Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/944d8387-2db6-3e2c-b9d9-5bbde54ea722.roa
File:                     944d8387-2db6-3e2c-b9d9-5bbde54ea722.roa (raw, json)
Hash identifier:          7ERELKFNFuOZIKj6oi/FLttkI3PjP3rXQh2Opy7vfJ8=
Subject key identifier:   9A:AE:E2:3E:8D:EC:D1:AF:F3:58:A3:E8:FF:93:E1:12:56:AB:35:A8
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F43285849C989F548CFB009206D50E380
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/944d8387-2db6-3e2c-b9d9-5bbde54ea722.roa
Signing time:             Thu 08 May 2025 17:29:16 +0000
ROA not before:           Thu 08 May 2025 17:29:16 +0000
ROA not after:            Wed 06 Aug 2025 17:29:16 +0000
asID:                     2914
IP address blocks:        104.140.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:89:f5:48:cf:b0:09:20:6d:50:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: May  8 17:29:16 2025 GMT
            Not After : Aug  6 17:29:16 2025 GMT
        Subject: CN=03a4fc7b-3e8c-4c2a-b7bf-591003991630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:96:cf:8f:b1:44:3d:a0:95:a0:ce:bc:a4:7c:
                    50:79:73:b3:ff:ff:de:65:4a:0e:31:2b:74:3f:b6:
                    fc:0a:db:58:17:ee:62:99:91:71:d2:46:df:8d:8a:
                    20:f5:c1:d2:cb:37:77:29:16:c6:06:52:2f:c1:25:
                    23:6f:36:a5:2e:9d:e8:35:30:d7:15:a8:13:3a:88:
                    6b:d7:a7:6d:fe:e5:b5:07:be:44:d8:44:54:c3:98:
                    8b:c5:2b:6f:29:d5:bb:76:4c:db:9e:83:ba:44:80:
                    6d:53:55:ac:1c:35:ed:e0:be:d5:45:0e:95:5a:23:
                    a9:3a:56:6b:1d:75:80:36:58:81:fd:ea:f2:0e:0c:
                    ab:9c:f9:88:cf:22:2d:51:2a:a9:be:a2:aa:4e:8a:
                    6c:c2:d6:b7:a0:f0:91:5e:9d:5d:fb:a8:9f:80:0c:
                    f2:46:1e:d9:ab:4c:f5:e0:ae:5e:94:1e:40:ef:46:
                    0c:8e:75:36:68:7c:6b:de:d0:d0:95:a4:89:f5:32:
                    04:86:0a:5d:be:1e:42:65:7b:b4:6f:f6:c8:48:f1:
                    5a:11:1f:57:f6:55:2d:e1:d7:7d:d6:32:f5:50:6a:
                    15:77:be:9f:14:3d:96:39:22:bb:e3:d3:a5:99:48:
                    84:92:59:af:7b:c4:99:71:77:73:d4:4f:5d:fa:b7:
                    09:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AE:E2:3E:8D:EC:D1:AF:F3:58:A3:E8:FF:93:E1:12:56:AB:35:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/944d8387-2db6-3e2c-b9d9-5bbde54ea722.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:7f:1b:3c:47:64:ab:3e:75:ef:4f:32:b8:9f:6b:42:24:21:
         61:78:24:08:b2:28:9f:fd:ba:57:58:06:80:c8:30:10:de:ef:
         8f:02:1a:51:41:dd:33:93:c5:ba:8b:71:78:19:fa:b3:e6:90:
         4a:0d:3e:f7:4d:b1:b7:61:ea:c4:ab:35:09:2f:1f:e5:d8:99:
         16:cd:15:12:cb:a5:cd:31:ea:7f:b0:88:97:3d:1b:88:8e:d0:
         de:bd:0c:35:b6:24:94:4f:ae:3e:0c:31:50:b8:8c:91:0c:9f:
         17:05:13:83:c2:3b:ad:9d:39:17:c5:45:47:2c:5e:9b:b8:d1:
         65:34:aa:dd:31:18:47:c7:6e:d2:06:21:5a:44:39:1c:87:c5:
         dd:d2:31:83:36:df:f6:8b:58:26:27:68:13:4f:ec:24:84:18:
         fa:40:29:97:12:77:25:91:78:0a:73:f7:83:f9:d3:22:05:32:
         0e:70:95:f7:8a:3c:09:06:ef:99:96:4f:8a:36:e5:06:ce:f1:
         49:97:c6:21:e3:25:e7:81:44:2f:30:ba:14:3e:e3:fe:78:c3:
         07:e2:87:09:c0:78:d9:15:a6:4d:78:dd:0a:d6:db:23:c6:51:
         9f:80:e4:a0:8b:63:bd:05:41:bc:45:9b:f1:9a:ad:4b:7b:63:
         9c:89:22:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJifVIz7AJIG1Q44AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI1MDUwODE3MjkxNloXDTI1MDgwNjE3MjkxNlowLzEtMCsGA1UEAxMk
MDNhNGZjN2ItM2U4Yy00YzJhLWI3YmYtNTkxMDAzOTkxNjMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pbPj7FEPaCVoM68pHxQeXOz///eZUoOMSt0
P7b8CttYF+5imZFx0kbfjYog9cHSyzd3KRbGBlIvwSUjbzalLp3oNTDXFagTOohr
16dt/uW1B75E2ERUw5iLxStvKdW7dkzbnoO6RIBtU1WsHDXt4L7VRQ6VWiOpOlZr
HXWANliB/eryDgyrnPmIzyItUSqpvqKqTopswta3oPCRXp1d+6ifgAzyRh7Zq0z1
4K5elB5A70YMjnU2aHxr3tDQlaSJ9TIEhgpdvh5CZXu0b/bISPFaER9X9lUt4dd9
1jL1UGoVd76fFD2WOSK749OlmUiEklmve8SZcXdz1E9d+rcJywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJqu4j6N7NGv81ij6P+T4RJWqzWoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvOTQ0ZDgzODctMmRiNi0z
ZTJjLWI5ZDktNWJiZGU1NGVhNzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaIxiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJN/GzxHZKs+de9PMrifa0IkIWF4JAiyKJ/9uldYBoDIMBDe748CGlFB
3TOTxbqLcXgZ+rPmkEoNPvdNsbdh6sSrNQkvH+XYmRbNFRLLpc0x6n+wiJc9G4iO
0N69DDW2JJRPrj4MMVC4jJEMnxcFE4PCO62dORfFRUcsXpu40WU0qt0xGEfHbtIG
IVpEORyHxd3SMYM23/aLWCYnaBNP7CSEGPpAKZcSdyWReApz94P50yIFMg5wlfeK
PAkG75mWT4o25QbO8UmXxiHjJeeBRC8wuhQ+4/54wwfihwnAeNkVpk143QrW2yPG
UZ+A5KCLY70FQbxFm/GarUt7Y5yJIiU=
-----END CERTIFICATE-----
Generated at Mon May 12 02:52:58 2025 by rpki-client