Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1e59867-4b4b-3695-8339-a58015ae1912.roa
File:                     b1e59867-4b4b-3695-8339-a58015ae1912.roa (raw, json)
Hash identifier:          k2uttvswyZevtol1iwik4u936jcsOHv1qGoW+clhjx4=
Subject key identifier:   C3:EE:A5:FC:92:BA:97:32:7C:77:78:35:5A:41:3D:DB:CE:5A:04:7D
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B4E772699C5CCCCAB3358D200
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1e59867-4b4b-3695-8339-a58015ae1912.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.132.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:26:99:c5:cc:cc:ab:33:58:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=16854f2c-abce-4ed1-90ea-6183078a9385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d9:30:58:48:5c:9e:aa:d6:a4:6f:5d:11:e2:
                    c5:98:87:fc:a0:ad:6f:34:8b:ca:c7:4b:77:4d:bf:
                    da:c8:e8:bc:38:ec:bf:e1:ac:c4:13:50:4b:30:21:
                    3b:03:5e:01:45:13:8a:a9:1e:cc:9b:b0:b5:85:03:
                    e4:0b:3e:b3:8c:22:6b:b0:d0:73:ab:ef:a1:9a:52:
                    6b:3c:5d:48:ac:48:62:7f:e1:8d:bc:2b:2f:9d:a8:
                    89:bd:7c:29:90:07:b4:10:de:e8:78:5e:f6:f7:98:
                    d2:15:fd:1b:e0:90:b3:53:89:50:b0:b4:f7:26:24:
                    f1:c9:6d:0d:c5:3a:94:7f:47:95:d8:d9:bf:aa:21:
                    00:a9:fd:e6:5f:ed:47:75:d7:7c:fc:81:24:1f:b0:
                    b3:25:47:0d:86:bf:c1:aa:35:37:73:f7:64:03:e0:
                    f4:5a:e2:ba:b8:dd:7c:f8:d5:2d:1c:86:5a:ad:5f:
                    44:24:3c:69:da:1c:81:88:0d:04:78:eb:3f:a4:43:
                    76:ba:9a:0b:af:00:10:4f:44:67:c9:37:16:7c:39:
                    d3:b2:c5:50:e5:64:e7:d4:a6:7f:ba:fe:2b:d6:31:
                    22:f3:e2:f3:cc:09:be:d2:c7:a8:da:44:1c:53:11:
                    32:5a:75:9f:93:35:4f:84:d2:d0:2a:b5:07:54:33:
                    63:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EE:A5:FC:92:BA:97:32:7C:77:78:35:5A:41:3D:DB:CE:5A:04:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b1e59867-4b4b-3695-8339-a58015ae1912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:3c:3f:ad:d2:49:b8:68:6b:60:9c:73:f8:88:53:29:70:e9:
         4d:4a:35:70:32:5a:1d:fe:2f:19:6a:f1:0a:07:1b:e1:02:3a:
         80:33:6a:e8:d2:b3:3f:53:1d:bc:f2:32:3c:57:1b:9e:59:f3:
         7b:7c:64:e8:0d:3d:a4:ef:e1:a7:d2:2a:b4:71:5a:1c:8f:f2:
         fc:f3:6b:39:6d:36:f4:30:e3:78:e2:02:5b:c9:ee:6b:47:65:
         ad:29:fb:21:b7:9e:47:a8:17:0a:05:83:8b:60:d1:99:c5:74:
         f7:9b:b5:c1:94:ae:8e:73:73:0c:18:9d:3a:f1:9c:dd:00:ee:
         43:4b:41:6d:a4:d7:56:f5:d3:f4:b0:e1:ee:e2:c2:ae:0f:a1:
         55:da:8b:f3:73:5c:04:e4:16:6e:8d:8b:f1:51:00:e7:93:1b:
         a9:01:08:a8:9b:b9:f2:3e:51:5f:1d:f2:80:e8:3a:76:37:10:
         08:2d:8f:c3:1d:1c:c4:5b:ef:f1:8e:ed:a3:4f:fa:8d:8f:89:
         83:f2:a7:eb:c0:86:b3:80:d5:3f:e5:db:32:18:d2:b4:1a:8c:
         d2:cc:f0:12:4a:0b:45:4e:bc:c3:be:b9:b7:88:1d:03:ad:c1:
         0f:0f:72:ba:c7:b3:3b:74:ea:dd:85:6e:53:06:08:25:b3:9d:
         7a:2d:53:02
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdyaZxczMqzNY0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk
MTY4NTRmMmMtYWJjZS00ZWQxLTkwZWEtNjE4MzA3OGE5Mzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtkwWEhcnqrWpG9dEeLFmIf8oK1vNIvKx0t3
Tb/ayOi8OOy/4azEE1BLMCE7A14BRROKqR7Mm7C1hQPkCz6zjCJrsNBzq++hmlJr
PF1IrEhif+GNvCsvnaiJvXwpkAe0EN7oeF7295jSFf0b4JCzU4lQsLT3JiTxyW0N
xTqUf0eV2Nm/qiEAqf3mX+1Hddd8/IEkH7CzJUcNhr/BqjU3c/dkA+D0WuK6uN18
+NUtHIZarV9EJDxp2hyBiA0EeOs/pEN2upoLrwAQT0RnyTcWfDnTssVQ5WTn1KZ/
uv4r1jEi8+LzzAm+0seo2kQcUxEyWnWfkzVPhNLQKrUHVDNjtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMPupfySupcyfHd4NVpBPdvOWgR9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjFlNTk4NjctNGI0Yi0z
Njk1LTgzMzktYTU4MDE1YWUxOTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEI8P63SSbhoa2Ccc/iIUylw6U1KNXAyWh3+Lxlq8QoHG+ECOoAzaujS
sz9THbzyMjxXG55Z83t8ZOgNPaTv4afSKrRxWhyP8vzzazltNvQw43jiAlvJ7mtH
Za0p+yG3nkeoFwoFg4tg0ZnFdPebtcGUro5zcwwYnTrxnN0A7kNLQW2k11b10/Sw
4e7iwq4PoVXai/NzXATkFm6Ni/FRAOeTG6kBCKibufI+UV8d8oDoOnY3EAgtj8Md
HMRb7/GO7aNP+o2PiYPyp+vAhrOA1T/l2zIY0rQajNLM8BJKC0VOvMO+ubeIHQOt
wQ8PcrrHszt06t2FblMGCCWznXotUwI=
-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:11 2025 by rpki-client