Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa
File:                     2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa (raw, json)
Hash identifier:          jLEXtjmdBzmdzk3iNkM+cbIumy0c/AxKFdygsF+wIxk=
Subject key identifier:   ED:76:B2:0F:0C:51:06:9B:C8:AA:EE:9C:35:87:CF:9B:04:38:C8:08
Certificate issuer:       /CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b
Certificate serial:       010D0C9F4328584AECC12C86214ECA78DA3B1C40
Authority key identifier: B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     1299
IP address blocks:        104.247.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:2c:86:21:4e:ca:78:da:3b:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b078f7a-8bc4-46c3-b9cb-7330775a780b
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=fe7f2072-3b33-456f-a907-7209f366d995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5a:75:cb:ef:0e:5f:fd:25:ee:ff:dd:3b:4f:
                    89:fa:8b:f3:aa:3b:48:4e:f4:db:65:b2:d7:c9:21:
                    19:86:10:ae:a3:c4:fb:12:8e:bc:01:55:e2:59:ce:
                    fe:fb:d1:2d:1f:b5:6a:26:bc:15:6b:75:40:a2:ce:
                    0d:19:eb:c6:a1:11:89:f9:87:53:32:06:f8:89:fc:
                    3f:c2:23:d9:0b:20:e4:3e:05:95:6b:0a:cc:c3:e6:
                    49:3a:3e:cb:50:52:26:99:65:0a:1d:de:47:d0:da:
                    77:1a:84:8d:e0:93:74:7f:d3:df:8a:9e:64:7a:11:
                    0e:66:c7:36:85:56:28:67:6e:59:ae:e7:98:45:c8:
                    54:19:82:01:91:bb:21:d5:dd:d1:78:95:80:1b:92:
                    84:a8:68:d9:dd:99:df:cc:d6:07:10:e2:97:35:59:
                    a9:e2:3c:de:26:b3:76:bf:df:6b:6e:af:23:c5:4d:
                    55:99:64:72:a1:be:b6:a8:89:0b:b1:e6:be:f6:c8:
                    d9:4d:64:3e:47:b6:7a:43:a6:90:60:c5:3a:2f:15:
                    5d:69:bc:cb:4a:38:ac:bc:b4:11:c6:37:ab:0e:34:
                    47:a6:81:b7:5d:05:3a:59:0e:29:7f:7e:b3:0c:6e:
                    e3:5f:dc:63:e3:0b:fc:03:9e:d1:b1:4c:0d:2f:5d:
                    11:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:76:B2:0F:0C:51:06:9B:C8:AA:EE:9C:35:87:CF:9B:04:38:C8:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/2a9f1de8-5c57-323b-af9a-2f5ed8ca7d37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b/0b078f7a-8bc4-46c3-b9cb-7330775a780b.crl

            X509v3 Authority Key Identifier:
                keyid:B7:6E:3C:7F:B8:C4:10:8A:E7:BE:50:34:EC:0A:23:E3:CC:5E:EC:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b078f7a-8bc4-46c3-b9cb-7330775a780b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:17:b9:8a:7e:b3:59:96:ae:d7:c9:a7:ff:2a:a5:c8:1b:a6:
         94:55:65:07:e7:95:1f:93:2c:d4:27:49:1e:03:40:a1:23:71:
         02:a1:e9:01:54:9b:cd:17:76:8f:dc:6a:c3:d4:fe:6a:c3:87:
         c0:71:d8:5f:73:a3:2c:3f:61:1a:fe:d7:c6:55:c8:44:5f:3f:
         73:bd:53:ff:b7:9f:90:25:51:8c:3d:1b:fd:97:b4:e0:56:63:
         4e:19:92:a1:0a:5e:f9:9d:6d:aa:2f:1c:29:3b:96:06:9a:b1:
         f3:6b:df:31:35:0d:3d:6d:19:13:dd:23:7b:3c:db:3e:b8:a4:
         2f:1e:de:02:9f:8c:ad:e9:49:43:01:c1:56:fa:c9:82:be:60:
         c9:cd:0d:e4:87:e9:78:61:d3:b5:f7:bc:a1:f5:90:5d:0a:c6:
         e1:8f:ac:13:77:1c:25:42:8d:61:2f:76:06:ce:88:f3:94:dc:
         df:92:d5:2d:a8:fd:bd:b0:ee:66:f5:db:2c:23:e3:df:d1:41:
         c2:ff:6d:6b:b5:00:85:97:58:8f:ae:c9:8f:36:d1:82:a6:ad:
         13:d1:07:19:03:04:eb:db:1c:64:b0:8d:4a:f6:bd:2d:a5:3a:
         46:d3:5f:56:e3:86:78:53:7c:3e:99:9c:90:51:c3:13:39:29:
         12:d5:8d:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswSyGIU7KeNo7HEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGIwNzhmN2EtOGJjNC00NmMzLWI5Y2ItNzMzMDc3NWE3
ODBiMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
ZmU3ZjIwNzItM2IzMy00NTZmLWE5MDctNzIwOWYzNjZkOTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1p1y+8OX/0l7v/dO0+J+ovzqjtITvTbZbLX
ySEZhhCuo8T7Eo68AVXiWc7++9EtH7VqJrwVa3VAos4NGevGoRGJ+YdTMgb4ifw/
wiPZCyDkPgWVawrMw+ZJOj7LUFImmWUKHd5H0Np3GoSN4JN0f9Pfip5kehEOZsc2
hVYoZ25ZrueYRchUGYIBkbsh1d3ReJWAG5KEqGjZ3ZnfzNYHEOKXNVmp4jzeJrN2
v99rbq8jxU1VmWRyob62qIkLsea+9sjZTWQ+R7Z6Q6aQYMU6LxVdabzLSjisvLQR
xjerDjRHpoG3XQU6WQ4pf36zDG7jX9xj4wv8A57RsUwNL10RXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO12sg8MUQabyKrunDWHz5sEOMgIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3
OGY3YS04YmM0LTQ2YzMtYjljYi03MzMwNzc1YTc4MGIvMmE5ZjFkZTgtNWM1Ny0z
MjNiLWFmOWEtMmY1ZWQ4Y2E3ZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGIwNzhmN2EtOGJjNC00NmMzLWI5
Y2ItNzMzMDc3NWE3ODBiLzBiMDc4ZjdhLThiYzQtNDZjMy1iOWNiLTczMzA3NzVh
NzgwYi5jcmwwHwYDVR0jBBgwFoAUt248f7jEEIrnvlA07Aoj48xe7PEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYjA3OGY3YS04YmM0LTQ2YzMtYjljYi03MzMw
Nzc1YTc4MGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPd1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIMXuYp+s1mWrtfJp/8qpcgbppRVZQfnlR+TLNQnSR4DQKEjcQKh6QFU
m80Xdo/casPU/mrDh8Bx2F9zoyw/YRr+18ZVyERfP3O9U/+3n5AlUYw9G/2XtOBW
Y04ZkqEKXvmdbaovHCk7lgaasfNr3zE1DT1tGRPdI3s82z64pC8e3gKfjK3pSUMB
wVb6yYK+YMnNDeSH6Xhh07X3vKH1kF0KxuGPrBN3HCVCjWEvdgbOiPOU3N+S1S2o
/b2w7mb12ywj49/RQcL/bWu1AIWXWI+uyY820YKmrRPRBxkDBOvbHGSwjUr2vS2l
OkbTX1bjhnhTfD6ZnJBRwxM5KRLVjbk=
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:40:44 2025 by rpki-client