Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7c3ad438-318d-31ea-b409-464a0d7419e8.roa
File:                     7c3ad438-318d-31ea-b409-464a0d7419e8.roa (raw, json)
Hash identifier:          mKxBLJhP2M+C/Qzze9uqEG0N+DEBTwjodD0BKHOIUj0=
Subject key identifier:   61:12:29:CC:BE:FE:66:CC:B6:D9:30:ED:00:F1:8B:CA:EE:12:9A:4E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B1AD19753D3CB94781A643A80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7c3ad438-318d-31ea-b409-464a0d7419e8.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     3356
IP address blocks:        104.253.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:97:53:d3:cb:94:78:1a:64:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=8a006013-e77a-4ec6-851a-b240a0ac0be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:43:92:33:f8:75:8b:55:a3:3d:93:18:c5:92:
                    ef:06:e0:91:fe:64:48:57:7b:58:d8:73:c5:25:d0:
                    25:1a:6a:6c:59:a5:df:3c:6b:c0:7f:28:e0:1b:a2:
                    4e:2f:99:e4:87:ea:db:a0:e4:27:7e:1a:a0:dd:2a:
                    cb:e1:a0:86:0c:6a:2b:b7:f5:bb:a4:5a:55:67:61:
                    97:de:e7:8e:3d:25:b9:2f:f4:9d:d4:ba:53:36:83:
                    d6:fb:fe:f3:29:a8:a1:0e:0a:63:84:bf:b2:61:00:
                    39:ff:30:b1:8c:7a:c8:60:9c:ab:e1:0e:9a:10:06:
                    7b:c3:fc:d0:6d:d0:ee:53:ac:b3:88:c3:ae:52:c8:
                    5b:12:9b:8b:cd:36:17:7f:d9:7e:84:d7:90:8c:07:
                    29:35:35:ca:a7:a7:1c:b5:43:2d:06:82:d3:f9:08:
                    6b:a1:4b:24:0b:a9:fa:3c:9e:36:3c:b8:40:48:4d:
                    42:78:9f:29:87:26:77:ee:c4:ef:43:5b:1b:b4:51:
                    ec:ee:b1:fa:fd:e2:48:57:0b:83:eb:af:60:f9:b4:
                    7d:26:6e:e6:4e:e1:c9:b2:f3:13:6b:af:59:67:a0:
                    bd:0a:e0:d8:26:9f:67:4e:48:66:13:b2:26:2f:ef:
                    48:3e:03:58:dc:3f:a1:37:53:44:53:5d:69:a0:a1:
                    dc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:12:29:CC:BE:FE:66:CC:B6:D9:30:ED:00:F1:8B:CA:EE:12:9A:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7c3ad438-318d-31ea-b409-464a0d7419e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:7d:0c:f7:d5:6e:3c:d0:ba:76:4a:05:5e:aa:32:05:2f:e7:
         17:8c:0f:6f:95:92:9e:0c:c0:e6:b8:f7:c3:20:6a:a7:89:33:
         a1:d0:8d:29:60:e1:4e:d9:37:e0:96:fc:61:17:f0:70:49:c9:
         cc:79:0a:dc:6f:12:9c:de:69:22:1a:39:a1:79:24:c2:6a:d0:
         a0:e2:23:3c:52:41:9c:e7:cd:06:9c:55:2a:d4:54:a8:c8:25:
         2e:fd:70:c2:8f:1d:29:cf:e3:c0:ed:fc:35:ba:c8:d0:d4:f9:
         e4:83:b6:ff:8f:1b:ad:ae:19:36:dc:03:3f:3d:1e:25:6f:ce:
         2c:8a:f8:ef:2a:42:34:d5:fc:bd:47:f4:b0:74:d4:5c:50:3d:
         85:3d:6e:76:4d:67:5c:b5:e2:b3:ca:12:22:c5:aa:dc:58:cf:
         c0:be:13:ff:2c:07:bf:da:63:e5:bf:2c:c5:1e:27:0a:5f:18:
         76:d9:93:0a:26:dc:ea:1b:bf:9e:e1:85:c3:45:2c:78:29:23:
         ca:5b:63:7f:56:6e:a0:71:bb:c8:55:e2:b1:75:83:65:7e:95:
         8e:98:45:ae:f2:4d:25:21:35:27:ed:d5:3c:56:b3:0c:b2:12:
         19:84:cc:70:7c:12:fa:17:24:dc:69:78:d5:f1:e3:e8:6a:59:
         02:16:5a:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0ZdT08uUeBpkOoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
OGEwMDYwMTMtZTc3YS00ZWM2LTg1MWEtYjI0MGEwYWMwYmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEOSM/h1i1WjPZMYxZLvBuCR/mRIV3tY2HPF
JdAlGmpsWaXfPGvAfyjgG6JOL5nkh+rboOQnfhqg3SrL4aCGDGort/W7pFpVZ2GX
3ueOPSW5L/Sd1LpTNoPW+/7zKaihDgpjhL+yYQA5/zCxjHrIYJyr4Q6aEAZ7w/zQ
bdDuU6yziMOuUshbEpuLzTYXf9l+hNeQjAcpNTXKp6cctUMtBoLT+QhroUskC6n6
PJ42PLhASE1CeJ8phyZ37sTvQ1sbtFHs7rH6/eJIVwuD669g+bR9Jm7mTuHJsvMT
a69ZZ6C9CuDYJp9nTkhmE7ImL+9IPgNY3D+hN1NEU11poKHc6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGESKcy+/mbMttkw7QDxi8ruEppOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvN2MzYWQ0MzgtMzE4ZC0z
MWVhLWI0MDktNDY0YTBkNzQxOWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP0nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZ9DPfVbjzQunZKBV6qMgUv5xeMD2+Vkp4MwOa498MgaqeJM6HQjSlg
4U7ZN+CW/GEX8HBJycx5CtxvEpzeaSIaOaF5JMJq0KDiIzxSQZznzQacVSrUVKjI
JS79cMKPHSnP48Dt/DW6yNDU+eSDtv+PG62uGTbcAz89HiVvziyK+O8qQjTV/L1H
9LB01FxQPYU9bnZNZ1y14rPKEiLFqtxYz8C+E/8sB7/aY+W/LMUeJwpfGHbZkwom
3Oobv57hhcNFLHgpI8pbY39WbqBxu8hV4rF1g2V+lY6YRa7yTSUhNSft1TxWswyy
EhmEzHB8EvoXJNxpeNXx4+hqWQIWWjI=
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:16:08 2025 by rpki-client