Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f5a3b2f4-e01a-37b8-9192-91781f643408.roa
File:                     f5a3b2f4-e01a-37b8-9192-91781f643408.roa (raw, json)
Hash identifier:          dvEgaoVvqS99Rl8ZM67Q0hsTjGB0Qoxg1SjS9s2+XCU=
Subject key identifier:   FB:E3:7B:3F:54:7D:A7:A5:41:98:5C:80:3D:E0:F4:EC:E9:EB:9B:04
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328584A70861B6EEA4397ECBF1B6300
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f5a3b2f4-e01a-37b8-9192-91781f643408.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     41264
IP address blocks:        104.132.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:86:1b:6e:ea:43:97:ec:bf:1b:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=39a0e39d-ff00-4866-a316-aa1f475ddc05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a2:c3:d7:c4:6c:8a:a0:d0:54:fe:d4:d5:5a:
                    8f:86:68:d3:3f:88:83:5c:0a:88:6f:fd:d2:11:db:
                    ba:68:36:a0:30:0b:c6:e3:67:54:6c:58:c0:12:80:
                    70:5f:55:4e:82:09:4d:18:47:80:2f:41:cb:29:9c:
                    dd:ee:79:80:df:bd:61:f8:8d:4e:13:ca:c2:64:ec:
                    c2:c5:c8:49:7f:e3:89:c7:ad:d7:3f:cc:7c:44:98:
                    76:5c:f6:a0:ca:4c:11:c4:98:4c:c5:52:1f:c4:73:
                    92:c2:bb:a6:4b:48:ce:36:07:75:91:a8:b1:64:36:
                    31:4b:1c:a1:e8:b8:50:0f:b9:7b:95:41:92:5d:7f:
                    96:57:1a:91:ce:4b:99:97:84:34:5a:3f:b4:0e:ee:
                    c4:37:9f:76:b5:bf:bf:3a:06:7b:34:e0:5c:b9:cb:
                    d6:5a:bb:f3:95:fd:59:1d:e8:6e:89:90:de:6f:dc:
                    b8:e5:ae:0f:0e:12:81:e2:a9:a3:22:86:32:b2:d2:
                    63:87:bb:d2:50:9c:d2:2f:dd:b1:59:5d:4b:af:3c:
                    4b:bb:f9:c5:d2:3b:52:31:41:e9:4d:90:67:ca:3e:
                    c7:d1:67:fb:4a:ed:2c:88:f9:2b:b8:a9:22:cf:f6:
                    f5:51:6e:a3:73:a7:9b:44:d7:b0:65:2c:fb:51:a9:
                    3e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E3:7B:3F:54:7D:A7:A5:41:98:5C:80:3D:E0:F4:EC:E9:EB:9B:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/f5a3b2f4-e01a-37b8-9192-91781f643408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:43:53:33:6d:b8:82:48:03:34:ae:b7:2a:fd:7c:2a:5c:9e:
         1a:14:3f:ee:5f:38:e0:d8:09:36:15:7a:b9:3b:43:e4:94:af:
         24:59:ab:ab:4b:e4:34:96:42:7b:9e:3b:c2:df:d2:30:db:c7:
         97:07:67:2f:ce:66:68:76:7f:f8:d0:9c:ae:3f:05:1e:da:d2:
         0e:0a:a5:01:b6:20:70:b1:2b:bf:d8:ff:04:71:ac:b7:fe:33:
         69:b5:aa:e4:75:cd:e9:33:95:85:35:38:7d:1e:f3:a1:4f:db:
         0a:79:be:1b:df:7a:d0:29:cc:ef:8e:1b:80:86:f4:db:f2:4b:
         87:62:3e:96:c5:be:48:e9:b4:88:fe:85:2c:c8:2d:b2:b4:83:
         41:c7:4a:93:1e:4b:0a:53:78:97:00:3d:9c:18:08:62:dc:34:
         24:69:87:0e:87:65:09:5a:98:15:82:71:56:ca:fa:0d:51:ca:
         8c:4b:47:5b:c3:86:5a:82:08:a1:bf:e8:ff:ac:c6:31:d0:72:
         9d:f8:92:02:d4:25:46:36:8b:14:39:12:e8:02:e6:b6:54:55:
         dd:d3:1b:ef:71:86:88:8c:89:28:77:dd:21:e5:e5:0f:25:3d:
         22:6d:d5:ae:86:97:b9:da:3d:ef:23:41:ab:b7:7b:92:f0:dc:
         9d:45:7e:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhhtu6kOX7L8bYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk
MzlhMGUzOWQtZmYwMC00ODY2LWEzMTYtYWExZjQ3NWRkYzA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaLD18RsiqDQVP7U1VqPhmjTP4iDXAqIb/3S
Edu6aDagMAvG42dUbFjAEoBwX1VOgglNGEeAL0HLKZzd7nmA371h+I1OE8rCZOzC
xchJf+OJx63XP8x8RJh2XPagykwRxJhMxVIfxHOSwrumS0jONgd1kaixZDYxSxyh
6LhQD7l7lUGSXX+WVxqRzkuZl4Q0Wj+0Du7EN592tb+/OgZ7NOBcucvWWrvzlf1Z
HehuiZDeb9y45a4PDhKB4qmjIoYystJjh7vSUJzSL92xWV1LrzxLu/nF0jtSMUHp
TZBnyj7H0Wf7Su0siPkruKkiz/b1UW6jc6ebRNewZSz7Uak+ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPvjez9UfaelQZhcgD3g9Ozp65sEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvZjVhM2IyZjQtZTAxYS0z
N2I4LTkxOTItOTE3ODFmNjQzNDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIRDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACxDUzNtuIJIAzSutyr9fCpcnhoUP+5fOODYCTYVerk7Q+SUryRZq6tL
5DSWQnueO8Lf0jDbx5cHZy/OZmh2f/jQnK4/BR7a0g4KpQG2IHCxK7/Y/wRxrLf+
M2m1quR1zekzlYU1OH0e86FP2wp5vhvfetApzO+OG4CG9NvyS4diPpbFvkjptIj+
hSzILbK0g0HHSpMeSwpTeJcAPZwYCGLcNCRphw6HZQlamBWCcVbK+g1RyoxLR1vD
hlqCCKG/6P+sxjHQcp34kgLUJUY2ixQ5EugC5rZUVd3TG+9xhoiMiSh33SHl5Q8l
PSJt1a6Gl7naPe8jQau3e5Lw3J1FfjI=
-----END CERTIFICATE-----
Generated at Thu Jul 10 03:09:09 2025 by rpki-client