Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3b5bb2d-375e-34fd-9098-5704ca90f100.roa
File:                     a3b5bb2d-375e-34fd-9098-5704ca90f100.roa (raw, json)
Hash identifier:          RYupae8VfqoH9c1qc+gSvs6ztmd6OjhzCOKArgEN2BU=
Subject key identifier:   41:3A:A1:0D:CE:3C:BF:EF:8E:3E:AC:A8:A3:D4:6B:58:CE:BF:D0:9C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849029700F66DA33F468A04E200
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3b5bb2d-375e-34fd-9098-5704ca90f100.roa
Signing time:             Wed 26 Feb 2025 11:09:42 +0000
ROA not before:           Wed 26 Feb 2025 11:09:42 +0000
ROA not after:            Tue 27 May 2025 10:09:42 +0000
asID:                     30036
IP address blocks:        104.201.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:97:00:f6:6d:a3:3f:46:8a:04:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 26 11:09:42 2025 GMT
            Not After : May 27 10:09:42 2025 GMT
        Subject: CN=6fe2d92f-2a0f-4c1e-84ab-3bbd8880ac2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e2:f2:0c:2b:d4:f7:fa:a6:91:5d:a2:76:89:
                    e0:77:9d:80:3b:31:e0:60:48:63:c0:bc:ec:96:73:
                    ee:fb:75:14:5a:e4:39:18:8c:0a:be:f6:dc:37:c3:
                    7d:82:53:ae:65:c6:59:d6:66:19:c5:4a:b2:70:5b:
                    dd:c2:4c:0b:da:1f:44:42:a7:78:52:68:3d:4e:64:
                    74:27:67:03:db:c5:f8:97:48:91:2a:f2:ca:12:82:
                    18:3c:60:e8:61:2f:f6:db:e4:58:55:19:c6:8b:34:
                    ab:09:30:78:d8:e5:a7:b4:50:7a:c3:9f:69:ab:40:
                    22:3a:37:57:e1:c3:06:7a:f3:6f:7a:a5:b4:60:3e:
                    11:c3:90:fc:0d:75:13:15:c3:27:27:0d:74:ac:f6:
                    92:3f:c7:8c:b7:34:e9:0d:2a:f2:a6:73:df:0b:9e:
                    cb:f0:e7:56:12:8e:a4:af:bb:a3:34:c5:8f:ea:f6:
                    96:0c:e5:35:a2:4c:c3:20:99:1d:b0:43:20:44:be:
                    9a:22:10:d6:1c:ce:25:db:54:98:30:5c:c6:53:c4:
                    56:97:80:76:5b:50:c6:d2:79:66:27:cf:eb:b2:8b:
                    9e:02:0c:2e:53:8e:2d:60:c5:67:97:14:bd:a3:78:
                    1e:62:dc:66:b3:96:1c:15:19:22:e3:b7:05:72:d8:
                    43:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3A:A1:0D:CE:3C:BF:EF:8E:3E:AC:A8:A3:D4:6B:58:CE:BF:D0:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3b5bb2d-375e-34fd-9098-5704ca90f100.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.201.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a3:47:22:85:75:11:06:c5:a0:dc:43:d5:6f:ec:66:89:46:
         a9:f8:b0:b8:b9:b6:34:f7:93:31:c6:92:61:4c:e5:c0:eb:c0:
         8f:7b:9a:b3:ae:a5:25:c6:e6:c3:46:a6:78:76:7a:2f:63:6c:
         29:f7:15:ba:e1:bb:d5:3e:0f:7c:fc:0b:b7:80:e6:2c:52:fb:
         0f:e1:15:b1:8c:1d:69:e6:c3:e7:29:29:21:58:c3:f6:37:84:
         43:1e:3a:d3:61:23:a9:6e:b8:ab:86:32:15:6a:ef:7c:bb:bd:
         1e:c7:76:07:62:71:b7:19:0e:78:c3:c1:4a:42:a3:99:77:c2:
         99:85:84:a2:ba:6b:31:c3:c3:e8:77:a7:1a:8b:53:f8:1d:06:
         a2:3e:c8:c2:cf:1c:d9:20:c7:d9:a1:1f:2b:bb:2c:b6:e1:a0:
         0a:5f:b0:fb:c4:40:0f:2c:34:3f:88:4a:a5:7b:56:ef:ad:98:
         81:85:fb:eb:da:09:4a:73:7d:24:a1:40:7f:53:0b:73:2a:32:
         f7:56:5f:69:78:ba:74:d4:6c:29:94:73:dc:a3:a7:56:1c:12:
         29:ac:8e:3e:bc:8b:97:aa:e1:78:09:09:f2:5c:8d:f9:de:1b:
         da:7d:44:4e:d9:ec:d2:a1:85:89:87:5a:51:aa:8b:af:ec:6b:
         a6:49:ae:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkClwD2baM/RooE4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIyNjExMDk0MloXDTI1MDUyNzEwMDk0MlowLzEtMCsGA1UEAxMk
NmZlMmQ5MmYtMmEwZi00YzFlLTg0YWItM2JiZDg4ODBhYzJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeLyDCvU9/qmkV2idongd52AOzHgYEhjwLzs
lnPu+3UUWuQ5GIwKvvbcN8N9glOuZcZZ1mYZxUqycFvdwkwL2h9EQqd4Umg9TmR0
J2cD28X4l0iRKvLKEoIYPGDoYS/22+RYVRnGizSrCTB42OWntFB6w59pq0AiOjdX
4cMGevNveqW0YD4Rw5D8DXUTFcMnJw10rPaSP8eMtzTpDSrypnPfC57L8OdWEo6k
r7ujNMWP6vaWDOU1okzDIJkdsEMgRL6aIhDWHM4l21SYMFzGU8RWl4B2W1DG0nlm
J8/rsoueAgwuU44tYMVnlxS9o3geYtxms5YcFRki47cFcthDVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEE6oQ3OPL/vjj6sqKPUa1jOv9CcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTNiNWJiMmQtMzc1ZS0z
NGZkLTkwOTgtNTcwNGNhOTBmMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMlTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmjRyKFdREGxaDcQ9Vv7GaJRqn4sLi5tjT3kzHGkmFM5cDrwI97mrOu
pSXG5sNGpnh2ei9jbCn3Fbrhu9U+D3z8C7eA5ixS+w/hFbGMHWnmw+cpKSFYw/Y3
hEMeOtNhI6luuKuGMhVq73y7vR7HdgdicbcZDnjDwUpCo5l3wpmFhKK6azHDw+h3
pxqLU/gdBqI+yMLPHNkgx9mhHyu7LLbhoApfsPvEQA8sND+ISqV7Vu+tmIGF++va
CUpzfSShQH9TC3MqMvdWX2l4unTUbCmUc9yjp1YcEimsjj68i5eq4XgJCfJcjfne
G9p9RE7Z7NKhhYmHWlGqi6/sa6ZJruE=
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:24:08 2025 by rpki-client