Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/31cb2788-4474-3889-9f7f-b65f7a61f692.roa
File:                     31cb2788-4474-3889-9f7f-b65f7a61f692.roa (raw, json)
Hash identifier:          otrOGgIY72FbLA6udf+/uYu3ZIWN5SQfh0LpMDdhP80=
Subject key identifier:   54:A9:E7:81:D3:EC:E8:03:47:4B:C1:60:20:9D:B1:05:98:41:3E:29
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0F7EB31E1D61DD5F87B80
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/31cb2788-4474-3889-9f7f-b65f7a61f692.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     41264
IP address blocks:        104.133.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:f7:eb:31:e1:d6:1d:d5:f8:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=21e42317-7cb0-473a-9f96-31c4424241b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5f:f7:9a:00:0b:32:d7:44:0e:03:55:82:4a:
                    17:43:99:b1:84:e1:fe:2a:aa:47:38:db:ea:21:5b:
                    b0:a3:9c:b6:0f:21:a8:f9:d6:5e:b3:a5:5e:9a:20:
                    87:79:15:0c:80:be:12:42:00:50:e8:3f:8f:7f:c5:
                    f6:68:dd:30:6c:79:20:eb:e5:b0:21:6b:54:dd:4e:
                    8a:3c:bc:31:b6:06:75:b8:ba:6b:09:d6:73:7b:d3:
                    cc:37:8a:e2:ab:bf:46:ee:8e:af:11:1b:93:6a:c1:
                    57:7a:73:25:4f:ce:01:7e:06:48:69:41:8a:8e:b6:
                    ec:c6:ba:b4:ea:f5:49:71:05:31:99:4c:e4:42:69:
                    70:66:91:8b:12:e1:60:87:1b:fc:f9:67:69:c0:5c:
                    65:9e:67:02:e5:92:d8:8c:9c:e5:3d:51:d2:a4:59:
                    1d:5b:be:5a:bd:19:17:5b:7b:e2:6f:c5:29:9e:73:
                    66:c0:60:20:78:d1:5d:6d:d4:ce:26:0a:3a:e3:12:
                    ed:46:1b:f2:10:77:a1:6f:5d:1e:f0:06:2a:57:8e:
                    64:9c:b2:6b:1f:73:33:5d:da:54:9d:bf:75:4b:1c:
                    e6:fe:13:1b:04:7c:2c:ca:e0:08:51:8c:24:0f:dc:
                    0b:64:f1:33:47:f8:80:a8:a1:a2:0d:be:f4:49:64:
                    49:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A9:E7:81:D3:EC:E8:03:47:4B:C1:60:20:9D:B1:05:98:41:3E:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/31cb2788-4474-3889-9f7f-b65f7a61f692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:01:6d:cb:1a:59:54:ad:36:05:0f:8c:2d:09:07:bc:a5:33:
         8d:a3:c1:19:d6:3b:6f:9e:d5:6a:07:d7:f4:36:0b:f5:c1:3a:
         54:aa:8f:c6:4b:f8:7e:4e:6d:02:92:12:31:c3:76:3b:5f:e6:
         18:28:d4:50:f1:68:4d:54:6e:4b:76:65:43:07:c5:53:43:28:
         d2:56:53:31:d4:f1:df:88:2e:ef:a9:d5:24:0f:f6:fe:ff:01:
         bc:c4:ea:7c:d3:90:16:ca:fc:5c:5e:35:ef:c0:9c:04:00:4e:
         8d:84:ed:00:b8:5c:ce:2b:d5:81:cc:4c:8b:1c:4d:24:8d:74:
         00:36:2a:c5:9e:6c:fe:44:c1:bd:49:6e:e2:4b:86:e9:b4:9d:
         48:3e:fe:0c:2a:10:ce:03:0e:35:52:78:68:b8:43:24:92:c3:
         ad:a8:b3:24:6b:22:8c:22:db:8b:4c:ea:3e:e9:a0:9b:16:96:
         ac:7c:e3:8a:05:ab:21:11:f4:bf:71:32:e2:44:da:7a:f3:4d:
         ba:aa:c8:77:fd:dd:e3:63:17:00:72:06:1f:21:1b:3c:56:9e:
         61:69:33:e2:8d:ee:3a:75:f0:b7:5b:77:cf:ae:db:be:33:2f:
         94:ba:41:69:f8:91:42:05:ff:86:9a:74:a5:7d:a3:3e:c3:af:
         36:06:15:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPfrMeHWHdX4e4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
MjFlNDIzMTctN2NiMC00NzNhLTlmOTYtMzFjNDQyNDI0MWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV/3mgALMtdEDgNVgkoXQ5mxhOH+KqpHONvq
IVuwo5y2DyGo+dZes6VemiCHeRUMgL4SQgBQ6D+Pf8X2aN0wbHkg6+WwIWtU3U6K
PLwxtgZ1uLprCdZze9PMN4riq79G7o6vERuTasFXenMlT84BfgZIaUGKjrbsxrq0
6vVJcQUxmUzkQmlwZpGLEuFghxv8+WdpwFxlnmcC5ZLYjJzlPVHSpFkdW75avRkX
W3vib8UpnnNmwGAgeNFdbdTOJgo64xLtRhvyEHehb10e8AYqV45knLJrH3MzXdpU
nb91Sxzm/hMbBHwsyuAIUYwkD9wLZPEzR/iAqKGiDb70SWRJcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFSp54HT7OgDR0vBYCCdsQWYQT4pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzFjYjI3ODgtNDQ3NC0z
ODg5LTlmN2YtYjY1ZjdhNjFmNjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIXaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACgBbcsaWVStNgUPjC0JB7ylM42jwRnWO2+e1WoH1/Q2C/XBOlSqj8ZL
+H5ObQKSEjHDdjtf5hgo1FDxaE1Ubkt2ZUMHxVNDKNJWUzHU8d+ILu+p1SQP9v7/
AbzE6nzTkBbK/FxeNe/AnAQATo2E7QC4XM4r1YHMTIscTSSNdAA2KsWebP5Ewb1J
buJLhum0nUg+/gwqEM4DDjVSeGi4QySSw62osyRrIowi24tM6j7poJsWlqx844oF
qyER9L9xMuJE2nrzTbqqyHf93eNjFwByBh8hGzxWnmFpM+KN7jp18Ldbd8+u274z
L5S6QWn4kUIF/4aadKV9oz7DrzYGFSI=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:00:21 2025 by rpki-client