Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/976240a9-240d-3a67-94a0-632337d1ebf3.roa
File:                     976240a9-240d-3a67-94a0-632337d1ebf3.roa (raw, json)
Hash identifier:          Gn3qCPSRfL9r55U8K6DbqaFzmxsmHH20I8azA4+tT0o=
Subject key identifier:   10:45:A2:1C:0D:0E:B4:90:5A:75:CB:68:00:46:63:50:C3:53:6C:65
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5F37474CA446A2EEB3F3FCA0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/976240a9-240d-3a67-94a0-632337d1ebf3.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     15169
IP address blocks:        104.134.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:47:4c:a4:46:a2:ee:b3:f3:fc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=85cc9ba6-83a5-4a39-bb35-9d9b7219f89a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:ac:e0:e6:01:0c:91:c7:1e:af:d1:b8:c8:
                    c1:7b:a3:a1:1f:f7:fa:f1:3c:88:59:12:03:c5:db:
                    0a:d2:76:ce:c7:ff:f1:fe:c0:b0:ce:19:42:ce:ca:
                    08:2f:83:5e:3e:4e:14:a6:0e:be:5c:0d:3a:e8:0a:
                    22:a7:d9:f5:f7:cb:2b:cf:58:8d:7c:37:32:4c:89:
                    75:8c:37:e5:f4:5d:38:31:74:7f:0d:44:e2:1a:2a:
                    95:c2:34:32:26:1b:2a:f2:18:be:bc:4d:e0:1e:cf:
                    ce:d3:26:79:c0:ba:9d:a6:79:bc:c6:72:8e:f5:5a:
                    21:00:1a:5d:04:ab:c6:16:4a:bb:04:cc:2b:f6:d6:
                    56:da:70:c8:c5:46:00:a8:77:be:60:78:44:5a:f3:
                    b7:35:05:8d:4c:56:39:40:86:f3:56:ce:6c:95:17:
                    b7:1a:62:29:73:74:dc:98:e7:87:22:44:b9:bf:25:
                    bb:4d:62:ff:69:54:32:f7:9f:3a:13:1f:5a:09:42:
                    b7:ae:fa:e9:ed:9c:18:97:b9:b9:a4:06:27:86:fd:
                    3c:dd:d0:61:f4:c7:e9:5f:55:72:85:65:b0:0c:7d:
                    7c:75:a2:c3:dc:d2:21:cc:c0:81:5f:2b:43:80:6b:
                    b1:2f:7b:4c:53:0a:57:49:ae:8b:da:75:86:45:fb:
                    07:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:45:A2:1C:0D:0E:B4:90:5A:75:CB:68:00:46:63:50:C3:53:6C:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/976240a9-240d-3a67-94a0-632337d1ebf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:36:e5:13:ec:c7:99:e0:03:44:bd:2f:bd:d5:b1:ae:fb:b2:
         1f:d0:4f:74:ac:51:96:fa:a6:a5:e4:db:5b:13:49:41:ac:8a:
         f6:4b:b7:9d:b0:cd:34:22:e1:bc:f1:19:4c:3d:8c:33:31:8b:
         0e:fc:c2:8f:98:25:6a:8f:ef:87:b7:c4:43:87:08:fe:c1:6f:
         79:8f:9c:f8:df:4a:59:23:a8:01:6d:92:e3:74:af:57:60:3c:
         1f:2a:a1:25:b5:77:5f:a3:22:4d:8f:84:68:8b:05:08:d4:a9:
         c4:d8:d4:8a:7e:98:09:6b:52:f3:88:46:07:b2:0b:0b:dd:a2:
         ad:e1:0e:5f:04:61:ec:18:13:77:af:df:4b:37:da:13:95:40:
         96:1e:81:1e:a2:76:b7:a2:78:1d:b8:2f:2a:8a:33:a7:72:17:
         35:a2:77:27:48:59:8c:35:96:5d:87:59:46:c9:7e:43:d1:da:
         b0:8a:f4:20:5c:9c:75:43:23:c8:f7:6d:a4:c7:35:78:e0:13:
         5c:c8:73:30:29:c5:b5:80:d5:c3:fc:1a:f2:c4:36:6f:36:95:
         ce:75:fd:64:1e:62:54:c3:bd:ac:5a:35:ee:27:11:0d:dc:c9:
         de:f8:56:6b:ca:b2:60:64:0b:94:9f:d1:ab:e5:74:9d:18:c8:
         dd:15:56:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN0dMpEai7rPz/KAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk
ODVjYzliYTYtODNhNS00YTM5LWJiMzUtOWQ5YjcyMTlmODlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEas4OYBDJHHHq/RuMjBe6OhH/f68TyIWRID
xdsK0nbOx//x/sCwzhlCzsoIL4NePk4Upg6+XA066Aoip9n198srz1iNfDcyTIl1
jDfl9F04MXR/DUTiGiqVwjQyJhsq8hi+vE3gHs/O0yZ5wLqdpnm8xnKO9VohABpd
BKvGFkq7BMwr9tZW2nDIxUYAqHe+YHhEWvO3NQWNTFY5QIbzVs5slRe3GmIpc3Tc
mOeHIkS5vyW7TWL/aVQy9586Ex9aCUK3rvrp7ZwYl7m5pAYnhv083dBh9MfpX1Vy
hWWwDH18daLD3NIhzMCBXytDgGuxL3tMUwpXSa6L2nWGRfsHuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBBFohwNDrSQWnXLaABGY1DDU2xlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTc2MjQwYTktMjQwZC0z
YTY3LTk0YTAtNjMyMzM3ZDFlYmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIb1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADc25RPsx5ngA0S9L73Vsa77sh/QT3SsUZb6pqXk21sTSUGsivZLt52w
zTQi4bzxGUw9jDMxiw78wo+YJWqP74e3xEOHCP7Bb3mPnPjfSlkjqAFtkuN0r1dg
PB8qoSW1d1+jIk2PhGiLBQjUqcTY1Ip+mAlrUvOIRgeyCwvdoq3hDl8EYewYE3ev
30s32hOVQJYegR6idreieB24LyqKM6dyFzWidydIWYw1ll2HWUbJfkPR2rCK9CBc
nHVDI8j3baTHNXjgE1zIczApxbWA1cP8GvLENm82lc51/WQeYlTDvaxaNe4nEQ3c
yd74VmvKsmBkC5Sf0avldJ0YyN0VVk4=
-----END CERTIFICATE-----
Generated at Thu Oct 9 20:03:08 2025 by rpki-client