Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8b04b75b-7e7e-3d38-bfea-05981c9e8b87.roa
File:                     8b04b75b-7e7e-3d38-bfea-05981c9e8b87.roa (raw, json)
Hash identifier:          7c0S1JtRR+Aq+r42s/bNXSiqrGjffv1CoWvRSOaOpxM=
Subject key identifier:   E7:BB:4F:14:52:67:49:72:7A:E2:91:DE:9B:14:CE:15:EE:F4:10:06
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584993FA0A3C42FB88BC45CCE800
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8b04b75b-7e7e-3d38-bfea-05981c9e8b87.roa
Signing time:             Sat 19 Apr 2025 13:01:02 +0000
ROA not before:           Sat 19 Apr 2025 13:01:02 +0000
ROA not after:            Fri 18 Jul 2025 13:01:02 +0000
asID:                     15169
IP address blocks:        104.134.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:93:fa:0a:3c:42:fb:88:bc:45:cc:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Apr 19 13:01:02 2025 GMT
            Not After : Jul 18 13:01:02 2025 GMT
        Subject: CN=1449ce2e-e575-4a4a-8db1-06c92b369ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:79:61:ac:54:14:7a:b0:48:f5:cf:09:88:d5:
                    2e:01:92:a8:53:79:9a:b7:6c:93:f6:87:3e:f4:c2:
                    eb:42:17:b8:7a:c9:1c:5b:92:4d:1b:8b:a7:98:d6:
                    a6:70:ad:68:1c:26:e8:e2:68:4c:42:c2:78:ac:02:
                    2a:f5:e0:ea:d0:29:3e:26:db:fa:b7:fb:71:8b:74:
                    ba:fc:32:ff:3b:d1:93:b4:c8:96:8f:2c:a9:a0:bd:
                    20:1e:ff:a6:35:3a:cd:c7:db:48:4b:7c:50:9d:4d:
                    89:39:a6:da:af:a8:72:1e:9f:db:0f:db:c4:e8:4a:
                    17:b0:36:3f:e1:63:36:5c:4b:e1:f3:35:dd:3a:0d:
                    3f:ca:17:47:54:8f:2e:64:db:b6:c4:4b:7c:4f:02:
                    ab:98:23:48:72:38:5d:13:a0:ce:10:be:d6:06:5f:
                    a1:82:fa:60:bb:f3:06:bc:ba:1f:a1:11:c0:e6:36:
                    fc:6f:2d:1e:82:6b:b8:4d:fa:4c:98:f1:ed:40:6e:
                    22:15:f4:8e:9a:93:93:76:be:0d:d4:55:a8:64:f1:
                    7e:59:38:09:72:fb:ea:10:50:93:41:d0:5f:c1:fb:
                    d9:73:de:80:75:3d:38:33:30:9e:5d:8f:55:ea:19:
                    c4:52:85:ca:5a:ca:76:38:3b:fe:2e:4f:b2:7a:af:
                    a5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BB:4F:14:52:67:49:72:7A:E2:91:DE:9B:14:CE:15:EE:F4:10:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/8b04b75b-7e7e-3d38-bfea-05981c9e8b87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:ea:24:71:f1:70:2d:89:d3:f5:90:df:8b:66:ec:87:5c:29:
         bf:48:92:c4:2e:e4:fb:05:1f:c4:d2:c3:ff:a2:50:1f:b7:56:
         52:e7:02:d5:ac:e3:66:a8:48:07:ef:85:95:82:6b:58:50:0a:
         cc:68:9a:8c:47:f9:a2:87:5b:78:ed:0a:40:8b:57:9d:11:33:
         8c:65:5c:4e:6c:b3:a8:a3:d4:08:e4:0c:0c:76:72:9a:cb:4a:
         9b:11:79:2d:04:f5:d3:69:e0:e6:4e:9b:f5:ff:39:d5:9c:57:
         66:7a:88:4e:4d:81:4e:8c:1d:63:7d:a2:ca:44:27:12:8f:c2:
         08:52:b4:9a:f7:9e:fb:2b:b4:c5:59:5f:bd:b9:7d:4c:9e:2a:
         f1:10:6b:95:91:c8:53:fc:92:d6:2d:96:64:77:2f:64:29:b4:
         59:5e:db:de:de:06:7c:39:87:fc:c9:f3:d9:fc:4c:3f:80:bc:
         fa:60:26:26:25:90:3a:e4:d5:f6:8e:9f:dc:a9:11:1e:5a:a6:
         a3:78:ca:44:90:c2:37:e5:3a:05:2e:4a:fb:c7:be:84:77:42:
         39:e2:88:6a:03:70:e3:c6:5b:68:f2:21:5d:f3:a1:6c:db:5e:
         77:15:40:2b:79:98:bf:3d:8a:80:b1:42:6a:a2:7c:bd:05:f5:
         8b:de:fb:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmT+go8QvuIvEXM6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDQxOTEzMDEwMloXDTI1MDcxODEzMDEwMlowLzEtMCsGA1UEAxMk
MTQ0OWNlMmUtZTU3NS00YTRhLThkYjEtMDZjOTJiMzY5YWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnlhrFQUerBI9c8JiNUuAZKoU3mat2yT9oc+
9MLrQhe4eskcW5JNG4unmNamcK1oHCbo4mhMQsJ4rAIq9eDq0Ck+Jtv6t/txi3S6
/DL/O9GTtMiWjyypoL0gHv+mNTrNx9tIS3xQnU2JOabar6hyHp/bD9vE6EoXsDY/
4WM2XEvh8zXdOg0/yhdHVI8uZNu2xEt8TwKrmCNIcjhdE6DOEL7WBl+hgvpgu/MG
vLofoRHA5jb8by0egmu4TfpMmPHtQG4iFfSOmpOTdr4N1FWoZPF+WTgJcvvqEFCT
QdBfwfvZc96AdT04MzCeXY9V6hnEUoXKWsp2ODv+Lk+yeq+lWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOe7TxRSZ0lyeuKR3psUzhXu9BAGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOGIwNGI3NWItN2U3ZS0z
ZDM4LWJmZWEtMDU5ODFjOWU4Yjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaIaMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJDqJHHxcC2J0/WQ34tm7IdcKb9IksQu5PsFH8TSw/+iUB+3VlLnAtWs
42aoSAfvhZWCa1hQCsxomoxH+aKHW3jtCkCLV50RM4xlXE5ss6ij1AjkDAx2cprL
SpsReS0E9dNp4OZOm/X/OdWcV2Z6iE5NgU6MHWN9ospEJxKPwghStJr3nvsrtMVZ
X725fUyeKvEQa5WRyFP8ktYtlmR3L2QptFle297eBnw5h/zJ89n8TD+AvPpgJiYl
kDrk1faOn9ypER5apqN4ykSQwjflOgUuSvvHvoR3QjniiGoDcOPGW2jyIV3zoWzb
XncVQCt5mL89ioCxQmqifL0F9Yve+4A=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:20:26 2025 by rpki-client