Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3481bf48-7533-372e-ab12-170c969433f0.roa
File:                     3481bf48-7533-372e-ab12-170c969433f0.roa (raw, json)
Hash identifier:          cDDVUsxMCUdConBim236El0aU8VOnbSVK8c36Hf/tls=
Subject key identifier:   EE:09:3A:E6:0F:AC:E5:10:53:42:9B:38:08:70:2D:A3:F5:CC:E8:3C
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350C0282026C8220069E780
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3481bf48-7533-372e-ab12-170c969433f0.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     395973
IP address blocks:        104.134.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:c0:28:20:26:c8:22:00:69:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=5c7e4919-9436-4f10-adf6-b4ebc4948286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:06:e6:61:17:64:9d:d2:1b:cd:be:05:8e:fa:
                    d6:14:91:0a:6b:4f:6c:1c:5f:c9:f9:24:81:e7:25:
                    4f:83:86:0b:0f:50:fa:af:a5:e5:95:fd:6a:48:57:
                    47:b6:8c:07:f5:e0:9c:77:57:e2:f6:41:8b:4a:9d:
                    1b:41:66:28:24:1c:6b:8a:e2:70:fc:66:d5:a0:08:
                    32:7a:36:ef:aa:c6:7f:f3:d1:69:9a:bb:64:b6:3e:
                    56:5f:bc:17:19:7f:a3:c2:61:7d:d6:91:59:33:87:
                    11:1e:b7:c2:2f:9c:83:56:58:32:26:81:c9:5f:25:
                    37:ac:ce:a0:b7:ab:57:cb:cd:c8:1b:7f:cd:e8:d9:
                    33:65:74:cf:7c:29:dc:b2:08:0e:ce:aa:f7:90:f8:
                    bf:de:3a:0c:bd:d6:fe:b0:ca:56:08:1d:00:73:a5:
                    78:f6:57:93:e3:45:49:be:97:84:08:ee:82:68:ba:
                    b9:0d:64:3b:57:5a:d0:b5:11:4c:72:56:c3:57:92:
                    9c:c6:e5:2b:8c:61:61:ca:0a:e4:fc:be:16:56:51:
                    9a:cc:6b:b4:d2:c0:79:d0:e4:dc:f0:f1:0f:c4:eb:
                    e1:09:4a:12:7a:8f:e4:16:1b:f4:f9:13:02:dd:81:
                    4d:61:f7:65:07:31:08:7d:8e:85:1f:68:2a:5d:d8:
                    fd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:09:3A:E6:0F:AC:E5:10:53:42:9B:38:08:70:2D:A3:F5:CC:E8:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3481bf48-7533-372e-ab12-170c969433f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:10:a3:b1:67:aa:d4:7e:0c:50:87:c5:02:c1:a3:51:76:8e:
         a3:ed:15:13:70:cc:86:fe:f4:a3:8a:21:99:8d:f2:a5:89:4d:
         d4:57:24:82:a0:c5:4b:c1:67:fb:45:f4:46:fa:08:5b:df:4e:
         6a:60:48:21:f2:a8:7d:8b:d3:6e:ec:9c:a7:e6:50:98:c4:6c:
         cb:cc:f4:f3:dc:56:88:5c:f5:1f:25:49:d6:6a:0d:6b:87:72:
         a5:72:03:a0:83:98:25:2e:3c:3e:81:6d:02:f8:4d:e1:fb:cb:
         c1:d9:01:8c:44:3c:2b:51:79:59:e0:26:ad:10:09:bc:38:0b:
         98:c1:48:96:35:ac:b9:5b:f6:fd:b8:db:56:c4:65:44:45:6e:
         c1:68:43:9d:a1:4f:21:b0:a2:cd:b3:07:ce:33:89:53:3c:bf:
         aa:91:eb:b2:ef:b6:ff:50:51:1d:45:5d:e9:a4:76:92:7f:ba:
         88:90:6d:44:0f:da:b3:b9:9c:b4:29:d6:c8:6d:f8:55:c9:99:
         fc:11:74:07:5c:47:62:ff:56:57:b9:92:cc:99:69:87:cb:a4:
         68:21:3c:0d:76:dd:02:02:cb:db:28:de:ae:89:48:01:b3:2c:
         e8:8a:8a:71:d6:83:18:c4:f3:40:5d:dd:e1:be:b3:1d:77:31:
         68:52:5f:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUMAoICbIIgBp54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk
NWM3ZTQ5MTktOTQzNi00ZjEwLWFkZjYtYjRlYmM0OTQ4Mjg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAbmYRdkndIbzb4FjvrWFJEKa09sHF/J+SSB
5yVPg4YLD1D6r6Xllf1qSFdHtowH9eCcd1fi9kGLSp0bQWYoJBxriuJw/GbVoAgy
ejbvqsZ/89Fpmrtktj5WX7wXGX+jwmF91pFZM4cRHrfCL5yDVlgyJoHJXyU3rM6g
t6tXy83IG3/N6NkzZXTPfCncsggOzqr3kPi/3joMvdb+sMpWCB0Ac6V49leT40VJ
vpeECO6CaLq5DWQ7V1rQtRFMclbDV5KcxuUrjGFhygrk/L4WVlGazGu00sB50OTc
8PEPxOvhCUoSeo/kFhv0+RMC3YFNYfdlBzEIfY6FH2gqXdj90wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO4JOuYPrOUQU0KbOAhwLaP1zOg8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvMzQ4MWJmNDgtNzUzMy0z
NzJlLWFiMTItMTcwYzk2OTQzM2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFMQo7FnqtR+DFCHxQLBo1F2jqPtFRNwzIb+9KOKIZmN8qWJTdRXJIKg
xUvBZ/tF9Eb6CFvfTmpgSCHyqH2L027snKfmUJjEbMvM9PPcVohc9R8lSdZqDWuH
cqVyA6CDmCUuPD6BbQL4TeH7y8HZAYxEPCtReVngJq0QCbw4C5jBSJY1rLlb9v24
21bEZURFbsFoQ52hTyGwos2zB84ziVM8v6qR67Lvtv9QUR1FXemkdpJ/uoiQbUQP
2rO5nLQp1sht+FXJmfwRdAdcR2L/Vle5ksyZaYfLpGghPA123QICy9so3q6JSAGz
LOiKinHWgxjE80Bd3eG+sx13MWhSX3E=
-----END CERTIFICATE-----
Generated at Thu Jul 10 10:43:59 2025 by rpki-client