Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/df61bb8b-6c75-397e-84df-0353bf3e6294.roa
File:                     df61bb8b-6c75-397e-84df-0353bf3e6294.roa (raw, json)
Hash identifier:          T0SOBG5fJvcf5B9cMpNdVUdEHfrN62rOmqzZ9Ff5TLg=
Subject key identifier:   68:21:1E:F4:46:4E:6A:B2:F8:A1:C3:BD:EA:3E:E5:92:2C:EB:44:06
Certificate issuer:       /CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
Certificate serial:       010D0C9F4328584A66C07852C18057B6B59E1600
Authority key identifier: D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/df61bb8b-6c75-397e-84df-0353bf3e6294.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     63267
IP address blocks:        104.171.216.0/24 maxlen: 24
                          104.171.217.0/24 maxlen: 24
                          104.171.218.0/24 maxlen: 24
                          104.171.219.0/24 maxlen: 24
                          104.171.220.0/24 maxlen: 24
                          104.171.221.0/24 maxlen: 24
                          104.171.222.0/24 maxlen: 24
                          104.171.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:78:52:c1:80:57:b6:b5:9e:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c7a344-4bc7-468b-ad30-3b9c006cd0c8
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=8efcac71-81dd-4f6c-85a8-de913f1c6604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:e6:d8:96:94:61:d9:cd:d2:d3:07:0b:0b:
                    8d:9b:55:12:1f:ea:13:fd:3d:30:a6:42:dd:a1:d9:
                    dc:ff:a3:61:15:be:9d:bd:22:ad:ad:40:e3:28:85:
                    e6:f4:1d:ee:70:5e:cb:0b:82:1e:35:31:5e:41:e1:
                    28:e0:02:1a:7a:e7:0e:1f:a8:45:15:e8:0a:50:26:
                    84:44:ae:36:a8:bf:15:01:9f:b6:51:8e:7a:a0:fe:
                    b5:ab:61:9e:29:9a:90:7d:3e:94:ff:cc:6c:6e:14:
                    80:93:ff:01:f0:94:fd:8e:62:0e:e3:f8:fa:8d:37:
                    2f:bf:4a:b7:57:a2:b9:74:e4:c4:ea:10:0a:8c:67:
                    6d:4c:57:85:1d:90:88:2e:42:0b:63:d1:fa:7a:2c:
                    2d:b2:14:7e:18:30:39:ee:a1:3f:23:1e:42:a0:20:
                    f3:9a:66:35:40:14:87:dc:5e:31:60:d5:fb:44:76:
                    2e:7e:04:96:46:58:85:ef:f9:56:f6:04:4e:6e:19:
                    63:ce:a8:77:b5:ef:31:50:3f:00:b3:40:b8:8b:24:
                    88:ee:2e:4c:4b:f6:7d:0e:eb:af:6c:61:41:a6:8b:
                    2e:90:14:22:cf:10:15:d8:58:5a:91:85:9f:b7:fd:
                    57:bf:5f:b0:e3:3c:a0:da:90:6f:94:69:dc:6f:b3:
                    51:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:21:1E:F4:46:4E:6A:B2:F8:A1:C3:BD:EA:3E:E5:92:2C:EB:44:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/df61bb8b-6c75-397e-84df-0353bf3e6294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:4A:87:E9:9F:64:F3:92:1C:80:49:03:D0:E0:01:6E:63:18:33:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/27c7a344-4bc7-468b-ad30-3b9c006cd0c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:28:c1:36:6e:47:f3:56:d6:0b:ab:c8:ef:ef:e6:49:02:e6:
