Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6b69d7c-c724-37c0-bf85-2a11784d4662.roa
File:                     a6b69d7c-c724-37c0-bf85-2a11784d4662.roa (raw, json)
Hash identifier:          aAwD1SyZZtEgx9EPbcu1sBGZBxhZtKf3DfWyKdAttAE=
Subject key identifier:   B4:9E:02:06:FA:91:99:28:62:04:55:C5:E5:4E:0B:06:C3:5E:A1:7B
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285849912F42596F92B1B8181C4E40
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6b69d7c-c724-37c0-bf85-2a11784d4662.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     41264
IP address blocks:        104.132.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:42:59:6f:92:b1:b8:18:1c:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=087d300d-ec07-4031-ac31-e288d6fb0066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:54:c9:c8:b0:4f:26:0c:31:81:6b:4d:3b:
                    60:8e:79:8c:85:6e:7e:b5:ed:1d:0f:a3:5e:6b:08:
                    ba:b8:e8:f6:0b:2b:15:8e:42:bb:64:8c:d5:f9:a2:
                    44:34:05:62:bd:52:42:a2:52:26:da:ec:8c:01:22:
                    c6:d4:f6:1a:e9:55:31:4c:31:9a:50:40:88:2c:44:
                    66:38:02:1d:6a:79:4a:39:63:88:70:eb:97:fc:46:
                    7b:f6:68:7e:66:93:65:f3:11:8c:87:d8:69:ed:23:
                    63:82:dd:71:41:fe:a5:48:b8:45:ab:b5:83:2a:9d:
                    0c:6b:8e:8a:d1:aa:62:fe:0e:75:83:52:48:4c:75:
                    ab:5c:8b:59:31:76:5b:5f:59:78:07:df:6c:b9:01:
                    e4:2f:97:7d:21:3d:c8:48:62:95:39:2b:a3:99:a3:
                    d7:8f:f9:60:59:57:6c:9c:0c:c7:7a:32:09:a5:35:
                    8d:cf:65:bd:1b:32:36:84:e0:ed:0b:38:ec:8d:39:
                    1a:4c:9e:10:7b:9a:ed:3e:1a:5c:68:3b:4a:6c:4d:
                    89:37:92:c0:40:d1:ba:51:29:40:08:1a:97:8f:31:
                    22:bf:2e:ef:84:74:57:09:9e:70:ee:12:58:87:98:
                    92:5e:bb:a2:52:55:2c:c5:4b:c1:64:4a:bc:11:24:
                    dd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9E:02:06:FA:91:99:28:62:04:55:C5:E5:4E:0B:06:C3:5E:A1:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6b69d7c-c724-37c0-bf85-2a11784d4662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:02:68:27:8f:d0:18:89:30:a9:d6:2b:1c:a3:1f:f5:03:eb:
         b1:60:52:95:df:94:0d:84:4a:0d:04:09:9e:d4:70:41:54:ff:
         c0:e8:b8:61:f0:cd:5f:34:86:09:93:ad:b0:79:9e:c3:79:4d:
         7c:85:19:76:23:03:90:7b:dc:4d:de:69:21:ea:32:18:11:1c:
         c2:3c:5b:cb:65:8b:e0:37:9f:d1:93:93:62:ee:34:71:fa:f2:
         12:07:4d:a8:b7:46:0d:f7:59:b3:72:11:0d:fc:7e:c9:8e:e1:
         c7:6f:d1:02:e6:6c:50:31:90:a7:fc:4c:2a:6a:a7:c8:bc:37:
         b7:3c:c2:20:bf:fb:d8:42:52:0f:e7:44:51:4c:0b:9b:3d:51:
         49:a8:de:83:e7:c2:17:de:55:7b:c7:bc:55:04:a4:55:f6:dc:
         fb:e5:e7:1c:2e:7e:fa:06:9a:ba:dd:45:5f:89:6e:07:67:62:
         ac:d7:7f:77:71:6a:27:0d:70:3d:2e:83:e5:b0:a1:b0:0b:b3:
         a4:71:b4:96:ca:5b:4c:3d:13:f5:68:1e:5b:8b:fd:f6:c7:fe:
         77:ad:00:60:cc:64:28:8f:60:e6:e1:9e:c5:e3:84:fb:b8:04:
         e4:41:86:55:7a:23:3c:46:6b:99:20:9f:89:a6:89:06:3c:5a:
         25:b7:a9:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRL0JZb5KxuBgcTkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk
MDg3ZDMwMGQtZWMwNy00MDMxLWFjMzEtZTI4OGQ2ZmIwMDY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWZUyciwTyYMMYFrTTtgjnmMhW5+te0dD6Ne
awi6uOj2CysVjkK7ZIzV+aJENAVivVJColIm2uyMASLG1PYa6VUxTDGaUECILERm
OAIdanlKOWOIcOuX/EZ79mh+ZpNl8xGMh9hp7SNjgt1xQf6lSLhFq7WDKp0Ma46K
0api/g51g1JITHWrXItZMXZbX1l4B99suQHkL5d9IT3ISGKVOSujmaPXj/lgWVds
nAzHejIJpTWNz2W9GzI2hODtCzjsjTkaTJ4Qe5rtPhpcaDtKbE2JN5LAQNG6USlA
CBqXjzEivy7vhHRXCZ5w7hJYh5iSXruiUlUsxUvBZEq8ESTd5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLSeAgb6kZkoYgRVxeVOCwbDXqF7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTZiNjlkN2MtYzcyNC0z
N2MwLWJmODUtMmExMTc4NGQ0NjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIROMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGYCaCeP0BiJMKnWKxyjH/UD67FgUpXflA2ESg0ECZ7UcEFU/8DouGHw
zV80hgmTrbB5nsN5TXyFGXYjA5B73E3eaSHqMhgRHMI8W8tli+A3n9GTk2LuNHH6
8hIHTai3Rg33WbNyEQ38fsmO4cdv0QLmbFAxkKf8TCpqp8i8N7c8wiC/+9hCUg/n
RFFMC5s9UUmo3oPnwhfeVXvHvFUEpFX23Pvl5xwufvoGmrrdRV+JbgdnYqzXf3dx
aicNcD0ug+WwobALs6RxtJbKW0w9E/VoHluL/fbH/netAGDMZCiPYObhnsXjhPu4
BORBhlV6IzxGa5kgn4mmiQY8WiW3qSA=
-----END CERTIFICATE-----
Generated at Sun May 4 18:21:34 2025 by rpki-client