Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9b8ef0f-ceae-3512-9397-5fb131ad86db.roa
File:                     b9b8ef0f-ceae-3512-9397-5fb131ad86db.roa (raw, json)
Hash identifier:          w13IsF53/EEToEIQF/2zkjkrs22nI9S2i1z5tti8m+k=
Subject key identifier:   38:B2:DC:10:51:8D:00:BA:87:8A:6F:25:70:8D:63:6E:3C:46:76:74
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350AD12B9B67987BE5AAC00
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9b8ef0f-ceae-3512-9397-5fb131ad86db.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        104.134.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:ad:12:b9:b6:79:87:be:5a:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=c9c7f02f-02c0-4bf6-bfcc-3b801649be36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d6:34:fb:63:70:e7:8e:0f:a8:d6:65:d7:9c:
                    d6:99:ef:25:bd:35:93:e6:73:01:55:a7:6b:ed:99:
                    d0:54:cf:ba:05:9c:de:70:f3:05:55:ea:e0:21:72:
                    16:2a:de:16:7f:d3:98:24:b6:b7:90:d8:08:a0:62:
                    ce:62:11:03:7a:62:8a:ff:ef:e0:35:2e:37:55:e0:
                    c2:bc:cb:53:02:8c:cc:06:fb:b3:8e:82:72:1d:1e:
                    a9:e6:5f:8c:32:cb:8f:df:ec:6b:dc:76:05:6b:2b:
                    5c:1d:31:d0:60:6b:7f:5c:ca:1b:8c:8d:b7:13:be:
                    ef:1d:8c:3f:f3:0f:14:2d:b3:bb:73:0d:3b:3e:3c:
                    52:5d:f1:fd:41:e0:41:02:01:05:db:82:69:b2:99:
                    cb:2f:bb:2e:58:07:16:b5:72:d4:c6:88:b2:a5:50:
                    23:ae:89:16:e2:18:65:32:b0:e6:4b:a8:00:fc:cf:
                    e7:01:41:8c:e1:7c:38:a9:32:27:64:96:c4:0d:b0:
                    25:cf:1e:7d:f9:4d:fe:9d:a5:37:52:c2:70:af:f6:
                    2b:83:d6:35:f0:6b:22:0b:0c:d8:2a:2b:61:e3:b9:
                    ba:df:e4:27:3a:ef:35:50:f4:ee:ac:43:2f:1a:a1:
                    6b:d8:e4:a8:fd:76:85:f1:76:21:7d:a0:e3:97:3e:
                    b4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B2:DC:10:51:8D:00:BA:87:8A:6F:25:70:8D:63:6E:3C:46:76:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/b9b8ef0f-ceae-3512-9397-5fb131ad86db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.134.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:76:b0:d5:7b:26:ac:7c:38:ae:68:fc:45:88:25:f9:22:c7:
         a3:4b:a2:18:b4:b7:9f:f3:a6:fc:32:d8:e9:16:18:a2:77:65:
         0b:48:4e:2d:34:86:8f:27:49:70:43:bc:33:e2:e0:3e:2e:18:
         6d:4e:07:ef:4b:88:11:3f:d4:18:e6:4d:8e:22:09:26:50:2f:
         8e:c0:7e:7f:12:ec:44:9e:67:58:c4:ae:39:a7:3b:f8:aa:c3:
         d2:e1:46:43:0b:be:b8:b0:69:ca:8c:bb:38:e9:3d:43:75:83:
         a1:e7:77:d0:ca:74:8d:17:c0:4e:a8:1e:08:6d:31:c0:9b:b3:
         e2:85:e4:dd:3b:d8:f1:e7:ce:05:79:48:f9:cc:72:f3:13:15:
         e8:90:3e:4c:09:76:4b:cf:60:56:dd:4b:59:ed:9b:d6:50:08:
         47:0c:b0:97:fe:98:d2:06:f4:4a:bb:df:f2:50:ff:30:cb:ee:
         5e:ce:05:1d:72:25:5b:c0:e6:8a:1c:47:8f:db:72:29:90:81:
         63:09:a6:3c:e0:ad:e0:e1:60:39:5b:52:f9:fe:23:cd:6b:38:
         5a:71:b6:67:d7:fd:be:b5:a7:a7:7c:90:ea:4b:5d:63:b6:60:
         78:12:46:6f:55:34:ad:33:c1:e9:e7:b9:99:3a:39:b8:ed:4e:
         15:75:3a:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUK0SubZ5h75arAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk
YzljN2YwMmYtMDJjMC00YmY2LWJmY2MtM2I4MDE2NDliZTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9Y0+2Nw544PqNZl15zWme8lvTWT5nMBVadr
7ZnQVM+6BZzecPMFVergIXIWKt4Wf9OYJLa3kNgIoGLOYhEDemKK/+/gNS43VeDC
vMtTAozMBvuzjoJyHR6p5l+MMsuP3+xr3HYFaytcHTHQYGt/XMobjI23E77vHYw/
8w8ULbO7cw07PjxSXfH9QeBBAgEF24JpspnLL7suWAcWtXLUxoiypVAjrokW4hhl
MrDmS6gA/M/nAUGM4Xw4qTInZJbEDbAlzx59+U3+naU3UsJwr/Yrg9Y18GsiCwzY
Kith47m63+QnOu81UPTurEMvGqFr2OSo/XaF8XYhfaDjlz60NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDiy3BBRjQC6h4pvJXCNY248RnZ0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvYjliOGVmMGYtY2VhZS0z
NTEyLTkzOTctNWZiMTMxYWQ4NmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIarMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHp2sNV7Jqx8OK5o/EWIJfkix6NLohi0t5/zpvwy2OkWGKJ3ZQtITi00
ho8nSXBDvDPi4D4uGG1OB+9LiBE/1BjmTY4iCSZQL47Afn8S7ESeZ1jErjmnO/iq
w9LhRkMLvriwacqMuzjpPUN1g6Hnd9DKdI0XwE6oHghtMcCbs+KF5N072PHnzgV5
SPnMcvMTFeiQPkwJdkvPYFbdS1ntm9ZQCEcMsJf+mNIG9Eq73/JQ/zDL7l7OBR1y
JVvA5oocR4/bcimQgWMJpjzgreDhYDlbUvn+I81rOFpxtmfX/b61p6d8kOpLXWO2
YHgSRm9VNK0zwennuZk6ObjtThV1Ouc=
-----END CERTIFICATE-----
Generated at Thu Jul 10 03:41:19 2025 by rpki-client