Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4aa658f5-2331-39df-b727-3a3852595351.roa
File:                     4aa658f5-2331-39df-b727-3a3852595351.roa (raw, json)
Hash identifier:          /zCSE/S/PPY4PFeTDEGTsbLijppuDk82j0a9J5zyios=
Subject key identifier:   80:A7:7D:1D:AA:C8:9D:2C:6B:56:65:D0:A3:8E:E8:E7:20:5B:08:FE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5F374B003FEC4B2AC13D8AC0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4aa658f5-2331-39df-b727-3a3852595351.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     36411
IP address blocks:        104.134.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:4b:00:3f:ec:4b:2a:c1:3d:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=13445786-7428-4453-b630-11b31ecd6b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b2:82:71:77:0b:d5:b5:f3:79:e1:72:ad:43:
                    17:97:48:6a:ed:74:16:2d:32:66:dc:be:7d:9d:2c:
                    70:91:d5:c6:28:7a:c3:a2:0d:c6:7f:df:09:ae:f4:
                    fd:0f:a4:0b:61:f8:b3:dc:d8:df:a3:81:6f:03:2d:
                    7e:09:2d:dc:f6:96:b3:c4:86:9b:41:12:6e:0d:52:
                    c5:c5:94:22:c3:18:87:27:b9:e8:bb:b6:52:9a:13:
                    ff:e3:6c:5d:1c:d0:d5:8c:07:71:19:55:fc:67:ef:
                    e1:70:a7:be:16:85:28:82:cd:8a:10:3e:b5:e6:5b:
                    22:ec:9b:f6:05:72:f8:22:43:2c:22:3b:ac:38:ba:
                    78:96:3e:31:45:2e:69:24:be:95:a9:45:eb:19:9d:
                    42:36:fa:3d:a8:af:7f:3b:f8:cf:09:12:f3:03:ee:
                    7c:eb:7d:1c:da:05:c3:e7:b0:cb:a3:86:82:da:12:
                    fa:29:0b:d2:c1:4d:bb:75:0f:05:ae:38:53:eb:43:
                    be:c3:98:97:56:8d:33:bb:fd:55:6e:04:f8:25:d4:
                    03:92:03:15:15:5f:51:ff:67:3d:14:f0:7e:15:87:
                    f4:1c:57:22:d0:41:5a:38:f0:85:0a:f1:dc:af:71:
                    36:c7:2d:cd:91:5f:56:f8:fd:ff:87:82:d1:70:97:
                    04:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A7:7D:1D:AA:C8:9D:2C:6B:56:65:D0:A3:8E:E8:E7:20:5B:08:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/4aa658f5-2331-39df-b727-3a3852595351.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:40:ef:c8:e0:b3:1f:7e:9c:62:c1:ed:1b:b4:98:ac:14:67:
         0c:c1:4c:86:81:5f:91:91:63:07:58:8b:20:04:ba:32:48:00:
         8c:e1:56:fa:6f:68:9b:ab:d1:40:00:7d:1a:d9:c5:15:4c:38:
         76:d5:4e:3e:a3:87:93:e9:e9:0a:5d:96:c7:2a:5a:c4:59:1f:
         e8:9c:da:0a:40:a5:ce:af:38:2d:de:61:15:ae:c8:b3:63:e8:
         9f:0e:10:af:e0:3f:c2:63:d6:0e:88:e6:53:b0:47:5d:00:25:
         fe:0a:98:34:35:01:3d:84:a6:8d:56:8b:c9:45:b1:f2:05:c8:
         4c:26:32:1b:da:e7:2d:a9:4b:3a:30:72:1d:c6:ce:3a:c8:38:
         85:c4:85:1b:d9:dd:26:c4:fb:e8:82:ad:72:68:1c:fe:2c:21:
         68:63:f4:85:89:2f:87:e3:c7:64:2c:95:7e:c5:84:89:b5:39:
         19:bb:b7:56:a4:ba:0b:b8:2e:e6:03:90:df:08:43:9e:a4:96:
         e8:1c:20:bc:6a:9c:92:4c:41:85:73:09:43:1e:c9:df:f8:ab:
         fb:e1:ae:2d:c1:cc:97:1c:ad:5a:3a:7d:f5:8b:44:66:b7:0b:
         15:42:e5:f2:b0:d6:a6:3a:83:ab:e5:2a:61:37:7e:0f:65:02:
         26:61:f0:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN0sAP+xLKsE9isAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk
MTM0NDU3ODYtNzQyOC00NDUzLWI2MzAtMTFiMzFlY2Q2YjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7KCcXcL1bXzeeFyrUMXl0hq7XQWLTJm3L59
nSxwkdXGKHrDog3Gf98JrvT9D6QLYfiz3Njfo4FvAy1+CS3c9pazxIabQRJuDVLF
xZQiwxiHJ7nou7ZSmhP/42xdHNDVjAdxGVX8Z+/hcKe+FoUogs2KED615lsi7Jv2
BXL4IkMsIjusOLp4lj4xRS5pJL6VqUXrGZ1CNvo9qK9/O/jPCRLzA+58630c2gXD
57DLo4aC2hL6KQvSwU27dQ8FrjhT60O+w5iXVo0zu/1VbgT4JdQDkgMVFV9R/2c9
FPB+FYf0HFci0EFaOPCFCvHcr3E2xy3NkV9W+P3/h4LRcJcE/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFICnfR2qyJ0sa1Zl0KOO6OcgWwj+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNGFhNjU4ZjUtMjMzMS0z
OWRmLWI3MjctM2EzODUyNTk1MzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIZIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJA78jgsx9+nGLB7Ru0mKwUZwzBTIaBX5GRYwdYiyAEujJIAIzhVvpv
aJur0UAAfRrZxRVMOHbVTj6jh5Pp6QpdlscqWsRZH+ic2gpApc6vOC3eYRWuyLNj
6J8OEK/gP8Jj1g6I5lOwR10AJf4KmDQ1AT2Epo1Wi8lFsfIFyEwmMhva5y2pSzow
ch3GzjrIOIXEhRvZ3SbE++iCrXJoHP4sIWhj9IWJL4fjx2QslX7FhIm1ORm7t1ak
ugu4LuYDkN8IQ56klugcILxqnJJMQYVzCUMeyd/4q/vhri3BzJccrVo6ffWLRGa3
CxVC5fKw1qY6g6vlKmE3fg9lAiZh8JQ=
-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:45 2025 by rpki-client