Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/284cff1d-bf40-31f6-b1ef-478dd2792b65.roa
File:                     284cff1d-bf40-31f6-b1ef-478dd2792b65.roa (raw, json)
Hash identifier:          tOb8I+yRZhywmH/tblsoaMpdzjAA6RafghXstvA6q6M=
Subject key identifier:   DB:06:30:B7:1F:C0:3C:93:B5:B0:91:25:71:4A:88:87:94:33:D5:14
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584AF2568D57BA07BFC4D0E051C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/284cff1d-bf40-31f6-b1ef-478dd2792b65.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     34164
IP address blocks:        104.77.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:8d:57:ba:07:bf:c4:d0:e0:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=d21d3e43-ba82-4230-9af8-a449375b8c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c2:a8:14:e1:93:d8:33:9e:3c:c1:f5:3b:61:
                    33:cc:5f:c5:23:5c:51:d8:8d:03:4b:91:58:2f:be:
                    65:99:5e:fd:88:09:a1:cf:7b:a8:0f:f0:2c:25:57:
                    ab:4b:39:fc:ca:09:c5:1e:ac:26:83:bf:db:76:21:
                    f9:73:c8:72:06:18:ab:4a:8b:40:4e:0f:89:73:72:
                    2b:81:47:af:12:9b:d9:29:12:64:84:da:d8:74:10:
                    9b:17:23:d3:70:c3:02:80:b1:e3:99:1a:4f:53:5f:
                    95:16:bc:a1:1b:5d:fb:4b:3a:d7:8b:0c:8e:e2:0e:
                    1d:f3:b9:fd:0e:90:5b:31:e8:30:b0:a7:49:20:f9:
                    57:d7:f0:06:4d:c7:55:d5:db:9e:54:94:76:3e:e4:
                    98:13:5c:81:4d:91:5c:73:ab:12:fa:f3:67:11:e8:
                    ed:0a:94:cd:fc:69:68:65:09:3d:d4:b8:e9:66:47:
                    35:19:ca:93:21:e3:c0:ec:73:c0:d9:e6:11:2d:b3:
                    41:e6:25:64:e3:04:a4:55:2f:44:5e:73:50:58:5a:
                    88:a3:2e:36:db:92:3c:30:47:46:f8:bd:70:c7:0c:
                    31:f5:d9:00:df:76:81:b6:17:7b:b2:b6:c4:5a:50:
                    78:c7:20:45:88:b1:dd:09:e0:67:60:17:27:85:10:
                    8b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:06:30:B7:1F:C0:3C:93:B5:B0:91:25:71:4A:88:87:94:33:D5:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/284cff1d-bf40-31f6-b1ef-478dd2792b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.77.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:8c:53:0c:62:ee:9d:f9:f5:86:ee:78:ab:eb:40:e9:c0:24:
         5a:b3:74:b1:f4:cb:f4:71:ae:47:da:0b:48:02:cf:4c:e3:e9:
         29:f1:b7:4c:67:f1:ba:8b:e0:93:ff:b1:1f:d1:82:d5:58:82:
         03:71:ff:fe:22:53:52:8f:80:d8:b4:c8:a4:bc:ae:fc:ec:a8:
         88:fb:17:bf:c7:c4:f2:54:32:1a:41:31:dd:52:d7:68:90:01:
         76:cd:e4:09:8c:8e:ca:89:0a:5b:f2:e0:63:c8:c7:90:73:c4:
         bf:08:07:77:08:ce:c9:2b:86:de:d1:94:8e:8b:3e:eb:cf:da:
         19:49:af:7f:e5:5d:3d:93:fe:14:81:56:f2:8e:23:db:45:f1:
         d8:f5:22:54:b4:35:59:16:be:6c:3a:35:54:2f:84:e2:57:34:
         8d:39:9d:76:0c:22:7f:ce:8c:94:ba:80:e2:42:d8:d2:71:2a:
         df:a5:c2:2b:a4:d3:15:f2:f6:0d:74:86:70:b0:9f:9a:ae:f1:
         55:7d:86:a4:0b:8e:9e:2a:48:a5:3b:2d:d1:8f:00:d0:37:42:
         d1:b6:11:9f:c5:38:38:50:e7:47:b8:4f:69:f5:b7:b0:9d:d8:
         40:03:a9:eb:06:8c:de:8a:23:61:c6:34:ea:b9:2e:4f:ac:c5:
         37:02:31:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVo1Xuge/xNDgUcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk
ZDIxZDNlNDMtYmE4Mi00MjMwLTlhZjgtYTQ0OTM3NWI4YzdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMKoFOGT2DOePMH1O2EzzF/FI1xR2I0DS5FY
L75lmV79iAmhz3uoD/AsJVerSzn8ygnFHqwmg7/bdiH5c8hyBhirSotATg+Jc3Ir
gUevEpvZKRJkhNrYdBCbFyPTcMMCgLHjmRpPU1+VFryhG137SzrXiwyO4g4d87n9
DpBbMegwsKdJIPlX1/AGTcdV1dueVJR2PuSYE1yBTZFcc6sS+vNnEejtCpTN/Glo
ZQk91LjpZkc1GcqTIePA7HPA2eYRLbNB5iVk4wSkVS9EXnNQWFqIoy4225I8MEdG
+L1wxwwx9dkA33aBthd7srbEWlB4xyBFiLHdCeBnYBcnhRCL1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNsGMLcfwDyTtbCRJXFKiIeUM9UUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjg0Y2ZmMWQtYmY0MC0z
MWY2LWIxZWYtNDc4ZGQyNzkyYjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaE3SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOMUwxi7p359YbueKvrQOnAJFqzdLH0y/RxrkfaC0gCz0zj6Snxt0xn
8bqL4JP/sR/RgtVYggNx//4iU1KPgNi0yKS8rvzsqIj7F7/HxPJUMhpBMd1S12iQ
AXbN5AmMjsqJClvy4GPIx5BzxL8IB3cIzskrht7RlI6LPuvP2hlJr3/lXT2T/hSB
VvKOI9tF8dj1IlS0NVkWvmw6NVQvhOJXNI05nXYMIn/OjJS6gOJC2NJxKt+lwiuk
0xXy9g10hnCwn5qu8VV9hqQLjp4qSKU7LdGPANA3QtG2EZ/FODhQ50e4T2n1t7Cd
2EADqesGjN6KI2HGNOq5Lk+sxTcCMRs=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:06:21 2025 by rpki-client