Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/945ade78-4d3e-31f5-9be5-815948084b7f.roa
File:                     945ade78-4d3e-31f5-9be5-815948084b7f.roa (raw, json)
Hash identifier:          g7joAnGimfVCxkW/FE06ZR3T+U3NJVA3c/suFtq0m/c=
Subject key identifier:   26:62:FD:BC:FC:4B:FC:57:EE:46:45:70:C2:8A:D3:9F:FB:40:31:63
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A70861A74747A18F462ED33C0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/945ade78-4d3e-31f5-9be5-815948084b7f.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     41264
IP address blocks:        104.132.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:1a:74:74:7a:18:f4:62:ed:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=55ded69a-8080-48e0-aaff-e6422f1b9529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:58:18:f6:f8:c4:bf:e3:50:65:b2:b0:08:9d:
                    5c:d0:77:3d:8e:9f:61:93:9f:e3:80:fe:3c:54:91:
                    ba:ec:da:58:1c:75:1a:ef:e5:13:06:80:e5:c8:7c:
                    d8:70:6d:06:5c:de:a2:16:4f:29:1c:5a:64:13:79:
                    cf:83:38:89:d7:3e:d1:8d:ed:b8:b6:1a:fe:00:3e:
                    67:67:7e:72:43:68:46:ec:c7:e7:7c:98:c5:3d:57:
                    6a:f1:5b:7b:af:fb:ba:34:7f:3c:82:a6:6e:b6:6e:
                    90:2e:72:35:61:21:00:87:4b:a4:4d:07:4a:5b:98:
                    7e:9a:9d:25:a4:1d:4f:8f:73:22:91:f7:f1:92:a8:
                    02:5d:c4:9b:cf:5b:b2:44:96:25:15:83:1e:f8:46:
                    56:86:12:1e:c2:4a:a3:d5:e0:f3:88:f6:b6:dd:22:
                    7c:f2:25:58:6f:82:dc:ce:50:52:ba:13:30:cc:55:
                    8b:cd:6c:fc:12:94:0e:a7:1d:cc:5c:d7:39:74:7c:
                    e4:9f:1a:72:f6:7e:25:59:e4:01:ab:ed:a0:bb:fb:
                    f0:2f:fd:7a:9c:b8:41:e4:d4:e0:59:57:d6:20:41:
                    b8:5c:79:ba:21:8f:ce:d2:8b:77:77:f8:41:24:00:
                    70:42:83:72:9f:b6:e6:1b:eb:b9:14:e2:ec:ce:fe:
                    58:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:62:FD:BC:FC:4B:FC:57:EE:46:45:70:C2:8A:D3:9F:FB:40:31:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/945ade78-4d3e-31f5-9be5-815948084b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:b7:7b:3c:19:8e:5d:3d:8b:7c:8b:40:53:a1:bc:dd:8e:80:
         ca:f3:af:80:62:71:50:76:d7:f6:65:a6:17:5f:f4:a7:75:d7:
         b0:4d:33:f2:95:01:83:c8:a7:77:13:28:3e:3b:de:97:57:1a:
         92:4f:61:9f:5c:8c:3f:3a:35:ca:b4:5f:3b:7d:3d:34:d6:46:
         2b:3c:61:b6:84:1f:cf:d7:c2:b1:b3:25:de:e2:be:f2:07:8e:
         47:b1:ef:c5:01:5b:2e:d0:42:bf:08:cc:5a:6b:31:68:af:b8:
         9a:bf:45:ac:ff:83:6c:29:cd:a2:92:ce:be:e4:73:80:3f:19:
         87:d5:e4:62:86:d3:82:1f:02:85:ce:95:49:3f:70:01:34:68:
         ac:0f:07:1f:75:37:e8:fa:b4:77:98:8e:ad:7f:d3:98:22:14:
         95:22:fb:2e:c9:ed:1b:d9:b1:f2:40:21:6b:6b:3f:50:5b:7f:
         8c:a2:63:f4:c8:07:93:87:9d:92:d6:29:23:7b:12:26:d6:1e:
         e7:80:6c:f0:91:97:b2:9d:e3:9c:e9:11:32:67:e5:26:46:ae:
         16:5f:a7:a4:0e:cd:d6:71:6c:0d:3b:3b:0a:72:5c:a3:ac:c5:
         c3:0d:70:ff:07:4e:94:10:6a:96:47:b6:37:99:da:3d:90:cb:
         ab:5e:6d:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhhp0dHoY9GLtM8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk
NTVkZWQ2OWEtODA4MC00OGUwLWFhZmYtZTY0MjJmMWI5NTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVgY9vjEv+NQZbKwCJ1c0Hc9jp9hk5/jgP48
VJG67NpYHHUa7+UTBoDlyHzYcG0GXN6iFk8pHFpkE3nPgziJ1z7Rje24thr+AD5n
Z35yQ2hG7MfnfJjFPVdq8Vt7r/u6NH88gqZutm6QLnI1YSEAh0ukTQdKW5h+mp0l
pB1Pj3MikffxkqgCXcSbz1uyRJYlFYMe+EZWhhIewkqj1eDziPa23SJ88iVYb4Lc
zlBSuhMwzFWLzWz8EpQOpx3MXNc5dHzknxpy9n4lWeQBq+2gu/vwL/16nLhB5NTg
WVfWIEG4XHm6IY/O0ot3d/hBJABwQoNyn7bmG+u5FOLszv5Y+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCZi/bz8S/xX7kZFcMKK05/7QDFjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOTQ1YWRlNzgtNGQzZS0z
MWY1LTliZTUtODE1OTQ4MDg0YjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIT7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABW3ezwZjl09i3yLQFOhvN2OgMrzr4BicVB21/Zlphdf9Kd117BNM/KV
AYPIp3cTKD473pdXGpJPYZ9cjD86Ncq0Xzt9PTTWRis8YbaEH8/XwrGzJd7ivvIH
jkex78UBWy7QQr8IzFprMWivuJq/Raz/g2wpzaKSzr7kc4A/GYfV5GKG04IfAoXO
lUk/cAE0aKwPBx91N+j6tHeYjq1/05giFJUi+y7J7RvZsfJAIWtrP1Bbf4yiY/TI
B5OHnZLWKSN7EibWHueAbPCRl7Kd45zpETJn5SZGrhZfp6QOzdZxbA07OwpyXKOs
xcMNcP8HTpQQapZHtjeZ2j2Qy6tebQg=
-----END CERTIFICATE-----
Generated at Thu Jul 10 09:44:15 2025 by rpki-client