Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/98c6f8b0-d29f-3f8f-91c0-ca4bf9359285.roa
File:                     98c6f8b0-d29f-3f8f-91c0-ca4bf9359285.roa (raw, json)
Hash identifier:          vHLfMASxPA38lNtNYrg8rXxzFGMeoLvf78tRay4dnMs=
Subject key identifier:   3C:D1:FC:71:53:81:92:7F:B2:55:F4:6D:63:2E:8F:B3:C8:00:39:EC
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A70860DD69E6DFCEAFF91A900
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/98c6f8b0-d29f-3f8f-91c0-ca4bf9359285.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     41264
IP address blocks:        104.132.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:0d:d6:9e:6d:fc:ea:ff:91:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=a86f885f-f988-42c1-a481-1fbe51812774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:95:8e:ce:22:12:b7:6e:9f:1d:9e:72:1b:d8:
                    b9:58:dc:12:6d:a9:46:50:2e:f6:89:d0:28:d1:6f:
                    3f:63:2a:51:08:25:66:87:77:31:11:e4:96:cf:16:
                    b5:a3:58:6a:f7:19:77:84:6d:6d:1f:76:57:ac:4a:
                    cb:d9:21:44:f0:1e:ab:21:c3:d7:54:54:6e:2a:9a:
                    b3:ab:b8:68:9d:12:d0:ae:03:1e:ad:ca:b7:c0:06:
                    bd:6a:39:b0:74:bd:5b:d3:2e:2d:90:56:90:11:87:
                    5a:66:68:6e:e3:54:54:2f:eb:32:67:15:ee:fb:57:
                    36:13:f1:79:c2:21:13:20:d9:68:24:d3:d9:05:cb:
                    bf:8e:5e:97:e5:58:d5:82:85:ea:28:3b:52:60:ad:
                    26:00:99:7e:03:76:25:c4:48:16:61:47:c1:e0:41:
                    54:c3:96:c6:82:58:3f:05:ce:48:5c:bf:48:7d:37:
                    92:2a:48:1f:63:7b:7c:c1:d7:fa:3c:5f:6a:ce:d3:
                    16:9e:e0:61:ca:ef:13:15:8c:a0:3c:4b:6b:c2:39:
                    58:ba:d3:4f:4c:7e:c4:be:ad:a4:3c:68:85:05:28:
                    4b:80:29:55:12:11:e5:12:53:dd:98:2c:fb:0a:70:
                    7a:e0:84:93:b8:0b:45:32:ca:29:b3:4b:71:a6:9f:
                    b5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D1:FC:71:53:81:92:7F:B2:55:F4:6D:63:2E:8F:B3:C8:00:39:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/98c6f8b0-d29f-3f8f-91c0-ca4bf9359285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:97:c4:a1:6c:6f:4b:49:15:b4:d3:f1:22:4b:9f:58:15:fc:
         b7:77:ca:89:bf:e0:b9:6a:60:be:95:01:76:91:15:ae:19:fe:
         28:24:b7:cb:70:dc:85:0f:b4:b6:b1:a4:a0:e6:64:cb:d4:e5:
         11:74:5c:fc:5a:8c:51:69:cd:da:88:5b:b3:75:dd:65:71:b5:
         34:dc:4a:36:6b:11:12:2f:fd:f2:57:f5:63:98:a3:18:62:44:
         2d:e3:9c:8e:d9:0e:45:b5:df:78:15:fa:39:72:9e:80:37:e8:
         11:fe:90:ba:08:9c:75:b4:36:7e:82:3a:13:a5:be:b6:9b:ad:
         a1:36:06:d7:c2:cf:b5:03:cc:ac:3e:c0:8f:02:5a:c9:0c:40:
         b5:b2:cb:7d:d7:51:8a:b6:67:6d:4d:20:66:54:bb:0f:3b:4b:
         61:3b:47:fb:81:5b:86:81:8c:69:df:12:15:ff:f5:06:04:2f:
         a0:35:e6:77:db:ee:53:6d:9d:16:f9:53:d1:83:bb:0f:8b:8f:
         b5:35:46:9b:32:5f:22:f4:aa:58:e2:8a:93:df:ac:24:bd:82:
         26:91:ee:aa:be:6c:52:ce:a9:a2:d7:ef:45:e1:70:d1:02:77:
         03:f7:98:fc:12:f4:57:fc:b2:d5:dd:14:55:14:71:36:58:2d:
         02:4f:23:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhg3Wnm386v+RqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk
YTg2Zjg4NWYtZjk4OC00MmMxLWE0ODEtMWZiZTUxODEyNzc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5WOziISt26fHZ5yG9i5WNwSbalGUC72idAo
0W8/YypRCCVmh3cxEeSWzxa1o1hq9xl3hG1tH3ZXrErL2SFE8B6rIcPXVFRuKpqz
q7honRLQrgMercq3wAa9ajmwdL1b0y4tkFaQEYdaZmhu41RUL+syZxXu+1c2E/F5
wiETINloJNPZBcu/jl6X5VjVgoXqKDtSYK0mAJl+A3YlxEgWYUfB4EFUw5bGglg/
Bc5IXL9IfTeSKkgfY3t8wdf6PF9qztMWnuBhyu8TFYygPEtrwjlYutNPTH7Evq2k
PGiFBShLgClVEhHlElPdmCz7CnB64ISTuAtFMsops0txpp+1SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDzR/HFTgZJ/slX0bWMuj7PIADnsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvOThjNmY4YjAtZDI5Zi0z
ZjhmLTkxYzAtY2E0YmY5MzU5Mjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABaXxKFsb0tJFbTT8SJLn1gV/Ld3yom/4LlqYL6VAXaRFa4Z/igkt8tw
3IUPtLaxpKDmZMvU5RF0XPxajFFpzdqIW7N13WVxtTTcSjZrERIv/fJX9WOYoxhi
RC3jnI7ZDkW133gV+jlynoA36BH+kLoInHW0Nn6COhOlvrabraE2BtfCz7UDzKw+
wI8CWskMQLWyy33XUYq2Z21NIGZUuw87S2E7R/uBW4aBjGnfEhX/9QYEL6A15nfb
7lNtnRb5U9GDuw+Lj7U1RpsyXyL0qljiipPfrCS9giaR7qq+bFLOqaLX70XhcNEC
dwP3mPwS9Ff8stXdFFUUcTZYLQJPI+o=
-----END CERTIFICATE-----
Generated at Thu Jul 10 02:13:02 2025 by rpki-client