Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/30a653e2-3bea-3f49-a3c7-ee3c97de19f3.roa
File:                     30a653e2-3bea-3f49-a3c7-ee3c97de19f3.roa (raw, json)
Hash identifier:          km1g2NeBrNY1M2ATXIA8gQI6PwIPqLbr/f11iKGXRfg=
Subject key identifier:   99:F0:69:E0:EB:57:BF:71:04:BF:F0:B5:C6:12:3F:AE:E2:49:AB:80
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B540C8FDEE40987BD840DB300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/30a653e2-3bea-3f49-a3c7-ee3c97de19f3.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     15169
IP address blocks:        104.134.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:8f:de:e4:09:87:bd:84:0d:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=bd02d37c-a6ce-450d-9596-8f1b1384e5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ad:0d:b3:fc:7f:e0:7b:fe:ae:4f:cf:de:aa:
                    56:bd:33:30:82:5d:6d:37:86:1b:2d:58:ce:c1:0d:
                    b8:da:f1:15:b4:85:14:a8:f9:7c:c4:10:e1:eb:a3:
                    d2:2d:62:58:c8:35:8c:56:a6:5a:df:b5:26:96:78:
                    94:92:f6:d4:ae:c9:ab:6f:4a:5c:b4:7c:d1:4a:9e:
                    e7:a2:b3:dd:ee:91:8f:e2:a4:28:22:2c:08:88:5a:
                    2e:47:80:4f:88:0c:fe:5b:5b:9c:54:2b:7c:19:86:
                    d0:d3:24:ed:94:71:b1:b2:60:a5:1e:b3:81:41:af:
                    47:f5:47:d4:42:b8:35:aa:97:d9:e4:57:35:67:72:
                    6a:dd:0f:2b:a2:bc:b3:d8:00:ce:32:ee:65:43:10:
                    44:ac:b1:45:cc:a4:7a:92:88:03:a5:67:5c:09:0f:
                    76:98:f5:69:4f:23:28:d1:d4:00:d5:2b:3a:ca:cf:
                    7b:b2:e7:40:fb:5a:6b:77:5e:4a:1c:54:f1:2c:9e:
                    61:e6:92:db:12:bf:a4:9e:c1:91:a7:2c:21:ad:53:
                    81:de:a6:9a:50:1d:3f:c6:6b:07:7e:f1:b6:33:73:
                    2a:a0:67:46:70:02:71:e4:e1:38:d4:38:7b:44:7c:
                    79:2a:96:8c:74:4d:29:65:72:0d:59:5b:c1:df:25:
                    a5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F0:69:E0:EB:57:BF:71:04:BF:F0:B5:C6:12:3F:AE:E2:49:AB:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/30a653e2-3bea-3f49-a3c7-ee3c97de19f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:36:88:9d:9f:0d:cb:62:00:f7:c7:6f:fa:d9:1d:6f:a4:67:
         7f:4b:a5:f9:94:79:61:4a:78:0e:0f:47:c1:e6:4b:1b:8c:4f:
         ec:de:bb:6f:52:bb:4a:c4:95:b4:65:13:41:e6:e1:b3:63:81:
         d5:6a:18:b8:d5:c2:73:00:5e:03:ec:9b:15:94:e8:63:7b:2f:
         5f:12:de:31:1c:85:76:98:25:4e:78:9c:ac:d9:dc:f6:02:01:
         5c:f1:df:d3:d4:9c:fb:99:88:cc:7b:b8:13:2d:9b:a2:1f:45:
         3b:e1:54:7c:d6:01:3d:92:74:7c:c7:a3:ed:b6:7e:02:17:da:
         45:0a:f0:1e:c4:2e:17:65:e0:05:51:a4:90:ac:9d:7c:90:44:
         5c:94:ba:a8:ba:98:15:48:6e:33:d1:74:f4:03:6e:25:d2:85:
         34:1c:41:93:64:54:9e:23:48:8a:76:6d:06:1a:cc:9a:68:76:
         83:31:fe:46:cd:c0:2f:9f:2d:07:ba:78:e7:bd:71:1d:65:ad:
         8d:ec:b2:3b:c2:69:4b:fa:b2:54:50:c7:37:1c:f6:47:6b:70:
         f0:e0:11:46:ab:83:20:1c:3a:19:e8:00:55:05:84:a1:83:0d:
         59:b4:13:d2:c6:d3:70:85:a6:bc:8e:b5:b0:86:67:85:ae:09:
         e2:7f:00:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDI/e5AmHvYQNswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk
YmQwMmQzN2MtYTZjZS00NTBkLTk1OTYtOGYxYjEzODRlNWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra0Ns/x/4Hv+rk/P3qpWvTMwgl1tN4YbLVjO
wQ242vEVtIUUqPl8xBDh66PSLWJYyDWMVqZa37UmlniUkvbUrsmrb0pctHzRSp7n
orPd7pGP4qQoIiwIiFouR4BPiAz+W1ucVCt8GYbQ0yTtlHGxsmClHrOBQa9H9UfU
Qrg1qpfZ5Fc1Z3Jq3Q8roryz2ADOMu5lQxBErLFFzKR6kogDpWdcCQ92mPVpTyMo
0dQA1Ss6ys97sudA+1prd15KHFTxLJ5h5pLbEr+knsGRpywhrVOB3qaaUB0/xmsH
fvG2M3MqoGdGcAJx5OE41Dh7RHx5KpaMdE0pZXINWVvB3yWl7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJnwaeDrV79xBL/wtcYSP67iSauAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzBhNjUzZTItM2JlYS0z
ZjQ5LWEzYzctZWUzYzk3ZGUxOWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIanMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKU2iJ2fDctiAPfHb/rZHW+kZ39LpfmUeWFKeA4PR8HmSxuMT+zeu29S
u0rElbRlE0Hm4bNjgdVqGLjVwnMAXgPsmxWU6GN7L18S3jEchXaYJU54nKzZ3PYC
AVzx39PUnPuZiMx7uBMtm6IfRTvhVHzWAT2SdHzHo+22fgIX2kUK8B7ELhdl4AVR
pJCsnXyQRFyUuqi6mBVIbjPRdPQDbiXShTQcQZNkVJ4jSIp2bQYazJpodoMx/kbN
wC+fLQe6eOe9cR1lrY3ssjvCaUv6slRQxzcc9kdrcPDgEUargyAcOhnoAFUFhKGD
DVm0E9LG03CFpryOtbCGZ4WuCeJ/ACc=
-----END CERTIFICATE-----
Generated at Thu Oct 9 20:05:34 2025 by rpki-client