Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6d3bfdc2-0e92-3e63-a105-7bacc1413483.roa
File:                     6d3bfdc2-0e92-3e63-a105-7bacc1413483.roa (raw, json)
Hash identifier:          XDV7qGAauyHY6cBbRxdZ2Ae8tw7NsPQ7S7fOUQwu9V0=
Subject key identifier:   0B:49:C0:D9:00:0C:AA:25:B8:1D:C6:E5:67:90:F9:10:23:30:95:51
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848BFEBD896E5025E19CDD15480
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6d3bfdc2-0e92-3e63-a105-7bacc1413483.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        104.134.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:d8:96:e5:02:5e:19:cd:d1:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=06257730-b82a-4459-8d6e-383c684eef9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0e:c8:21:76:44:07:bb:a8:d0:b3:f7:8e:f8:
                    b6:cb:42:f2:eb:b1:81:1a:02:9c:10:5b:e1:b0:55:
                    13:26:6f:02:94:6f:db:e8:b5:57:3e:58:c1:b7:36:
                    9e:0b:e4:88:35:c5:07:b7:94:66:da:01:c4:d3:db:
                    a2:5c:7e:17:15:4a:05:f5:c5:9e:cb:6f:af:b0:5c:
                    84:79:b1:91:10:8a:6a:bb:20:72:a0:52:b2:99:54:
                    52:9c:ce:ae:ed:9d:02:27:4f:76:35:6e:70:fa:6c:
                    72:dc:41:5a:85:21:b1:d0:2a:27:3c:b3:b4:47:b7:
                    a7:6a:97:89:68:c4:3b:30:46:60:32:55:e5:4c:40:
                    3e:46:a9:7b:11:0f:aa:ff:86:41:71:8e:bb:bc:fc:
                    87:70:33:b3:27:eb:e6:6d:f6:b4:5f:e0:62:1e:9f:
                    c9:a1:80:71:51:a7:b4:9e:d5:a6:59:82:5f:0e:2f:
                    aa:46:35:98:f9:8c:87:60:e7:a8:0e:cf:41:03:d2:
                    49:78:56:81:5d:f9:55:d8:54:db:ba:67:f5:d3:f3:
                    86:28:8c:ff:ef:42:a1:7a:38:77:29:88:ac:0c:d7:
                    0b:50:8a:ac:11:46:6c:22:d2:ec:2d:e1:bb:8b:5f:
                    eb:f6:19:1d:91:4e:68:e1:b5:f6:9b:70:ac:4b:0d:
                    de:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:49:C0:D9:00:0C:AA:25:B8:1D:C6:E5:67:90:F9:10:23:30:95:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/6d3bfdc2-0e92-3e63-a105-7bacc1413483.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ff:f9:3f:a0:ae:4a:76:49:df:9c:e6:2b:ad:d1:ed:f4:a8:
         4b:0a:2d:d9:58:77:aa:ee:4f:c5:0c:79:95:b7:e6:90:07:bb:
         39:ad:b8:50:b6:24:cd:24:e5:55:66:51:eb:03:4c:c6:2f:36:
         f0:11:63:a2:49:27:e5:b2:9e:d5:9e:47:44:83:dc:70:56:d9:
         69:07:33:d9:6e:de:31:e1:71:a0:67:db:4d:58:fb:bf:7b:e1:
         d1:e4:15:55:69:dd:91:20:ab:47:54:16:eb:92:86:46:08:94:
         b1:c2:ba:42:12:23:18:59:d5:0e:4c:61:fd:dd:4d:60:0c:48:
         6b:da:43:71:60:f9:f7:a6:45:7d:6a:de:17:ca:f6:47:0b:d0:
         28:e4:d8:1e:27:69:ce:39:f9:c0:ec:f4:2f:91:bd:fc:55:85:
         c3:67:fd:be:45:1b:36:f5:70:bd:b1:ab:13:db:16:82:3e:3c:
         6e:c4:7b:d0:af:73:09:2c:aa:7c:b5:b4:ed:0c:40:68:cc:06:
         b9:01:55:c2:c0:5a:26:1d:73:45:5d:01:29:af:90:eb:9d:0f:
         3f:e2:ce:be:fb:a5:6b:10:c1:d5:88:5b:3b:cd:0b:22:5a:06:
         89:ff:02:d6:d2:93:91:a0:99:41:65:f1:d1:f7:8c:06:f4:11:
         99:9e:0f:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69iW5QJeGc3RVIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
MDYyNTc3MzAtYjgyYS00NDU5LThkNmUtMzgzYzY4NGVlZjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw7IIXZEB7uo0LP3jvi2y0Ly67GBGgKcEFvh
sFUTJm8ClG/b6LVXPljBtzaeC+SINcUHt5Rm2gHE09uiXH4XFUoF9cWey2+vsFyE
ebGREIpquyByoFKymVRSnM6u7Z0CJ092NW5w+mxy3EFahSGx0ConPLO0R7enapeJ
aMQ7MEZgMlXlTEA+Rql7EQ+q/4ZBcY67vPyHcDOzJ+vmbfa0X+BiHp/JoYBxUae0
ntWmWYJfDi+qRjWY+YyHYOeoDs9BA9JJeFaBXflV2FTbumf10/OGKIz/70Khejh3
KYisDNcLUIqsEUZsItLsLeG7i1/r9hkdkU5o4bX2m3CsSw3e0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAtJwNkADKoluB3G5WeQ+RAjMJVRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvNmQzYmZkYzItMGU5Mi0z
ZTYzLWExMDUtN2JhY2MxNDEzNDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIbQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHX/+T+grkp2Sd+c5iut0e30qEsKLdlYd6ruT8UMeZW35pAHuzmtuFC2
JM0k5VVmUesDTMYvNvARY6JJJ+WyntWeR0SD3HBW2WkHM9lu3jHhcaBn201Y+797
4dHkFVVp3ZEgq0dUFuuShkYIlLHCukISIxhZ1Q5MYf3dTWAMSGvaQ3Fg+femRX1q
3hfK9kcL0Cjk2B4nac45+cDs9C+RvfxVhcNn/b5FGzb1cL2xqxPbFoI+PG7Ee9Cv
cwksqny1tO0MQGjMBrkBVcLAWiYdc0VdASmvkOudDz/izr77pWsQwdWIWzvNCyJa
Bon/AtbSk5GgmUFl8dH3jAb0EZmeDy4=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:59:02 2025 by rpki-client