         2e:51:a7:5e:4d:21:8e:60:42:b6:1a:8b:86:31:08:98:94:ce:
         1f:5b:04:97:f4:9d:66:7c:c2:ea:38:00:ab:d4:0e:06:2a:eb:
         eb:de:e0:77:69:a1:34:5f:f8:ae:29:25:bf:89:a6:6e:89:bd:
         24:4d:e0:5f:bf:c6:3b:c8:3e:de:6a:7f:65:27:b4:28:7d:1f:
         4b:7a:f2:1e:6c:ed:d1:31:3b:a5:5b:35:22:42:9d:24:df:2c:
         05:90:05:48:10:1a:af:8c:26:a5:ea:08:ef:c9:bd:66:bd:34:
         f3:a1:36:71:05:6c:8a:30:9d:90:7e:fd:16:44:97:03:1d:f6:
         8d:a9:d1:a0:29:85:89:e6:50:2a:c3:c6:6d:09:f5:6e:e1:2f:
         2a:b8:19:91:9b:ca:e3:6b:47:64:86:2f:ea:6a:91:6b:40:bd:
         0b:de:06:2e:c9:0c:c0:44:26:0b:95:cb:96:ee:a8:25:a0:ea:
         75:a3:8c:98:43:9e:9e:85:f2:19:2a:e1:c4:1d:39:af:15:a5:
         1d:db:de:6e:c8:92:c7:29:c5:d0:65:1a:19:dd:7a:c4:3a:4f:
         7b:74:fc:9a:a9:61:90:23:88:c1:9c:51:ab:e3:a7:0b:fc:4a:
         a4:9e:80:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwHhSwYBXtrWeFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjdjN2EzNDQtNGJjNy00NjhiLWFkMzAtM2I5YzAwNmNk
MGM4MB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk
OGVmY2FjNzEtODFkZC00ZjZjLTg1YTgtZGU5MTNmMWM2NjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLjm2JaUYdnN0tMHCwuNm1USH+oT/T0wpkLd
odnc/6NhFb6dvSKtrUDjKIXm9B3ucF7LC4IeNTFeQeEo4AIaeucOH6hFFegKUCaE
RK42qL8VAZ+2UY56oP61q2GeKZqQfT6U/8xsbhSAk/8B8JT9jmIO4/j6jTcvv0q3
V6K5dOTE6hAKjGdtTFeFHZCILkILY9H6eiwtshR+GDA57qE/Ix5CoCDzmmY1QBSH
3F4xYNX7RHYufgSWRliF7/lW9gRObhljzqh3te8xUD8As0C4iySI7i5MS/Z9Duuv
bGFBposukBQizxAV2FhakYWft/1Xv1+w4zyg2pBvlGncb7NRFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGghHvRGTmqy+KHDveo+5ZIs60QGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yN2M3
YTM0NC00YmM3LTQ2OGItYWQzMC0zYjljMDA2Y2QwYzgvZGY2MWJiOGItNmM3NS0z
OTdlLTg0ZGYtMDM1M2JmM2U2Mjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjdjN2EzNDQtNGJjNy00NjhiLWFk
MzAtM2I5YzAwNmNkMGM4LzI3YzdhMzQ0LTRiYzctNDY4Yi1hZDMwLTNiOWMwMDZj
ZDBjOC5jcmwwHwYDVR0jBBgwFoAU2UqH6Z9k85IcgEkD0OABbmMYM90wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yN2M3YTM0NC00YmM3LTQ2OGItYWQzMC0zYjlj
MDA2Y2QwYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaKvYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADsowTZuR/NW1guryO/v5kkC5i5Rp15NIY5gQrYai4YxCJiUzh9bBJf0
nWZ8wuo4AKvUDgYq6+ve4HdpoTRf+K4pJb+Jpm6JvSRN4F+/xjvIPt5qf2UntCh9
H0t68h5s7dExO6VbNSJCnSTfLAWQBUgQGq+MJqXqCO/JvWa9NPOhNnEFbIownZB+
/RZElwMd9o2p0aAphYnmUCrDxm0J9W7hLyq4GZGbyuNrR2SGL+pqkWtAvQveBi7J
DMBEJguVy5buqCWg6nWjjJhDnp6F8hkq4cQdOa8VpR3b3m7IkscpxdBlGhndesQ6
T3t0/JqpYZAjiMGcUavjpwv8SqSegA8=
-----END CERTIFICATE-----
Generated at Thu Jul 10 23:13:27 2025 by rpki-client