Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/5b41c5be-6a73-3328-b9e9-5d8de55f8772.roa
File:                     5b41c5be-6a73-3328-b9e9-5d8de55f8772.roa (raw, json)
Hash identifier:          yl3/o3uwV5tCWYPalGvNVCNgkKCPcYejcK/e/mnPwAI=
Subject key identifier:   F2:F7:BB:A6:A3:DC:5C:E4:38:AB:83:E2:FF:97:3C:55:80:2A:1C:45
Certificate issuer:       /CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
Certificate serial:       010D0C9F43285848E9CBEAA3667A4827325C6BF0
Authority key identifier: BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/5b41c5be-6a73-3328-b9e9-5d8de55f8772.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        104.237.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:ea:a3:66:7a:48:27:32:5c:6b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=451e55c1-ad8f-4b18-a00e-0a8df1bec155
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=c0f97fe1-32db-4113-8462-41b301d5a929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:e5:7f:ec:9b:21:c6:4f:33:23:ff:de:e5:
                    bc:75:b7:c3:11:e8:dc:e2:76:65:42:1f:4e:65:3a:
                    82:76:df:a3:05:31:87:c6:3c:bb:89:98:42:37:b8:
                    c9:43:11:1f:17:aa:33:bf:78:11:5a:92:a2:5a:fd:
                    a3:38:be:c2:a3:d9:24:d2:63:9d:22:00:85:1f:f7:
                    8b:47:d6:e9:c0:9c:00:cc:5f:12:73:a3:5e:10:e5:
                    b2:7f:9c:e9:d8:f8:52:a9:70:50:d1:ba:8a:65:41:
                    64:23:b3:2b:14:d4:f7:c2:84:44:5c:86:96:8d:b0:
                    72:d8:e6:e6:70:36:a4:5e:c4:34:86:fd:a9:24:b8:
                    6c:e7:e5:92:5b:ec:50:1d:1c:7f:e9:ea:71:c9:e5:
                    8a:b6:f5:ac:ab:80:4f:f6:20:13:bf:83:2c:a0:11:
                    ab:7a:4b:3a:28:99:c8:55:84:36:e3:9b:1f:69:24:
                    82:9d:4e:1e:19:9d:b2:2b:3b:17:d1:e5:08:5e:90:
                    d0:13:85:53:f0:d1:5b:31:09:74:07:1a:68:78:ec:
                    e2:77:2f:d6:7b:99:3c:98:8d:cd:ec:ff:5d:96:f9:
                    e2:b8:92:d4:33:67:0b:80:b7:ed:fc:20:6a:ab:06:
                    32:b8:f6:7b:e2:05:1f:71:70:a3:90:7b:9f:d7:ef:
                    24:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F7:BB:A6:A3:DC:5C:E4:38:AB:83:E2:FF:97:3C:55:80:2A:1C:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/5b41c5be-6a73-3328-b9e9-5d8de55f8772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155/451e55c1-ad8f-4b18-a00e-0a8df1bec155.crl

            X509v3 Authority Key Identifier:
                keyid:BB:98:E4:F1:07:E8:CA:97:21:D4:11:E8:BF:87:37:09:86:DE:F0:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/451e55c1-ad8f-4b18-a00e-0a8df1bec155.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:1a:4e:07:a7:c6:e0:e4:9c:d3:c7:35:4b:62:28:81:69:4f:
