Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d763ebf1-2023-3ed1-96f6-d0c64b5b1386.roa
File:                     d763ebf1-2023-3ed1-96f6-d0c64b5b1386.roa (raw, json)
Hash identifier:          M+MZdWxnPlNAn6hUSRTAs+LHTsUufBA9CiaRx+mynw4=
Subject key identifier:   84:C8:46:13:03:D1:70:72:57:11:E2:96:AD:05:22:7F:53:A5:E2:0E
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584B5141D6030244441BD799E480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d763ebf1-2023-3ed1-96f6-d0c64b5b1386.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     41264
IP address blocks:        104.132.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:d6:03:02:44:44:1b:d7:99:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=c9b51ceb-ab2d-4b71-8d1f-ae31ff951d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:87:7f:f5:66:5d:90:33:d0:d4:ce:0a:20:ea:
                    10:1d:52:6d:a6:e5:09:26:74:16:08:8b:bf:a6:2b:
                    cb:e3:56:ca:7d:f0:56:ba:a0:41:d6:4c:be:c8:f3:
                    d1:7e:32:0e:9d:25:33:da:dd:a7:ba:ff:02:f0:3f:
                    44:22:0b:e6:e7:fe:62:d5:c1:48:f0:39:31:5b:5f:
                    26:c6:41:ce:8b:01:c8:dc:67:ad:ad:a1:ff:ff:5f:
                    fc:0e:5b:f2:89:0a:d1:1e:e4:41:ef:67:7e:ed:35:
                    1a:ab:eb:9e:4c:bc:71:f3:23:0b:f4:0e:a0:58:1c:
                    16:bd:91:64:eb:af:06:fd:00:ed:22:53:13:a2:86:
                    19:c5:0d:18:9a:27:63:ca:d6:fd:98:7e:7f:13:f5:
                    1a:b7:63:97:17:8b:7f:a9:a5:37:d2:af:01:4a:68:
                    17:24:ae:4d:b9:f1:be:16:2c:a9:8f:5a:78:74:10:
                    9c:4c:e9:b8:84:9b:dc:8e:c5:5e:c8:8f:71:fe:d5:
                    8f:c6:ca:e2:5c:dc:17:1a:2e:21:ec:81:e9:4d:75:
                    95:57:bf:05:cc:64:07:16:ab:80:7c:9c:7b:30:42:
                    b9:c5:70:f6:1f:d6:6d:1b:e4:1a:e6:c9:03:6e:bf:
                    ec:c3:4f:88:25:52:10:db:af:a2:d5:77:3b:70:62:
                    33:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C8:46:13:03:D1:70:72:57:11:E2:96:AD:05:22:7F:53:A5:E2:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d763ebf1-2023-3ed1-96f6-d0c64b5b1386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:73:32:0c:e6:e9:2c:47:be:2c:1d:a8:2b:9f:23:18:fc:a1:
         e8:c8:fe:ca:ed:f2:95:27:26:4c:4e:6a:05:e3:f4:c0:b6:f1:
         b1:36:c0:9e:48:c2:5a:de:b7:73:3b:57:4a:c3:73:0e:e2:c1:
         b8:d4:9f:86:d6:c6:ad:a3:b2:3d:d6:e6:9b:a9:23:ef:30:be:
         73:05:85:7c:d2:0a:16:fb:81:e9:b7:c3:fe:4f:c9:3d:1f:ff:
         bd:f3:5e:86:b7:e5:9b:11:f9:55:de:0b:3b:4f:9c:ff:7b:8e:
         50:37:8a:b9:1d:d8:4d:ce:7d:8f:d6:33:8a:25:ec:1f:a8:69:
         ba:7b:fd:82:ef:52:43:84:f0:1f:55:a1:03:c3:87:c3:cf:6c:
         8f:4a:0a:52:b5:61:3f:ac:12:8d:1b:63:e3:77:b2:eb:4a:5f:
         65:fc:05:3c:f0:1f:bc:f5:9a:3f:5f:e1:3a:ea:b4:3c:b1:4b:
         fc:11:26:bf:ea:47:0f:81:be:9b:39:e3:72:fc:3e:10:11:be:
         ae:27:ad:6a:f4:e8:34:22:9e:c0:bb:b4:61:5b:02:7d:25:17:
         70:a1:7e:21:29:08:58:f5:db:02:3f:49:e4:06:b0:1e:f6:3d:
         41:10:46:96:34:13:98:f3:a0:1d:81:14:05:0d:7d:96:d8:7f:
         50:a8:1b:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRQdYDAkREG9eZ5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk
YzliNTFjZWItYWIyZC00YjcxLThkMWYtYWUzMWZmOTUxZDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4d/9WZdkDPQ1M4KIOoQHVJtpuUJJnQWCIu/
pivL41bKffBWuqBB1ky+yPPRfjIOnSUz2t2nuv8C8D9EIgvm5/5i1cFI8DkxW18m
xkHOiwHI3GetraH//1/8DlvyiQrRHuRB72d+7TUaq+ueTLxx8yML9A6gWBwWvZFk
668G/QDtIlMTooYZxQ0Ymidjytb9mH5/E/Uat2OXF4t/qaU30q8BSmgXJK5NufG+
Fiypj1p4dBCcTOm4hJvcjsVeyI9x/tWPxsriXNwXGi4h7IHpTXWVV78FzGQHFquA
fJx7MEK5xXD2H9ZtG+Qa5skDbr/sw0+IJVIQ26+i1Xc7cGIzNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFITIRhMD0XByVxHilq0FIn9TpeIOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZDc2M2ViZjEtMjAyMy0z
ZWQxLTk2ZjYtZDBjNjRiNWIxMzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaITmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIxzMgzm6SxHviwdqCufIxj8oejI/srt8pUnJkxOagXj9MC28bE2wJ5I
wlret3M7V0rDcw7iwbjUn4bWxq2jsj3W5pupI+8wvnMFhXzSChb7gem3w/5PyT0f
/73zXoa35ZsR+VXeCztPnP97jlA3irkd2E3OfY/WM4ol7B+oabp7/YLvUkOE8B9V
oQPDh8PPbI9KClK1YT+sEo0bY+N3sutKX2X8BTzwH7z1mj9f4TrqtDyxS/wRJr/q
Rw+Bvps543L8PhARvq4nrWr06DQinsC7tGFbAn0lF3ChfiEpCFj12wI/SeQGsB72
PUEQRpY0E5jzoB2BFAUNfZbYf1CoG1g=
-----END CERTIFICATE-----
Generated at Thu Oct 9 20:05:17 2025 by rpki-client