Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ebb1d758-37c1-3afe-80cc-d54fed6665e8.roa
File:                     ebb1d758-37c1-3afe-80cc-d54fed6665e8.roa (raw, json)
Hash identifier:          ZGPFgD5iQ9lnnRNMbV+/+2CqpJWFWbjc5/qBHy5r+y4=
Subject key identifier:   4D:E3:D3:86:A5:CC:82:EE:E4:53:2C:15:45:5D:6E:27:89:1D:DE:12
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993FA0630DC666394D65C9A80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ebb1d758-37c1-3afe-80cc-d54fed6665e8.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     41264
IP address blocks:        104.133.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:fa:06:30:dc:66:63:94:d6:5c:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=5d23d77e-d33f-4bc9-bc05-59b23cd6ba0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bd:06:4c:20:fa:be:af:b1:9d:9a:b5:0e:9c:
                    3e:ea:83:ac:c5:39:40:25:af:24:02:9f:60:e6:c3:
                    ad:15:02:5f:92:f9:36:68:15:a7:ce:75:49:d2:ea:
                    e6:58:e4:ec:0e:b5:1a:2f:98:70:eb:e2:2b:27:59:
                    1b:7d:f9:14:09:f2:ae:be:8e:64:df:4b:4a:4f:a2:
                    58:e0:a3:ac:23:cf:56:3d:22:89:37:81:a8:1a:b1:
                    ba:18:a9:7d:b1:34:59:67:26:72:35:90:c4:37:e3:
                    fd:94:50:a7:59:3e:be:11:33:68:06:4c:c0:97:b5:
                    ca:d4:47:4c:c4:9b:55:d8:0b:72:f6:d8:3b:4c:75:
                    c2:62:2e:b5:ef:a5:05:90:69:47:4b:2e:bc:08:74:
                    4b:ce:e2:a3:cc:b0:26:1c:a7:1c:0a:01:ca:01:00:
                    0a:3f:64:3c:4b:72:eb:c9:25:df:66:f8:1d:51:a9:
                    0a:99:8a:fa:9a:1c:e2:45:52:20:f5:b0:c7:a1:28:
                    de:cc:a0:f1:53:de:13:f2:81:86:3b:37:97:22:cb:
                    b1:15:73:db:7f:96:50:91:16:00:c6:be:c2:6c:45:
                    dc:22:45:c0:4c:86:86:5a:62:5d:43:ed:cb:75:ba:
                    1c:5c:0d:28:6d:84:ea:2b:a3:a2:98:de:a0:5e:ab:
                    51:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E3:D3:86:A5:CC:82:EE:E4:53:2C:15:45:5D:6E:27:89:1D:DE:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ebb1d758-37c1-3afe-80cc-d54fed6665e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:78:bc:c2:f6:2d:29:72:b9:2f:fe:c2:a9:7f:87:b2:20:61:
         33:07:6f:43:dd:7f:c4:94:9e:bc:65:65:9c:b3:5a:5e:7b:a9:
         26:27:02:3d:30:47:22:11:2f:cd:16:bc:ca:46:3a:a0:59:b0:
         51:ce:58:ba:bd:52:63:57:ad:a8:11:38:d9:a1:70:a2:ab:ef:
         f2:4c:9a:e0:84:19:be:dd:68:21:33:30:ef:f1:16:58:9c:73:
         5a:57:84:87:d1:3f:aa:78:c4:57:7e:b4:cb:99:89:99:fd:63:
         dc:72:d7:63:9f:b7:4c:ef:c7:1e:f4:ad:99:de:6a:91:00:67:
         c1:77:38:95:1c:cf:13:ee:d5:8e:46:1e:21:c6:c5:40:32:14:
         80:f7:a9:11:59:c8:b9:39:1b:d5:88:26:42:77:c4:ab:36:27:
         50:85:44:21:2a:54:56:3e:89:87:be:39:f3:b2:7a:b8:4b:2f:
         ea:c9:03:2f:32:19:5e:e2:c1:88:2b:1b:d0:2a:62:1f:c5:2f:
         88:07:3b:b9:d8:01:b7:77:f8:64:d5:9a:fc:cc:66:c1:67:4b:
         f6:48:5a:0e:b2:cd:32:f7:ab:6b:3c:22:13:b0:2d:0c:07:c7:
         3c:17:5a:eb:11:3a:60:4a:df:89:2b:c7:94:3a:59:d0:56:5a:
         b9:18:44:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+gYw3GZjlNZcmoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk
NWQyM2Q3N2UtZDMzZi00YmM5LWJjMDUtNTliMjNjZDZiYTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl70GTCD6vq+xnZq1Dpw+6oOsxTlAJa8kAp9g
5sOtFQJfkvk2aBWnznVJ0urmWOTsDrUaL5hw6+IrJ1kbffkUCfKuvo5k30tKT6JY
4KOsI89WPSKJN4GoGrG6GKl9sTRZZyZyNZDEN+P9lFCnWT6+ETNoBkzAl7XK1EdM
xJtV2Aty9tg7THXCYi6176UFkGlHSy68CHRLzuKjzLAmHKccCgHKAQAKP2Q8S3Lr
ySXfZvgdUakKmYr6mhziRVIg9bDHoSjezKDxU94T8oGGOzeXIsuxFXPbf5ZQkRYA
xr7CbEXcIkXATIaGWmJdQ+3LdbocXA0obYTqK6OimN6gXqtRpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE3j04alzILu5FMsFUVdbieJHd4SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWJiMWQ3NTgtMzdjMS0z
YWZlLTgwY2MtZDU0ZmVkNjY2NWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADV4vML2LSlyuS/+wql/h7IgYTMHb0Pdf8SUnrxlZZyzWl57qSYnAj0w
RyIRL80WvMpGOqBZsFHOWLq9UmNXragRONmhcKKr7/JMmuCEGb7daCEzMO/xFlic
c1pXhIfRP6p4xFd+tMuZiZn9Y9xy12Oft0zvxx70rZneapEAZ8F3OJUczxPu1Y5G
HiHGxUAyFID3qRFZyLk5G9WIJkJ3xKs2J1CFRCEqVFY+iYe+OfOyerhLL+rJAy8y
GV7iwYgrG9AqYh/FL4gHO7nYAbd3+GTVmvzMZsFnS/ZIWg6yzTL3q2s8IhOwLQwH
xzwXWusROmBK34krx5Q6WdBWWrkYRPg=
-----END CERTIFICATE-----
Generated at Mon May 5 12:57:01 2025 by rpki-client