Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ebb1d758-37c1-3afe-80cc-d54fed6665e8.roa
File:                     ebb1d758-37c1-3afe-80cc-d54fed6665e8.roa (raw, json)
Hash identifier:          744yaM07vg2V9jVoKXZys6pgC8KRAgpo8k7ty7CHEfI=
Subject key identifier:   E6:CF:47:D1:A9:54:1E:EB:29:0C:C1:02:D7:C7:D9:9B:8A:0A:F6:69
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A7350C2E47E198B8AEEB61438
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ebb1d758-37c1-3afe-80cc-d54fed6665e8.roa
Signing time:             Tue 08 Jul 2025 13:01:04 +0000
ROA not before:           Tue 08 Jul 2025 13:01:04 +0000
ROA not after:            Mon 06 Oct 2025 13:01:04 +0000
asID:                     41264
IP address blocks:        104.133.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:50:c2:e4:7e:19:8b:8a:ee:b6:14:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  8 13:01:04 2025 GMT
            Not After : Oct  6 13:01:04 2025 GMT
        Subject: CN=1a3b18b8-84e4-407d-a5b2-8b8d1b51f8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:40:d9:6f:d3:5e:2f:1f:ba:fc:62:7f:08:
                    02:db:85:5b:37:aa:e4:b4:e2:4d:49:ae:51:5c:e2:
                    93:50:17:ef:22:19:3e:ab:b2:4f:49:03:ee:d8:30:
                    61:cb:c1:3a:19:cb:6f:b0:c2:b4:b5:13:59:b4:2d:
                    48:aa:5c:22:85:2e:8b:4a:80:16:ab:85:44:d2:e0:
                    7c:59:d4:b5:8d:ef:ac:9b:ce:51:f4:ab:cc:e2:59:
                    05:6e:da:4d:f5:7a:42:ed:75:6a:80:73:c7:d6:a3:
                    ef:03:50:0e:bd:a8:2a:90:2a:7f:69:c5:8a:16:b5:
                    e0:bc:43:b4:d4:1d:a2:ec:7f:02:58:e9:08:fb:f6:
                    05:d1:4a:c8:e8:9a:f2:6c:dd:a8:05:16:d0:e3:0a:
                    92:ca:21:dc:0e:00:7e:86:64:38:33:c8:b6:ce:b6:
                    ca:99:44:c8:c4:45:9b:e5:d6:2d:ca:64:b7:a1:b0:
                    51:10:3b:96:b9:0d:ee:3f:6a:5b:fb:73:6a:65:54:
                    f7:f1:41:14:00:ae:77:07:c4:69:03:b5:c5:a9:4b:
                    82:31:6d:f1:88:02:96:a6:5e:bb:fa:82:0d:e0:fa:
                    9b:dc:e2:a9:5d:fd:8b:59:eb:ac:85:22:45:d4:5a:
                    76:b8:bd:f4:62:8c:f7:07:c1:82:18:8b:22:b0:94:
                    19:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CF:47:D1:A9:54:1E:EB:29:0C:C1:02:D7:C7:D9:9B:8A:0A:F6:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/ebb1d758-37c1-3afe-80cc-d54fed6665e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.133.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:00:e0:20:17:36:46:bc:4a:9f:f9:5b:78:2e:c0:28:dd:cc:
         1c:96:29:9f:14:3e:d8:a8:82:e5:ab:b1:aa:a1:7e:d2:09:fd:
         b4:11:8d:10:69:9f:3f:85:41:e2:0c:51:97:73:9d:1a:85:bf:
         a8:7f:f6:b1:59:97:d3:1c:0b:56:b5:b5:55:8e:c5:04:44:8c:
         11:9a:37:e7:48:d5:b6:71:ab:fd:6e:04:8c:ba:6b:08:7c:0e:
         6d:d2:e4:49:67:0c:db:a9:e9:c3:ea:8e:8f:0b:59:3d:a5:15:
         0f:82:6d:81:e3:73:2d:9b:69:cb:80:75:eb:35:c3:4c:f6:ba:
         b7:ab:36:e3:38:3d:27:a8:b6:a5:2f:5e:e1:ed:87:59:51:e3:
         d2:a9:55:4e:7c:ab:c7:d5:f0:6a:4f:1f:a9:86:b2:b2:5d:8a:
         6d:93:c1:9d:41:07:64:17:1b:37:64:2c:f2:33:fd:5a:3b:17:
         67:bb:2a:5f:93:43:42:6b:49:d4:cd:a9:20:a7:c3:9a:d1:d1:
         42:a8:87:52:27:a4:50:5f:5f:ae:1f:fe:3c:ac:70:d3:a5:e2:
         a9:95:ab:83:19:61:6d:90:a1:d7:08:34:9e:d8:93:46:48:6c:
         87:f6:b0:e3:e6:7f:82:1e:4d:c7:59:4e:cd:6d:2a:ea:32:77:
         86:37:0c:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzUMLkfhmLiu62FDgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcwODEzMDEwNFoXDTI1MTAwNjEzMDEwNFowLzEtMCsGA1UEAxMk
MWEzYjE4YjgtODRlNC00MDdkLWE1YjItOGI4ZDFiNTFmOGVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOJA2W/TXi8fuvxifwgC24VbN6rktOJNSa5R
XOKTUBfvIhk+q7JPSQPu2DBhy8E6GctvsMK0tRNZtC1IqlwihS6LSoAWq4VE0uB8
WdS1je+sm85R9KvM4lkFbtpN9XpC7XVqgHPH1qPvA1AOvagqkCp/acWKFrXgvEO0
1B2i7H8CWOkI+/YF0UrI6JrybN2oBRbQ4wqSyiHcDgB+hmQ4M8i2zrbKmUTIxEWb
5dYtymS3obBREDuWuQ3uP2pb+3NqZVT38UEUAK53B8RpA7XFqUuCMW3xiAKWpl67
+oIN4Pqb3OKpXf2LWeushSJF1Fp2uL30Yoz3B8GCGIsisJQZEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFObPR9GpVB7rKQzBAtfH2ZuKCvZpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZWJiMWQ3NTgtMzdjMS0z
YWZlLTgwY2MtZDU0ZmVkNjY2NWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIVKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcA4CAXNka8Sp/5W3guwCjdzByWKZ8UPtioguWrsaqhftIJ/bQRjRBp
nz+FQeIMUZdznRqFv6h/9rFZl9McC1a1tVWOxQREjBGaN+dI1bZxq/1uBIy6awh8
Dm3S5ElnDNup6cPqjo8LWT2lFQ+CbYHjcy2bacuAdes1w0z2urerNuM4PSeotqUv
XuHth1lR49KpVU58q8fV8GpPH6mGsrJdim2TwZ1BB2QXGzdkLPIz/Vo7F2e7Kl+T
Q0JrSdTNqSCnw5rR0UKoh1InpFBfX64f/jyscNOl4qmVq4MZYW2QodcINJ7Yk0ZI
bIf2sOPmf4IeTcdZTs1tKuoyd4Y3DKQ=
-----END CERTIFICATE-----
Generated at Thu Jul 10 03:25:14 2025 by rpki-client