzM/CT7lkO4PP8ofiBnCqwJco/PFaMNvHKL6KTUgVql
iES8CKesPlR3ZXAu8fJ0XDqCQGKX7vqcii/NdazgL/I1BcjwbDtAcAJzYoSU6yah
Sabrkd5rsfC0DGD8YNOxV9pz+u5cYkb/oYoyrWylw5kW8yB5iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFXmbmh/U1zOM1bJ77zMH+Z8/lFtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvODYzMTViYzAtZTE3ZS0z
NTg1LWE1ODktYzEzNGZkZDcxZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaIcQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAmIPuUzWuz4Nt4I4+dscRo0S/0Wq/sm/TNqHSzrMzz8oDSaL7tZ+GsH
NE3YWwzfk+yR/w+y5gLUAMu+25V0AdS/QXnY/ynwpks8awM2kq13WciSE5BF+mcv
gZ4EDm9G2PRnfq07fCPndIPjkkenOzC4ipaMhLW+8btrUpUuuSmcUZcreQmUuM8g
kOGPPkMZvO3y34R0PEXd83ZBhZGq4qrCuZPAvs4SfUEa4+BXyOs3skhw1FQY92VB
PSK/8289ukaFu/tFAikV/mCdq/GJRYfggcaIigwkjy6/jFs8EJmLHp6aOt2x/Qb4
u1PdBb7xIv6LTZcZD0v4uizQcyiBjGw=
-----END CERTIFICATE-----
Generated at Mon May 5 15:42:12 2025 by rpki-client