Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5146e6de-cbc2-3c1f-9a8a-640c2371254d.roa
File:                     5146e6de-cbc2-3c1f-9a8a-640c2371254d.roa (raw, json)
Hash identifier:          NogrbDZs6FjfMHMQonET8GxwQuIiRz97fX29TDqxiTQ=
Subject key identifier:   F9:DA:92:46:B1:4F:95:2E:CD:94:62:8C:A2:BC:2B:31:2C:10:C6:64
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350B44B449901EE968B4880
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5146e6de-cbc2-3c1f-9a8a-640c2371254d.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:b4:4b:44:99:01:ee:96:8b:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=cbed2644-26d3-474c-8f09-dfd31e39be57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:33:f4:c2:50:b5:58:8f:8a:94:df:05:f1:d4:
                    b4:26:53:ea:e8:9e:ff:7f:d6:e9:ea:19:4e:6d:df:
                    de:9c:15:18:80:fa:d6:88:a4:18:6b:49:2a:60:d3:
                    9c:66:bc:68:07:65:1f:7b:0c:8d:e6:48:88:7c:5c:
                    79:a0:23:81:78:73:04:63:2e:72:e2:6e:a5:6e:0b:
                    14:e9:8a:6b:81:39:37:c0:6e:61:cf:9b:f7:55:e4:
                    2e:88:63:a6:6b:4c:7a:b6:ca:9d:63:76:26:6c:d1:
                    2e:d7:45:94:7e:44:c7:66:5d:6f:53:7e:d7:df:a5:
                    5f:87:a1:56:f4:93:ca:ad:4d:6b:e2:52:3c:0f:71:
                    d7:65:86:c7:91:3a:d6:10:04:76:f9:5d:9b:62:63:
                    1e:3a:9a:d6:12:dd:f8:e4:e0:48:00:db:38:31:b3:
                    e1:f7:34:a5:b4:4e:3b:a3:6f:d0:fc:73:76:d2:d3:
                    47:ea:a5:ba:95:35:f5:30:29:56:34:7d:11:76:94:
                    05:1e:a4:49:ab:f9:8a:d1:cd:2e:69:21:de:53:7f:
                    5c:8f:84:b1:7b:a7:ea:ed:03:36:81:6f:05:de:9a:
                    44:e7:57:ad:3a:7b:6d:b6:96:d9:df:f0:24:6f:af:
                    58:f2:0d:86:b7:94:d2:35:12:6c:87:71:e3:0a:2f:
                    ff:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DA:92:46:B1:4F:95:2E:CD:94:62:8C:A2:BC:2B:31:2C:10:C6:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/5146e6de-cbc2-3c1f-9a8a-640c2371254d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:16:cb:b3:37:da:0b:b0:b5:d7:7e:90:31:a0:ea:dd:78:65:
         88:c6:bd:11:e7:6f:f1:aa:b1:39:5d:a3:b4:e5:8b:86:33:82:
         36:e5:56:03:0d:5e:3e:5a:4c:8c:ac:3a:a9:fd:7a:ed:04:99:
         40:45:0a:0b:d8:67:9f:1a:c3:1c:0e:77:82:70:01:63:90:79:
         b3:c0:ce:61:39:33:3d:6d:59:a0:ae:3a:54:1d:8c:41:c7:09:
         13:fe:f4:33:25:c5:ba:09:55:93:61:85:5f:55:4b:69:ac:af:
         45:8c:43:f2:f2:83:38:1e:4c:d5:06:d5:23:25:ad:72:df:b9:
         2d:9e:bb:7c:12:6a:42:c3:3f:11:54:ee:cb:ea:05:18:20:32:
         48:e1:5a:ec:20:36:13:4c:95:33:dc:91:f8:6e:e1:1f:46:eb:
         4f:7e:e9:9d:07:f1:c9:ad:8e:a0:2a:2f:a5:7c:48:18:a8:33:
         67:3b:9c:d8:a0:00:4a:24:1c:98:5f:03:ae:f3:03:14:0d:db:
         44:b8:1b:69:7d:4a:11:64:62:93:36:e7:71:6a:38:7f:24:e0:
         6f:a0:3b:41:25:20:7c:e8:27:76:50:7c:e0:16:3f:ca:34:13:
         1b:32:e6:01:f6:c1:61:9a:36:bc:36:e1:a1:f2:71:8d:c3:7c:
         71:2f:45:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzULRLRJkB7paLSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk
Y2JlZDI2NDQtMjZkMy00NzRjLThmMDktZGZkMzFlMzliZTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjP0wlC1WI+KlN8F8dS0JlPq6J7/f9bp6hlO
bd/enBUYgPrWiKQYa0kqYNOcZrxoB2UfewyN5kiIfFx5oCOBeHMEYy5y4m6lbgsU
6YprgTk3wG5hz5v3VeQuiGOma0x6tsqdY3YmbNEu10WUfkTHZl1vU37X36Vfh6FW
9JPKrU1r4lI8D3HXZYbHkTrWEAR2+V2bYmMeOprWEt345OBIANs4MbPh9zSltE47
o2/Q/HN20tNH6qW6lTX1MClWNH0RdpQFHqRJq/mK0c0uaSHeU39cj4Sxe6fq7QM2
gW8F3ppE51etOntttpbZ3/Akb69Y8g2Gt5TSNRJsh3HjCi//JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPnakkaxT5UuzZRijKK8KzEsEMZkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNTE0NmU2ZGUtY2JjMi0z
YzFmLTlhOGEtNjQwYzIzNzEyNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABcWy7M32guwtdd+kDGg6t14ZYjGvRHnb/GqsTldo7Tli4YzgjblVgMN
Xj5aTIysOqn9eu0EmUBFCgvYZ58awxwOd4JwAWOQebPAzmE5Mz1tWaCuOlQdjEHH
CRP+9DMlxboJVZNhhV9VS2msr0WMQ/LygzgeTNUG1SMlrXLfuS2eu3wSakLDPxFU
7svqBRggMkjhWuwgNhNMlTPckfhu4R9G609+6Z0H8cmtjqAqL6V8SBioM2c7nNig
AEokHJhfA67zAxQN20S4G2l9ShFkYpM253FqOH8k4G+gO0ElIHzoJ3ZQfOAWP8o0
Exsy5gH2wWGaNrw24aHycY3DfHEvRaE=
-----END CERTIFICATE-----
Generated at Thu Jul 10 02:49:12 2025 by rpki-client