Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b03c4994-eca8-33c2-8f9d-3bf205a454d5.roa
File:                     b03c4994-eca8-33c2-8f9d-3bf205a454d5.roa (raw, json)
Hash identifier:          snT8+4EoxUJRru3OleAHbnvNJIgMY2lojMDzi9V92Iw=
Subject key identifier:   E7:A7:BE:B6:41:9D:F5:9A:11:6D:EA:83:99:41:82:C6:E4:E8:8E:86
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350C77B3A135F726B6EF730
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b03c4994-eca8-33c2-8f9d-3bf205a454d5.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:c7:7b:3a:13:5f:72:6b:6e:f7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=7f00e729-46da-49b5-a130-cd4c2320100e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0e:d8:70:c1:f1:5f:33:b6:f5:b1:e2:dd:97:
                    d4:7a:f4:37:8d:25:c5:11:39:72:0c:ff:92:71:95:
                    03:5a:5a:2a:81:03:eb:6b:19:85:28:7c:39:bb:82:
                    6a:bd:70:fd:94:3e:a4:41:52:48:0d:1e:5f:15:cf:
                    56:12:3c:e7:41:7a:71:71:c0:ac:6e:c7:7a:e2:f5:
                    31:49:a5:e1:5a:77:7e:ca:f2:f1:14:31:a5:ae:bc:
                    5c:03:54:53:d2:e2:14:6a:f3:fe:38:fc:10:b6:b0:
                    c7:ca:51:03:a4:e4:b0:eb:5e:15:b7:cb:34:d8:b3:
                    2a:6f:c1:d0:96:5b:b0:8c:09:83:ec:10:7f:a5:38:
                    7e:a1:e7:21:93:b5:e5:26:9e:bc:1e:cd:70:bb:50:
                    16:27:2a:ba:db:e9:37:08:81:50:a8:5e:97:f5:48:
                    bf:04:7c:1f:6a:3f:2d:c2:e6:28:2b:a2:60:80:1c:
                    2f:f8:e8:67:95:7e:fb:29:b1:72:3f:b1:36:ba:49:
                    70:41:1a:6c:36:22:6a:51:0d:22:d8:34:57:83:53:
                    1c:5f:e9:52:22:89:85:0a:f7:8a:ec:0b:ba:3e:5e:
                    69:f7:79:4b:a6:87:79:66:d6:2d:68:d5:1a:01:ef:
                    42:16:0b:78:d0:bc:f2:f8:ca:37:c5:81:69:06:f4:
                    ee:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A7:BE:B6:41:9D:F5:9A:11:6D:EA:83:99:41:82:C6:E4:E8:8E:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b03c4994-eca8-33c2-8f9d-3bf205a454d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:3d:85:48:b0:15:87:ae:85:09:73:c0:7d:47:72:8d:e6:ee:
         a0:f9:09:71:c0:8f:41:93:1a:f1:67:90:f2:74:5f:5d:de:e0:
         c7:05:37:04:95:aa:cf:a0:8a:b2:1e:b4:44:75:c1:f2:f0:b8:
         40:6f:e8:28:bd:d6:19:df:06:d4:c7:48:57:5c:0d:63:16:eb:
         f5:00:24:35:83:a5:e7:3a:85:ec:3d:0f:cc:c0:ac:88:e5:7e:
         31:3c:df:05:47:d5:a8:8c:0e:2c:67:7d:80:a2:cb:66:24:7d:
         58:e4:65:1c:38:76:e3:3a:36:6b:c6:53:cb:9b:e4:23:ac:ec:
         66:8e:a8:7e:9e:89:b1:45:02:57:1f:aa:48:f4:40:57:dc:8e:
         17:2f:38:68:4d:27:bb:31:e8:0f:c4:f9:1d:c7:7b:77:ea:b0:
         58:2e:ef:0b:d9:53:32:9a:81:b1:ce:d9:46:e0:12:fb:d7:89:
         07:ae:6a:74:c5:fd:6c:6b:af:92:3f:2a:40:d3:a0:36:b9:e6:
         bc:2b:80:7a:e2:a1:ae:84:75:3b:12:f6:e2:c8:83:d1:27:1b:
         05:11:80:ae:35:f0:1f:b3:7e:f6:3b:32:d7:37:8c:b6:92:43:
         bd:4e:55:66:28:5b:de:61:ce:f7:49:89:3b:03:a3:5f:1d:5b:
         7d:68:11:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUMd7OhNfcmtu9zAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk
N2YwMGU3MjktNDZkYS00OWI1LWExMzAtY2Q0YzIzMjAxMDBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA7YcMHxXzO29bHi3ZfUevQ3jSXFETlyDP+S
cZUDWloqgQPraxmFKHw5u4JqvXD9lD6kQVJIDR5fFc9WEjznQXpxccCsbsd64vUx
SaXhWnd+yvLxFDGlrrxcA1RT0uIUavP+OPwQtrDHylEDpOSw614Vt8s02LMqb8HQ
lluwjAmD7BB/pTh+oechk7XlJp68Hs1wu1AWJyq62+k3CIFQqF6X9Ui/BHwfaj8t
wuYoK6JggBwv+OhnlX77KbFyP7E2uklwQRpsNiJqUQ0i2DRXg1McX+lSIomFCveK
7Au6Pl5p93lLpod5ZtYtaNUaAe9CFgt40Lzy+Mo3xYFpBvTuywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOenvrZBnfWaEW3qg5lBgsbk6I6GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjAzYzQ5OTQtZWNhOC0z
M2MyLThmOWQtM2JmMjA1YTQ1NGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGI9hUiwFYeuhQlzwH1Hco3m7qD5CXHAj0GTGvFnkPJ0X13e4McFNwSV
qs+girIetER1wfLwuEBv6Ci91hnfBtTHSFdcDWMW6/UAJDWDpec6hew9D8zArIjl
fjE83wVH1aiMDixnfYCiy2YkfVjkZRw4duM6NmvGU8ub5COs7GaOqH6eibFFAlcf
qkj0QFfcjhcvOGhNJ7sx6A/E+R3He3fqsFgu7wvZUzKagbHO2UbgEvvXiQeuanTF
/Wxrr5I/KkDToDa55rwrgHrioa6EdTsS9uLIg9EnGwURgK418B+zfvY7Mtc3jLaS
Q71OVWYoW95hzvdJiTsDo18dW31oEcU=
-----END CERTIFICATE-----
Generated at Thu Jul 10 02:57:14 2025 by rpki-client