Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/eb7eaf7f-f424-30e9-97fa-93e8b2fa3649.roa
File:                     eb7eaf7f-f424-30e9-97fa-93e8b2fa3649.roa (raw, json)
Hash identifier:          tVPCUhhQGRiy6b0KZwMBtNgZgfe1+04vYTiHSOsV1UI=
Subject key identifier:   9F:32:BC:6B:19:A5:8F:36:BB:F7:1E:53:3F:D6:06:F2:B9:45:30:ED
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F43285848B4C0DE9122A530E2055590A0
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/eb7eaf7f-f424-30e9-97fa-93e8b2fa3649.roa
Signing time:             Wed 29 Jan 2025 14:00:51 +0000
ROA not before:           Wed 29 Jan 2025 14:00:51 +0000
ROA not after:            Tue 29 Apr 2025 13:00:51 +0000
asID:                     41264
IP address blocks:        104.133.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b4:c0:de:91:22:a5:30:e2:05:55:90:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jan 29 14:00:51 2025 GMT
            Not After : Apr 29 13:00:51 2025 GMT
        Subject: CN=4e86e700-ce25-46ea-bcdd-3dfa90f1b093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:33:62:ab:30:dc:24:e6:3a:30:fd:5d:6e:08:
                    6c:93:b6:c8:a6:a5:ea:d9:58:58:c3:b3:4b:ed:b5:
                    46:11:0f:8e:c8:f9:77:17:78:90:be:19:23:ca:fc:
                    b6:36:5a:1b:da:ae:03:58:ee:c8:df:79:ce:17:3a:
                    9e:7c:fd:65:ae:91:0b:8e:77:95:20:24:05:f2:29:
                    52:8c:8f:72:fc:db:48:ed:c3:b6:00:86:60:2a:f1:
                    17:22:b7:ed:b8:45:54:76:ce:7d:19:70:1c:30:4d:
                    f8:e5:e5:50:fc:4a:fd:21:47:fa:09:db:c0:0a:a1:
                    67:da:b8:8f:42:00:ac:66:a2:22:64:a0:8d:2d:73:
                    e9:70:56:c0:e9:dd:c1:3e:e3:89:6a:b5:02:d8:a2:
                    ca:89:db:47:c1:38:fa:92:71:08:c4:ca:de:a3:40:
                    42:07:14:61:a0:a7:29:7b:9a:55:b6:8e:b8:82:44:
                    78:5c:69:4e:ac:c5:51:1b:5c:4f:2c:58:da:d6:fc:
                    85:3e:45:88:73:96:85:f7:b4:b3:64:b4:04:ff:ec:
                    c7:28:42:3f:53:ce:b0:ea:d5:1e:3e:56:a5:a8:d7:
                    13:04:62:e8:27:16:ba:8e:f4:4b:2e:22:42:b9:e1:
                    99:de:b9:50:9f:94:51:05:b4:e4:f7:a8:8f:7d:63:
                    7e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:32:BC:6B:19:A5:8F:36:BB:F7:1E:53:3F:D6:06:F2:B9:45:30:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/eb7eaf7f-f424-30e9-97fa-93e8b2fa3649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:66:35:4e:f8:95:a9:00:ac:1a:f7:e0:ea:a1:4a:83:c0:e1:
         c2:49:64:c0:de:f8:4e:a5:40:84:a1:a2:38:3d:25:b8:ce:4c:
         fa:b1:5d:0c:aa:c4:b1:14:f7:36:5e:f6:09:81:34:da:6c:c6:
         51:61:dc:a8:58:37:1c:25:06:7e:47:cb:41:b9:17:cb:a9:af:
         5f:40:76:bf:9f:38:6c:11:20:44:78:63:5d:66:07:9e:b9:6f:
         bc:8b:dc:9e:5c:7f:3c:44:d9:49:24:c1:43:f0:6b:74:5f:e3:
         26:f6:e2:6e:22:f3:95:45:f3:da:48:7e:29:b9:63:f1:32:56:
         ca:6c:6f:e6:da:da:38:0a:96:f3:e4:2c:8d:68:33:d7:78:cf:
         6c:74:55:18:0a:e9:4d:10:a5:7d:a1:d5:c5:55:a5:af:c4:ad:
         60:81:00:69:3a:3d:19:cd:30:6a:38:aa:66:5a:3c:4d:2c:d0:
         41:9e:37:57:60:33:ef:ff:aa:50:ed:b2:cc:96:6a:b0:58:15:
         e5:7e:40:95:d8:0d:20:0f:95:87:d9:c2:96:df:4a:22:9e:4d:
         39:95:09:f4:36:52:84:74:18:a2:b2:ae:7c:70:24:95:66:08:
         8c:3f:2b:be:52:cf:64:48:86:1c:a8:e4:3e:0d:5f:32:44:76:
         93:1f:e5:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wN6RIqUw4gVVkKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk
NGU4NmU3MDAtY2UyNS00NmVhLWJjZGQtM2RmYTkwZjFiMDkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzNiqzDcJOY6MP1dbghsk7bIpqXq2VhYw7NL
7bVGEQ+OyPl3F3iQvhkjyvy2Nlob2q4DWO7I33nOFzqefP1lrpELjneVICQF8ilS
jI9y/NtI7cO2AIZgKvEXIrftuEVUds59GXAcME345eVQ/Er9IUf6CdvACqFn2riP
QgCsZqIiZKCNLXPpcFbA6d3BPuOJarUC2KLKidtHwTj6knEIxMreo0BCBxRhoKcp
e5pVto64gkR4XGlOrMVRG1xPLFja1vyFPkWIc5aF97SzZLQE/+zHKEI/U86w6tUe
PlalqNcTBGLoJxa6jvRLLiJCueGZ3rlQn5RRBbTk96iPfWN+NQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ8yvGsZpY82u/ceUz/WBvK5RTDtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWI3ZWFmN2YtZjQyNC0z
MGU5LTk3ZmEtOTNlOGIyZmEzNjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIWVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ1mNU74lakArBr34OqhSoPA4cJJZMDe+E6lQIShojg9JbjOTPqxXQyq
xLEU9zZe9gmBNNpsxlFh3KhYNxwlBn5Hy0G5F8upr19Adr+fOGwRIER4Y11mB565
b7yL3J5cfzxE2UkkwUPwa3Rf4yb24m4i85VF89pIfim5Y/EyVspsb+ba2jgKlvPk
LI1oM9d4z2x0VRgK6U0QpX2h1cVVpa/ErWCBAGk6PRnNMGo4qmZaPE0s0EGeN1dg
M+//qlDtssyWarBYFeV+QJXYDSAPlYfZwpbfSiKeTTmVCfQ2UoR0GKKyrnxwJJVm
CIw/K75Sz2RIhhyo5D4NXzJEdpMf5SI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:39 2025 by rpki-client