Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/93609b81-7549-330a-a052-bca3bd4d9e8f.roa
File:                     93609b81-7549-330a-a052-bca3bd4d9e8f.roa (raw, json)
Hash identifier:          tr7hnCpLrquOMBDip9pN1pEPvGm8PnzeB5rs7RL5asc=
Subject key identifier:   9B:88:31:A7:70:F8:9C:56:B0:A2:C9:49:E0:C8:C7:33:38:BC:CB:2B
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A103544D426D104AEE5152B00
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/93609b81-7549-330a-a052-bca3bd4d9e8f.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     212238
IP address blocks:        104.250.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:44:d4:26:d1:04:ae:e5:15:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=97775c8f-5ac1-4981-ad49-f82705238679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5f:c7:fe:2e:a4:3e:c5:2c:c1:28:f7:7b:59:
                    93:0a:f1:7e:e5:24:90:45:e2:6d:bc:3e:18:46:e4:
                    50:cd:82:c0:66:2e:db:13:a4:99:84:60:da:ff:9a:
                    2b:7f:1a:5d:9e:53:07:54:58:cc:2c:88:e0:94:3a:
                    c8:fa:e9:fd:30:69:ef:dd:72:93:1d:61:b1:db:ab:
                    a1:54:77:c7:9d:02:05:53:3e:e6:27:32:2b:1e:93:
                    52:e4:45:28:1a:c7:83:fc:8d:50:6a:12:b4:14:89:
                    aa:32:8b:93:df:b0:90:2b:72:13:39:42:e7:88:82:
                    36:a8:8a:fc:c4:77:9e:10:81:08:4d:da:ae:8f:9b:
                    91:f0:89:bd:02:31:c4:a5:22:6f:14:6d:09:e8:c1:
                    69:f1:28:82:2b:e4:b9:81:6f:69:93:c0:19:3a:e9:
                    d0:ff:25:d5:cf:c1:24:38:19:5d:d9:21:f7:59:bc:
                    f2:0a:96:9a:9b:b6:81:77:92:a6:1f:c9:12:e8:01:
                    79:b8:bc:33:6b:46:ca:59:7e:72:61:15:53:94:76:
                    9a:7e:c0:6e:23:93:76:8c:09:03:6f:3a:97:6f:de:
                    46:2a:c7:c9:99:7e:78:b1:bb:4e:0d:e4:bb:8d:60:
                    92:22:85:01:2b:cb:4b:b6:46:4a:4f:1f:85:47:04:
                    8d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:88:31:A7:70:F8:9C:56:B0:A2:C9:49:E0:C8:C7:33:38:BC:CB:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/93609b81-7549-330a-a052-bca3bd4d9e8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:93:5b:7d:42:c4:dc:1f:b5:f9:ee:4c:31:5b:c9:6d:4c:89:
         29:85:68:81:a7:59:62:89:fd:d3:14:64:47:50:25:40:b9:df:
         a0:d4:b1:16:af:3d:57:9f:cf:5a:47:69:ad:a9:95:4a:c1:8d:
         b6:d6:be:1e:ad:44:a3:94:b7:92:c8:ea:93:05:ec:26:5d:1b:
         80:25:b7:9f:ab:e4:10:3e:c3:01:5f:08:66:92:94:8d:21:cf:
         59:c2:fd:71:17:65:88:ce:1f:dc:ff:86:b7:58:29:86:3c:0d:
         48:1c:2e:8b:75:7a:03:0b:25:e3:95:69:f3:33:cf:45:60:bb:
         ad:e5:1d:74:9c:e4:0c:56:5f:f8:f4:19:b6:62:43:a5:87:56:
         49:c0:09:de:90:ba:14:36:2a:48:cc:4d:ec:67:04:d8:c0:a8:
         9a:2b:4b:3b:7e:dc:7b:74:a8:bc:36:8f:8c:7d:8d:ee:6b:13:
         8d:ab:b9:c5:16:52:32:a6:98:33:69:1f:f0:58:2b:bd:ad:84:
         0a:f0:4d:b7:e7:b6:8b:5c:76:17:f8:63:42:61:28:85:09:05:
         54:82:dd:c0:e3:f1:26:4d:c5:65:1b:a0:bb:0b:cf:cc:ca:26:
         46:2a:d0:82:f3:42:f1:f6:98:0e:68:f3:5c:a1:d4:01:3b:6f:
         2a:24:b8:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUTUJtEEruUVKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk
OTc3NzVjOGYtNWFjMS00OTgxLWFkNDktZjgyNzA1MjM4Njc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV/H/i6kPsUswSj3e1mTCvF+5SSQReJtvD4Y
RuRQzYLAZi7bE6SZhGDa/5orfxpdnlMHVFjMLIjglDrI+un9MGnv3XKTHWGx26uh
VHfHnQIFUz7mJzIrHpNS5EUoGseD/I1QahK0FImqMouT37CQK3ITOULniII2qIr8
xHeeEIEITdquj5uR8Im9AjHEpSJvFG0J6MFp8SiCK+S5gW9pk8AZOunQ/yXVz8Ek
OBld2SH3WbzyCpaam7aBd5KmH8kS6AF5uLwza0bKWX5yYRVTlHaafsBuI5N2jAkD
bzqXb95GKsfJmX54sbtODeS7jWCSIoUBK8tLtkZKTx+FRwSNUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJuIMadw+JxWsKLJSeDIxzM4vMsrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTM2MDliODEtNzU0OS0z
MzBhLWEwNTItYmNhM2JkNGQ5ZThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPq1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADGTW31CxNwftfnuTDFbyW1MiSmFaIGnWWKJ/dMUZEdQJUC536DUsRav
PVefz1pHaa2plUrBjbbWvh6tRKOUt5LI6pMF7CZdG4Alt5+r5BA+wwFfCGaSlI0h
z1nC/XEXZYjOH9z/hrdYKYY8DUgcLot1egMLJeOVafMzz0Vgu63lHXSc5AxWX/j0
GbZiQ6WHVknACd6QuhQ2KkjMTexnBNjAqJorSzt+3Ht0qLw2j4x9je5rE42rucUW
UjKmmDNpH/BYK72thArwTbfntotcdhf4Y0JhKIUJBVSC3cDj8SZNxWUboLsLz8zK
JkYq0ILzQvH2mA5o81yh1AE7byokuMU=
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:29:03 2025 by rpki-client