Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6b69d7c-c724-37c0-bf85-2a11784d4662.roa
File:                     a6b69d7c-c724-37c0-bf85-2a11784d4662.roa (raw, json)
Hash identifier:          IDZYtzKWGxCW2zvcev5EbS7NsfvN91hVeV3OiFsBAVI=
Subject key identifier:   43:15:91:F6:0B:BD:32:69:8B:B1:9F:37:00:4E:FD:BD:79:CF:B6:BA
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A70860A79C089A13FB5520580
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6b69d7c-c724-37c0-bf85-2a11784d4662.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     41264
IP address blocks:        104.132.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:0a:79:c0:89:a1:3f:b5:52:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=4120e864-a1e2-4ecf-a188-3d0186d3708c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a3:f6:14:26:86:73:d8:55:0c:06:54:aa:d5:
                    1c:4e:43:f9:bf:64:1a:ca:23:71:4b:7c:fb:2e:26:
                    69:8c:6c:68:e8:47:86:3e:7f:ca:06:d8:f0:ad:1a:
                    e8:08:68:92:b5:94:c8:b1:91:81:e1:e0:58:52:d5:
                    4e:e6:60:06:63:a5:a4:2a:85:16:59:76:c1:ce:4f:
                    cf:31:7f:0b:a6:f9:3b:c1:e3:44:96:f6:b1:43:ec:
                    4d:45:18:b8:37:a3:18:77:b3:24:79:54:de:55:b3:
                    a1:6a:94:b4:d8:9c:ce:ad:f5:89:00:5b:c8:ac:78:
                    c8:91:04:07:09:95:a1:e7:a2:99:1e:54:96:45:fe:
                    53:39:80:47:a9:6d:75:e5:9b:aa:57:88:da:e0:87:
                    d0:82:f2:ca:2c:45:29:96:07:fa:36:27:33:33:84:
                    3a:68:10:13:ee:e7:16:0b:d0:e0:e9:70:13:da:aa:
                    c0:0e:49:9e:c4:d5:a9:62:aa:c3:b8:53:ac:39:95:
                    06:a0:1f:b5:ef:7d:b6:e5:50:f4:75:a4:01:dc:36:
                    10:e7:71:2f:92:f1:c8:3b:21:ae:9d:d4:b4:93:d4:
                    f3:27:e9:07:55:bd:99:da:44:0c:ed:a8:13:05:19:
                    b5:a9:03:76:c6:f4:14:78:08:63:66:27:e1:63:35:
                    f9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:15:91:F6:0B:BD:32:69:8B:B1:9F:37:00:4E:FD:BD:79:CF:B6:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/a6b69d7c-c724-37c0-bf85-2a11784d4662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:38:8c:49:75:fb:bf:9b:b2:ed:ed:fa:1a:f2:3e:e7:8f:cc:
         82:a2:62:8a:ac:ed:4f:70:a6:57:c5:cc:a1:06:07:f1:59:b1:
         1d:df:1a:07:f9:66:3c:fc:2b:fb:93:52:4b:e7:6a:f7:41:eb:
         df:06:ae:78:63:33:a6:68:90:c3:8e:40:7f:4a:96:8c:1f:c9:
         de:86:95:8c:23:15:79:ea:d0:45:7b:e1:5e:30:4c:05:53:87:
         e0:a2:27:7c:59:a0:f1:5d:b8:90:ed:9a:69:28:09:a7:22:2f:
         28:39:d5:57:01:f8:46:18:e6:2d:89:c7:af:47:57:61:a3:c7:
         f6:ca:83:6b:11:33:bd:cb:19:a2:a8:46:93:73:f7:af:63:04:
         6c:a6:1e:08:1e:c4:b0:05:fe:e2:d9:a4:d7:96:8e:49:86:d4:
         a3:ba:83:17:e8:dd:d9:b6:ea:fd:44:45:22:93:49:cf:5e:28:
         45:ce:0b:bf:c3:5f:68:89:84:27:8f:a0:e2:b0:4d:03:3f:b2:
         ed:13:96:77:8f:3e:a0:8c:71:68:8f:c1:98:04:95:93:50:d4:
         1d:cc:a9:ee:08:c5:b9:e7:8d:de:af:f7:04:a9:dd:c1:0c:4a:
         bd:ae:0a:3d:93:88:40:aa:ef:c7:d4:e0:7e:32:6a:6b:51:c9:
         00:04:f7:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhgp5wImhP7VSBYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk
NDEyMGU4NjQtYTFlMi00ZWNmLWExODgtM2QwMTg2ZDM3MDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqP2FCaGc9hVDAZUqtUcTkP5v2QayiNxS3z7
LiZpjGxo6EeGPn/KBtjwrRroCGiStZTIsZGB4eBYUtVO5mAGY6WkKoUWWXbBzk/P
MX8Lpvk7weNElvaxQ+xNRRi4N6MYd7MkeVTeVbOhapS02JzOrfWJAFvIrHjIkQQH
CZWh56KZHlSWRf5TOYBHqW115ZuqV4ja4IfQgvLKLEUplgf6NiczM4Q6aBAT7ucW
C9Dg6XAT2qrADkmexNWpYqrDuFOsOZUGoB+173225VD0daQB3DYQ53EvkvHIOyGu
ndS0k9TzJ+kHVb2Z2kQM7agTBRm1qQN2xvQUeAhjZifhYzX5NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEMVkfYLvTJpi7GfNwBO/b15z7a6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYTZiNjlkN2MtYzcyNC0z
N2MwLWJmODUtMmExMTc4NGQ0NjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIROMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACw4jEl1+7+bsu3t+hryPuePzIKiYoqs7U9wplfFzKEGB/FZsR3fGgf5
Zjz8K/uTUkvnavdB698GrnhjM6ZokMOOQH9Klowfyd6GlYwjFXnq0EV74V4wTAVT
h+CiJ3xZoPFduJDtmmkoCaciLyg51VcB+EYY5i2Jx69HV2Gjx/bKg2sRM73LGaKo
RpNz969jBGymHggexLAF/uLZpNeWjkmG1KO6gxfo3dm26v1ERSKTSc9eKEXOC7/D
X2iJhCePoOKwTQM/su0TlnePPqCMcWiPwZgElZNQ1B3Mqe4Ixbnnjd6v9wSp3cEM
Sr2uCj2TiECq78fU4H4yamtRyQAE9yE=
-----END CERTIFICATE-----
Generated at Thu Jul 10 01:25:35 2025 by rpki-client