         79:5f:d1:ea:44:33:65:b4:fe:a8:7a:54:86:c3:d3:5a:a0:38:
         80:24:ac:a9:ee:81:d4:aa:73:d7:54:62:65:32:7a:c6:3a:7c:
         5b:79:df:f9:d4:0f:9f:0e:be:d7:b5:45:9d:0e:ce:5b:de:1a:
         f9:ad:e6:01:33:91:78:9f:f3:ad:ab:29:fa:64:2e:46:96:c1:
         55:07:45:08:3d:6e:29:01:76:66:41:09:a2:c1:5a:b5:19:b0:
         dd:bb:e3:7d:46:43:58:59:36:b4:58:d9:51:96:36:4e:5c:77:
         38:d8:8d:7f:46:b5:0c:e7:e8:e0:59:44:93:b2:f5:dc:93:cd:
         d2:85:82:8f:6f:62:fa:2b:d5:d4:fc:67:d2:d3:48:fe:c6:9d:
         f3:04:31:ab:79:98:cb:3f:8d:fa:23:f6:ad:ff:2c:96:d3:cf:
         91:04:c4:6b:5e:8a:f5:15:34:ae:5f:91:d5:77:cb:a3:22:75:
         b0:69:61:a8:8d:ea:8e:91:0a:df:5f:f8:49:34:b3:96:f2:ad:
         89:5a:7b:a0:de:51:45:0b:60:38:08:42:57:69:fa:a7:39:da:
         7f:f1:5c:08:2d:6d:41:f7:bb:5b:d5:04:d1:fc:f7:62:d5:99:
         4b:da:b4:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy+qjZnpIJzJca/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDUxZTU1YzEtYWQ4Zi00YjE4LWEwMGUtMGE4ZGYxYmVj
MTU1MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk
YzBmOTdmZTEtMzJkYi00MTEzLTg0NjItNDFiMzAxZDVhOTI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdblf+ybIcZPMyP/3uW8dbfDEejc4nZlQh9O
ZTqCdt+jBTGHxjy7iZhCN7jJQxEfF6ozv3gRWpKiWv2jOL7Co9kk0mOdIgCFH/eL
R9bpwJwAzF8Sc6NeEOWyf5zp2PhSqXBQ0bqKZUFkI7MrFNT3woREXIaWjbBy2Obm
cDakXsQ0hv2pJLhs5+WSW+xQHRx/6epxyeWKtvWsq4BP9iATv4MsoBGreks6KJnI
VYQ245sfaSSCnU4eGZ2yKzsX0eUIXpDQE4VT8NFbMQl0BxpoeOzidy/We5k8mI3N
7P9dlvniuJLUM2cLgLft/CBqqwYyuPZ74gUfcXCjkHuf1+8kzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPL3u6aj3FzkOKuD4v+XPFWAKhxFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NTFl
NTVjMS1hZDhmLTRiMTgtYTAwZS0wYThkZjFiZWMxNTUvNWI0MWM1YmUtNmE3My0z
MzI4LWI5ZTktNWQ4ZGU1NWY4NzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDUxZTU1YzEtYWQ4Zi00YjE4LWEw
MGUtMGE4ZGYxYmVjMTU1LzQ1MWU1NWMxLWFkOGYtNGIxOC1hMDBlLTBhOGRmMWJl
YzE1NS5jcmwwHwYDVR0jBBgwFoAUu5jk8Qfoypch1BHov4c3CYbe8KcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80NTFlNTVjMS1hZDhmLTRiMTgtYTAwZS0wYThk
ZjFiZWMxNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO0oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFQaTgenxuDknNPHNUtiKIFpT3lf0epEM2W0/qh6VIbD01qgOIAkrKnu
gdSqc9dUYmUyesY6fFt53/nUD58Ovte1RZ0OzlveGvmt5gEzkXif862rKfpkLkaW
wVUHRQg9bikBdmZBCaLBWrUZsN27431GQ1hZNrRY2VGWNk5cdzjYjX9GtQzn6OBZ
RJOy9dyTzdKFgo9vYvor1dT8Z9LTSP7GnfMEMat5mMs/jfoj9q3/LJbTz5EExGte
ivUVNK5fkdV3y6MidbBpYaiN6o6RCt9f+Ek0s5byrYlae6DeUUULYDgIQldp+qc5
2n/xXAgtbUH3u1vVBNH892LVmUvatFg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:05:06 2025 by rpki-client