Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/abb98977-8316-3044-bd21-4c61fa5b5524.roa
File:                     abb98977-8316-3044-bd21-4c61fa5b5524.roa (raw, json)
Hash identifier:          BJ7ltyvoDzfUCKzBO7loGE4CazpNUqnWwvZ/2plwf1I=
Subject key identifier:   EB:29:93:A5:5C:48:B4:1B:F9:49:15:0A:6D:C0:95:8F:E7:B6:8D:30
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5141E9233735CE999D951A68
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/abb98977-8316-3044-bd21-4c61fa5b5524.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.133.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:e9:23:37:35:ce:99:9d:95:1a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=bd7cfb57-9984-40ad-a0ad-1760de9a3bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:29:a5:c0:c9:c1:86:8e:4e:44:b6:23:10:e4:
                    76:d4:66:76:2a:2f:8c:d1:c5:ef:37:3d:6f:ed:64:
                    5a:41:28:a0:cc:12:1f:88:e4:30:a2:3b:5c:c5:11:
                    e9:42:ec:28:80:e2:44:1a:0a:be:a1:c3:2a:52:b8:
                    f7:5b:7b:86:f8:ab:32:f2:13:b0:37:ef:bb:ad:47:
                    96:b8:72:af:c1:3b:9a:b9:c2:c0:29:be:f0:d4:08:
                    ea:e6:6b:ca:4f:a4:f9:c5:c0:34:44:99:5b:29:23:
                    c7:2d:57:54:67:18:48:05:d3:17:58:9b:d8:6a:58:
                    32:02:1a:fd:c9:13:c0:52:eb:37:9d:fa:e9:7a:05:
                    b4:8c:90:62:ba:49:d9:e1:c3:19:02:d9:67:83:5f:
                    9d:c8:d1:4f:fc:69:15:b2:65:75:e5:02:c7:4a:1b:
                    98:67:ce:a9:e4:72:12:09:70:75:a4:87:38:c6:94:
                    58:c3:dc:7f:6a:3d:b6:0c:d6:7f:33:0b:67:a8:42:
                    04:d7:11:fc:9c:3b:36:2c:e3:fa:59:d7:20:90:a6:
                    bc:ac:8d:21:d3:a2:d5:c5:f7:cb:18:69:ad:93:46:
                    4a:85:ff:0c:69:0b:74:93:ef:eb:a2:37:e1:4c:36:
                    d0:88:1f:ac:f5:42:f1:ba:d8:12:a7:fa:f2:9d:4e:
                    70:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:29:93:A5:5C:48:B4:1B:F9:49:15:0A:6D:C0:95:8F:E7:B6:8D:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/abb98977-8316-3044-bd21-4c61fa5b5524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:1b:58:c8:45:f7:aa:b7:34:fb:02:f1:0e:77:f2:a0:43:04:
         ee:c8:19:53:02:91:c7:76:94:4c:9b:72:65:d4:43:f8:2d:c4:
         56:74:9a:3e:4f:5d:ea:f8:83:38:41:1d:83:6a:3c:3f:71:9a:
         f9:7b:92:f1:fb:14:71:54:5f:c8:7d:dd:10:72:89:99:b7:d1:
         2d:97:84:78:32:89:aa:e0:8d:95:09:fc:1e:21:3e:e7:00:9e:
         e6:00:94:b7:65:70:68:26:4b:76:ff:93:16:0b:92:5d:2f:5a:
         02:7b:f2:22:23:b7:a2:c6:1e:33:8f:e0:fa:b0:a6:3e:fc:c2:
         25:cb:77:39:c9:9f:ec:87:19:66:04:48:3d:93:b9:e4:f6:b6:
         37:69:70:48:41:24:4e:ec:e3:4b:d5:b7:c0:1a:a5:48:cd:75:
         43:3c:4a:cc:52:82:82:13:55:3b:a4:f2:3f:22:54:89:01:78:
         a9:a6:59:c6:35:f7:c4:83:ce:f7:82:6b:4d:e1:84:0c:6c:ba:
         70:63:22:7a:77:9b:3f:02:80:dc:32:06:95:8a:4d:67:b0:e2:
         0a:ea:f6:38:fb:e4:7b:4b:f0:ba:8b:44:c4:7f:94:2e:d3:0a:
         a6:5c:e4:81:31:dc:f1:15:eb:0d:95:4f:b9:d6:f7:98:25:8d:
         7b:75:fd:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQekjNzXOmZ2VGmgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk
YmQ3Y2ZiNTctOTk4NC00MGFkLWEwYWQtMTc2MGRlOWEzYmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhimlwMnBho5ORLYjEOR21GZ2Ki+M0cXvNz1v
7WRaQSigzBIfiOQwojtcxRHpQuwogOJEGgq+ocMqUrj3W3uG+Ksy8hOwN++7rUeW
uHKvwTuaucLAKb7w1Ajq5mvKT6T5xcA0RJlbKSPHLVdUZxhIBdMXWJvYalgyAhr9
yRPAUus3nfrpegW0jJBiuknZ4cMZAtlng1+dyNFP/GkVsmV15QLHShuYZ86p5HIS
CXB1pIc4xpRYw9x/aj22DNZ/MwtnqEIE1xH8nDs2LOP6WdcgkKa8rI0h06LVxffL
GGmtk0ZKhf8MaQt0k+/rojfhTDbQiB+s9ULxutgSp/rynU5wqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOspk6VcSLQb+UkVCm3AlY/nto0wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYWJiOTg5NzctODMxNi0z
MDQ0LWJkMjEtNGM2MWZhNWI1NTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEbWMhF96q3NPsC8Q538qBDBO7IGVMCkcd2lEybcmXUQ/gtxFZ0mj5P
Xer4gzhBHYNqPD9xmvl7kvH7FHFUX8h93RByiZm30S2XhHgyiargjZUJ/B4hPucA
nuYAlLdlcGgmS3b/kxYLkl0vWgJ78iIjt6LGHjOP4Pqwpj78wiXLdznJn+yHGWYE
SD2TueT2tjdpcEhBJE7s40vVt8AapUjNdUM8SsxSgoITVTuk8j8iVIkBeKmmWcY1
98SDzveCa03hhAxsunBjInp3mz8CgNwyBpWKTWew4grq9jj75HtL8LqLRMR/lC7T
CqZc5IEx3PEV6w2VT7nW95gljXt1/aM=
-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:34 2025 by rpki-client