Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a014c7b9-28c1-37ba-9294-693b30cde4e7.roa
File:                     a014c7b9-28c1-37ba-9294-693b30cde4e7.roa (raw, json)
Hash identifier:          K9nXnLDPu2XE/KtAsa/KW2VVo4VMeq4McOyRMAH02do=
Subject key identifier:   BC:E1:36:E1:E9:4E:6F:F6:69:71:95:C4:AA:38:4D:90:25:4A:84:1F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5F3766141C3D957909BA3700
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a014c7b9-28c1-37ba-9294-693b30cde4e7.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     395973
IP address blocks:        104.134.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:66:14:1c:3d:95:79:09:ba:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=55e16dbc-e26b-41bb-8a6b-f37b84bce4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:ed:c2:b3:9b:74:7c:f3:9b:70:08:5b:3e:
                    de:76:60:58:2b:25:c9:72:e1:2d:94:6f:5b:e1:dd:
                    ca:a4:e6:5d:e1:53:da:b7:76:4a:23:1d:bc:9c:10:
                    2d:98:1d:0d:c1:c5:b3:48:60:a6:ac:23:b0:40:a1:
                    33:6a:6a:8d:38:e4:d1:86:f3:11:02:fe:47:3a:ce:
                    7e:da:4d:8c:ea:d0:37:44:51:25:c9:30:c2:9d:f9:
                    dd:da:71:d1:f1:94:77:42:0c:ca:0c:f5:68:98:6e:
                    9d:c4:63:ce:b0:fb:6c:71:b1:61:16:b7:93:1b:09:
                    de:4f:46:06:c7:1c:14:9e:f0:d2:f4:e7:17:7d:d0:
                    b4:57:25:cd:f6:cb:c5:cf:78:ca:74:e5:24:b1:b5:
                    5c:c8:57:ae:4c:57:4c:17:11:82:9b:fc:77:31:47:
                    f9:39:fd:1f:da:29:5b:1b:ae:c1:78:e1:da:f8:da:
                    de:17:c7:95:13:51:90:1f:68:ee:c6:15:d8:a0:e0:
                    cb:dc:41:bd:0c:6c:2f:d8:dc:70:b1:f4:73:6d:1b:
                    f6:c0:e2:1c:7b:42:6f:2e:0c:d7:67:7c:8e:83:ec:
                    41:45:10:85:03:83:cc:db:c9:4a:eb:2f:a0:71:a1:
                    54:2b:f2:30:16:cc:f3:6b:4f:4a:91:72:fc:5e:47:
                    2a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E1:36:E1:E9:4E:6F:F6:69:71:95:C4:AA:38:4D:90:25:4A:84:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a014c7b9-28c1-37ba-9294-693b30cde4e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:63:e9:7d:65:0a:2c:66:02:c7:a6:af:83:9a:47:3c:3b:ed:
         0d:25:a7:4c:e8:1a:f0:87:40:24:9a:69:29:42:ab:55:28:a1:
         eb:f3:f3:3b:b1:f2:b2:58:f7:36:20:f3:26:7b:fd:fb:2a:d0:
         4b:43:1c:6b:1c:fc:6d:58:21:29:db:b0:2a:f1:1b:4b:b7:25:
         51:2f:05:cc:f0:37:c9:5d:eb:bd:12:9f:79:11:61:70:6e:84:
         af:3f:f8:a1:da:64:6c:64:d1:db:33:84:de:47:22:91:d6:6b:
         4b:79:df:ad:6b:6c:ec:c7:c1:13:91:28:8d:14:66:dd:62:32:
         2a:2f:8b:24:ef:3e:ed:c0:77:67:18:e9:2a:fe:c5:72:5e:23:
         b8:37:15:bd:c1:50:3e:80:85:05:51:fd:fe:79:cb:05:c5:a2:
         63:f3:1f:3e:f1:5a:bf:a0:1b:fa:13:e2:29:3d:ed:be:65:d3:
         7c:ff:90:82:c4:8a:e0:68:f2:6c:58:05:14:5e:ae:a7:82:e4:
         2e:a3:c8:b8:71:c7:c2:0c:1c:d7:bf:f4:f0:25:97:83:f2:2f:
         8c:87:2b:b3:f6:f8:71:98:73:e3:ea:a0:b8:b3:79:67:76:4d:
         05:01:63:82:7a:f7:e5:80:fa:f3:e7:c9:1e:90:fb:d4:bb:ca:
         88:62:07:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN2YUHD2VeQm6NwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk
NTVlMTZkYmMtZTI2Yi00MWJiLThhNmItZjM3Yjg0YmNlNGU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjrtwrObdHzzm3AIWz7edmBYKyXJcuEtlG9b
4d3KpOZd4VPat3ZKIx28nBAtmB0NwcWzSGCmrCOwQKEzamqNOOTRhvMRAv5HOs5+
2k2M6tA3RFElyTDCnfnd2nHR8ZR3QgzKDPVomG6dxGPOsPtscbFhFreTGwneT0YG
xxwUnvDS9OcXfdC0VyXN9svFz3jKdOUksbVcyFeuTFdMFxGCm/x3MUf5Of0f2ilb
G67BeOHa+NreF8eVE1GQH2juxhXYoODL3EG9DGwv2NxwsfRzbRv2wOIce0JvLgzX
Z3yOg+xBRRCFA4PM28lK6y+gcaFUK/IwFszza09KkXL8XkcqmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLzhNuHpTm/2aXGVxKo4TZAlSoQfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTAxNGM3YjktMjhjMS0z
N2JhLTkyOTQtNjkzYjMwY2RlNGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIa3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZj6X1lCixmAsemr4OaRzw77Q0lp0zoGvCHQCSaaSlCq1Uooevz8zux
8rJY9zYg8yZ7/fsq0EtDHGsc/G1YISnbsCrxG0u3JVEvBczwN8ld670Sn3kRYXBu
hK8/+KHaZGxk0dszhN5HIpHWa0t5361rbOzHwRORKI0UZt1iMioviyTvPu3Ad2cY
6Sr+xXJeI7g3Fb3BUD6AhQVR/f55ywXFomPzHz7xWr+gG/oT4ik97b5l03z/kILE
iuBo8mxYBRRerqeC5C6jyLhxx8IMHNe/9PAll4PyL4yHK7P2+HGYc+PqoLizeWd2
TQUBY4J69+WA+vPnyR6Q+9S7yohiB5g=
-----END CERTIFICATE-----
Generated at Thu Oct 9 20:06:16 2025 by rpki-client