Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/26db2d9f-f495-3e96-9f2a-17faa8ec284a.roa
File:                     26db2d9f-f495-3e96-9f2a-17faa8ec284a.roa (raw, json)
Hash identifier:          1S57k7R1FUYNcpelSkBRVreYBxmn7808JTniZWkJtLQ=
Subject key identifier:   B1:89:AD:BB:BE:49:5C:F3:56:39:D9:E6:9A:43:D8:44:FB:D2:29:60
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBB241CBB2F89F9FAB5C80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/26db2d9f-f495-3e96-9f2a-17faa8ec284a.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        104.134.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:b2:41:cb:b2:f8:9f:9f:ab:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=ea138fb8-37f2-4351-aa36-178433f4d910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:27:07:32:81:ad:d4:8c:fe:f7:bb:19:0a:0f:
                    6a:91:55:cd:95:ed:7e:66:cc:da:ba:45:08:38:c0:
                    74:68:6b:f4:39:62:e7:ec:82:95:a5:54:fc:21:eb:
                    a8:fc:b4:9b:d4:f0:2d:73:03:3b:33:d5:2c:dd:e1:
                    87:7e:73:1a:f7:c4:7f:b1:c3:36:b0:2c:fd:61:eb:
                    22:1c:1a:11:4d:a2:22:75:d4:4c:01:c3:3c:7c:31:
                    91:7d:e8:63:e0:ce:e7:aa:94:cb:01:25:81:0a:37:
                    5e:cd:a3:b0:c2:0f:c3:45:ac:e2:7b:47:5f:b6:0c:
                    e3:4a:51:e3:ca:71:e1:80:41:96:f5:d2:19:d8:e7:
                    a5:2b:c5:a1:bf:91:e7:7d:23:dc:b3:ec:52:cb:25:
                    19:f5:0e:e2:87:04:8f:cd:6d:cd:b1:6d:ae:3a:e1:
                    57:17:1f:ed:8e:81:0f:9d:e8:8d:17:f2:d1:82:af:
                    93:69:dd:c8:6e:99:2e:b3:04:67:ee:c2:1b:9e:e8:
                    b6:cd:10:fc:83:d2:7b:67:7e:0e:af:04:f2:3f:4e:
                    82:a7:aa:1d:6a:c4:01:88:2b:1c:fe:97:2d:bc:a8:
                    79:34:e8:6a:7a:60:ba:2a:ec:39:b5:ae:52:13:5c:
                    68:a9:ad:58:3f:b0:f5:ef:fa:5c:0a:02:48:ae:6b:
                    c8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:89:AD:BB:BE:49:5C:F3:56:39:D9:E6:9A:43:D8:44:FB:D2:29:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/26db2d9f-f495-3e96-9f2a-17faa8ec284a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:82:f8:60:87:43:55:22:91:92:b3:b9:73:16:d1:bf:8f:2b:
         81:aa:e0:80:78:e4:b8:20:c7:57:30:72:dc:f0:f6:23:6e:3e:
         c6:af:68:58:53:bf:0d:9a:42:1a:f6:2d:92:44:5a:7d:88:09:
         fe:5f:43:2f:44:2f:c9:6b:c0:40:7f:1e:17:32:29:27:68:78:
         bf:85:28:28:9e:40:37:ea:d0:86:51:fe:39:cd:3e:81:6c:70:
         78:83:20:89:7f:0c:72:11:43:9a:4a:fc:cb:c5:6b:ef:6c:6f:
         ac:1e:01:23:8f:ba:2e:01:06:fc:a9:68:05:29:bc:43:62:5a:
         34:ab:2c:1e:63:c2:78:76:df:fe:01:18:62:df:69:90:59:d6:
         70:f0:82:f2:7f:06:58:54:65:1a:74:43:d0:1e:d9:d9:7f:12:
         da:3a:fe:e1:3c:7a:77:56:40:14:c2:4b:4b:76:c5:b1:b0:00:
         ed:3e:cb:cb:90:96:ee:15:11:1c:7b:fe:8d:89:08:80:5d:5c:
         f7:af:0e:15:ac:35:cb:2b:91:c6:92:29:cb:61:19:c4:96:33:
         d2:20:02:c9:6c:b4:ca:d2:a7:9b:6d:8d:91:a7:11:7d:72:bb:
         fc:62:f7:9f:75:5a:12:23:41:16:02:36:b6:2f:1a:6a:8d:74:
         ed:68:0d:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67JBy7L4n5+rXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
ZWExMzhmYjgtMzdmMi00MzUxLWFhMzYtMTc4NDMzZjRkOTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgycHMoGt1Iz+97sZCg9qkVXNle1+ZszaukUI
OMB0aGv0OWLn7IKVpVT8Ieuo/LSb1PAtcwM7M9Us3eGHfnMa98R/scM2sCz9Yesi
HBoRTaIiddRMAcM8fDGRfehj4M7nqpTLASWBCjdezaOwwg/DRazie0dftgzjSlHj
ynHhgEGW9dIZ2OelK8Whv5HnfSPcs+xSyyUZ9Q7ihwSPzW3NsW2uOuFXFx/tjoEP
neiNF/LRgq+Tad3IbpkuswRn7sIbnui2zRD8g9J7Z34OrwTyP06Cp6odasQBiCsc
/pctvKh5NOhqemC6Kuw5ta5SE1xoqa1YP7D17/pcCgJIrmvIjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLGJrbu+SVzzVjnZ5ppD2ET70ilgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMjZkYjJkOWYtZjQ5NS0z
ZTk2LTlmMmEtMTdmYWE4ZWMyODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIa+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJuC+GCHQ1UikZKzuXMW0b+PK4Gq4IB45Lggx1cwctzw9iNuPsavaFhT
vw2aQhr2LZJEWn2ICf5fQy9EL8lrwEB/HhcyKSdoeL+FKCieQDfq0IZR/jnNPoFs
cHiDIIl/DHIRQ5pK/MvFa+9sb6weASOPui4BBvypaAUpvENiWjSrLB5jwnh23/4B
GGLfaZBZ1nDwgvJ/BlhUZRp0Q9Ae2dl/Eto6/uE8endWQBTCS0t2xbGwAO0+y8uQ
lu4VERx7/o2JCIBdXPevDhWsNcsrkcaSKcthGcSWM9IgAslstMrSp5ttjZGnEX1y
u/xi9591WhIjQRYCNrYvGmqNdO1oDbM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:06 2025 by rpki-client