Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9005240c-1922-30f6-96e1-5ea1a15322b3.roa
File:                     9005240c-1922-30f6-96e1-5ea1a15322b3.roa (raw, json)
Hash identifier:          iK4cCTfEtwgd0GDl7/BdOfAAsXnoXZo61S0hHrUO2vk=
Subject key identifier:   8A:F4:DD:4B:9D:20:C2:56:C4:EA:D2:72:95:FA:B7:38:B9:87:55:C8
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F5410A9C235C051998080
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9005240c-1922-30f6-96e1-5ea1a15322b3.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:54:10:a9:c2:35:c0:51:99:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=f043560e-0877-4f93-a8a4-525b67e35f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:c7:77:f2:0c:69:df:75:b6:e4:cf:7a:2d:
                    74:dd:a4:ba:d8:a7:e5:c8:5c:35:70:27:0b:02:29:
                    1d:f5:f9:84:57:9a:6c:85:6c:d2:bd:b9:a6:5d:59:
                    96:1e:8f:d6:23:7c:df:75:97:ac:99:42:09:af:ca:
                    7c:d7:5c:8a:05:60:70:c6:31:3d:0a:70:94:18:54:
                    f4:84:d5:b9:a0:08:a5:1c:ce:89:78:28:88:43:b6:
                    42:76:52:d9:54:f8:62:61:c8:4a:65:f9:06:07:6c:
                    a7:ae:68:3e:79:d5:12:7d:e2:9e:84:ac:cc:6f:fa:
                    14:f9:a5:50:ff:70:1d:31:05:2c:49:fe:cb:a4:19:
                    c7:d7:f6:7b:90:15:36:29:d2:75:3f:06:18:44:31:
                    da:f5:65:78:fe:f7:34:cd:05:b6:1a:15:8c:66:d8:
                    09:09:4e:b3:cd:e4:92:ea:ad:13:d3:5f:bb:a6:46:
                    50:fe:e1:17:2c:7c:92:18:f7:b4:a2:82:30:5c:02:
                    b4:10:17:e7:5e:7e:e8:d2:b9:7c:38:41:39:53:02:
                    d5:09:fe:8b:a6:d3:34:d0:28:e7:fb:3c:39:e2:d5:
                    04:cc:d5:55:ee:1f:90:5e:31:4b:17:7b:98:75:05:
                    b6:1f:89:85:52:84:ac:24:38:9a:a3:a6:3f:2b:d9:
                    77:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F4:DD:4B:9D:20:C2:56:C4:EA:D2:72:95:FA:B7:38:B9:87:55:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/9005240c-1922-30f6-96e1-5ea1a15322b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:37:15:5d:f6:72:0a:34:ce:5e:20:89:1f:4e:55:90:1a:24:
         a7:67:bc:81:0d:23:1e:af:7d:10:8d:5a:45:77:23:4d:1d:80:
         6e:f3:49:b6:55:90:19:24:b3:91:79:3d:91:7c:e5:99:21:fe:
         a0:71:ca:ed:32:62:8a:aa:58:60:bb:d9:ce:71:e5:f6:bb:ac:
         33:e5:c2:27:03:d4:ca:66:fb:95:c8:b5:03:aa:b1:25:ff:7b:
         d6:af:24:3c:db:19:4e:78:b3:28:a2:ea:05:2d:f1:5a:5d:b8:
         5e:d1:23:37:1c:b7:bf:fe:e8:14:84:8b:c0:b9:d5:1b:da:2c:
         8a:92:b8:e1:36:72:c7:a5:6d:a2:44:d4:f1:52:d0:98:9a:4a:
         ca:bb:a0:82:72:9e:f6:21:af:ff:af:7c:03:4f:cc:8f:46:50:
         d3:01:a5:78:f1:6d:7a:c1:62:ef:17:23:b2:92:96:45:6c:e8:
         0e:17:60:16:00:12:06:b2:48:15:6c:fe:0b:79:80:0a:c3:a7:
         fb:cc:a2:b7:ec:ab:52:31:5e:f9:50:b4:30:86:59:9b:b5:35:
         53:84:7b:5c:72:fe:ae:46:84:1c:40:0a:6a:d7:2f:96:c0:78:
         81:9e:b0:22:2e:17:90:e4:54:22:d3:cd:e4:bf:46:74:2d:52:
         7e:4d:5a:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL1QQqcI1wFGZgIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk
ZjA0MzU2MGUtMDg3Ny00ZjkzLWE4YTQtNTI1YjY3ZTM1ZjU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfLHd/IMad91tuTPei103aS62KflyFw1cCcL
Aikd9fmEV5pshWzSvbmmXVmWHo/WI3zfdZesmUIJr8p811yKBWBwxjE9CnCUGFT0
hNW5oAilHM6JeCiIQ7ZCdlLZVPhiYchKZfkGB2ynrmg+edUSfeKehKzMb/oU+aVQ
/3AdMQUsSf7LpBnH1/Z7kBU2KdJ1PwYYRDHa9WV4/vc0zQW2GhWMZtgJCU6zzeSS
6q0T01+7pkZQ/uEXLHySGPe0ooIwXAK0EBfnXn7o0rl8OEE5UwLVCf6LptM00Cjn
+zw54tUEzNVV7h+QXjFLF3uYdQW2H4mFUoSsJDiao6Y/K9l36wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIr03UudIMJWxOrScpX6tzi5h1XIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTAwNTI0MGMtMTkyMi0z
MGY2LTk2ZTEtNWVhMWExNTMyMmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIk3FV32cgo0zl4giR9OVZAaJKdnvIENIx6vfRCNWkV3I00dgG7zSbZV
kBkks5F5PZF85Zkh/qBxyu0yYoqqWGC72c5x5fa7rDPlwicD1Mpm+5XItQOqsSX/
e9avJDzbGU54syii6gUt8VpduF7RIzcct7/+6BSEi8C51RvaLIqSuOE2cselbaJE
1PFS0JiaSsq7oIJynvYhr/+vfANPzI9GUNMBpXjxbXrBYu8XI7KSlkVs6A4XYBYA
EgaySBVs/gt5gArDp/vMorfsq1IxXvlQtDCGWZu1NVOEe1xy/q5GhBxACmrXL5bA
eIGesCIuF5DkVCLTzeS/RnQtUn5NWmU=
-----END CERTIFICATE-----
Generated at Sun May 4 18:55:46 2025 by rpki-client