Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/eba1aff3-3739-3526-b1ad-d38ccf982a9b.roa
File:                     eba1aff3-3739-3526-b1ad-d38ccf982a9b.roa (raw, json)
Hash identifier:          1MhqaYdmsK/9z7msYw1lSM2bEXoaA9ZFpWgbbtCyAUE=
Subject key identifier:   19:91:B3:11:76:0D:1A:C1:A3:96:C2:D0:66:AC:54:E8:FF:AF:B5:CF
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350C17D21AB27067FBE2600
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/eba1aff3-3739-3526-b1ad-d38ccf982a9b.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:c1:7d:21:ab:27:06:7f:be:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=a40dd55c-5f8b-4f32-8aae-5dfd5867c65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e7:76:f2:f0:d0:4c:de:8a:f8:80:64:a6:4e:
                    a3:86:85:97:83:61:09:e4:6a:48:52:8b:6e:4c:87:
                    41:eb:b2:a3:26:6f:b4:05:b2:b4:04:f6:2b:61:ab:
                    c2:4d:a2:68:87:f0:04:f3:38:ac:80:38:b2:c5:49:
                    68:30:ae:44:19:69:a4:99:c7:8b:a8:36:f0:bd:62:
                    8e:43:6a:de:5e:ef:2a:03:53:09:38:70:08:e0:2c:
                    35:ae:7d:2c:72:c7:90:e1:ae:2d:28:c3:c6:99:e7:
                    17:b4:a7:44:6c:67:17:03:3e:23:08:08:a6:3c:41:
                    c8:b8:c8:5c:6e:ea:d6:ca:fb:37:1f:57:28:88:5a:
                    c5:7c:26:d0:44:ac:df:43:03:24:1b:d3:c2:41:ca:
                    12:2f:ea:a5:29:99:80:f4:5b:93:95:e2:38:f6:4a:
                    7b:fd:9a:5d:18:84:5b:a4:08:42:63:46:ab:a2:7c:
                    76:29:03:3e:87:69:e0:75:2d:32:cb:a9:18:8b:7d:
                    be:3f:f3:7e:a1:59:c4:d8:2e:ee:dd:43:3d:6d:68:
                    06:35:84:be:fb:a7:75:38:b7:79:71:c7:a5:b1:53:
                    62:62:2a:93:cb:18:3c:64:ce:bf:8e:64:5d:dd:d9:
                    3b:4c:16:d6:06:1c:e8:3a:21:ca:57:91:84:6b:0b:
                    36:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:91:B3:11:76:0D:1A:C1:A3:96:C2:D0:66:AC:54:E8:FF:AF:B5:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/eba1aff3-3739-3526-b1ad-d38ccf982a9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:3f:78:66:4d:40:2f:50:f4:5f:a2:03:15:1d:ff:6a:f6:2c:
         43:79:b4:ed:7c:86:f7:34:57:01:78:24:f3:d3:86:9d:c0:e1:
         41:2c:65:bd:d2:fd:d3:35:e4:cd:51:07:49:a0:54:c0:79:30:
         87:39:37:c4:05:6b:22:3e:30:f0:d2:dd:3e:c8:92:51:17:45:
         ff:b4:a8:d8:9f:ba:0e:96:21:4e:f6:75:70:c0:bd:8c:fe:82:
         13:2c:60:35:58:8f:64:88:5a:f2:36:52:d7:ac:21:ef:0f:4c:
         8a:e0:2c:47:cc:fa:a9:12:18:29:4e:5b:35:00:e9:c9:5c:11:
         9c:be:17:0c:e9:23:ec:2e:92:67:07:e8:6c:fb:9d:3d:44:57:
         a7:a2:d7:71:93:24:40:2a:22:20:44:b8:c1:97:2e:e2:fb:be:
         1c:1b:69:55:9d:72:d2:f5:ce:b9:0b:76:31:3c:c8:37:ac:f6:
         6e:4c:17:7a:9e:b1:cb:25:51:26:ef:19:52:e3:95:64:08:e0:
         26:46:bf:c2:0c:7c:24:05:0b:3c:58:79:9c:ff:49:42:ca:34:
         9c:2b:b3:8b:41:3d:89:e9:9e:5f:a6:0b:7d:fb:11:79:9c:fb:
         c7:b5:af:85:d0:f9:61:4d:6c:54:19:61:b6:48:ba:33:22:e1:
         70:b9:b0:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUMF9IasnBn++JgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk
YTQwZGQ1NWMtNWY4Yi00ZjMyLThhYWUtNWRmZDU4NjdjNjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+d28vDQTN6K+IBkpk6jhoWXg2EJ5GpIUotu
TIdB67KjJm+0BbK0BPYrYavCTaJoh/AE8zisgDiyxUloMK5EGWmkmceLqDbwvWKO
Q2reXu8qA1MJOHAI4Cw1rn0scseQ4a4tKMPGmecXtKdEbGcXAz4jCAimPEHIuMhc
burWyvs3H1coiFrFfCbQRKzfQwMkG9PCQcoSL+qlKZmA9FuTleI49kp7/ZpdGIRb
pAhCY0aronx2KQM+h2ngdS0yy6kYi32+P/N+oVnE2C7u3UM9bWgGNYS++6d1OLd5
ccelsVNiYiqTyxg8ZM6/jmRd3dk7TBbWBhzoOiHKV5GEaws2bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBmRsxF2DRrBo5bC0GasVOj/r7XPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWJhMWFmZjMtMzczOS0z
NTI2LWIxYWQtZDM4Y2NmOTgyYTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIUkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABk/eGZNQC9Q9F+iAxUd/2r2LEN5tO18hvc0VwF4JPPThp3A4UEsZb3S
/dM15M1RB0mgVMB5MIc5N8QFayI+MPDS3T7IklEXRf+0qNifug6WIU72dXDAvYz+
ghMsYDVYj2SIWvI2UtesIe8PTIrgLEfM+qkSGClOWzUA6clcEZy+FwzpI+wukmcH
6Gz7nT1EV6ei13GTJEAqIiBEuMGXLuL7vhwbaVWdctL1zrkLdjE8yDes9m5MF3qe
scslUSbvGVLjlWQI4CZGv8IMfCQFCzxYeZz/SULKNJwrs4tBPYnpnl+mC337EXmc
+8e1r4XQ+WFNbFQZYbZIujMi4XC5sBM=
-----END CERTIFICATE-----
Generated at Thu Jul 10 02:57:50 2025 by rpki-client