Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/2372ec00-a4b3-36ce-a0a2-79212ce7a2cb.roa
File:                     2372ec00-a4b3-36ce-a0a2-79212ce7a2cb.roa (raw, json)
Hash identifier:          QUULRuXQWHkQj06fveWVUNiyY2PpTmW3U8hvOLP6pco=
Subject key identifier:   F6:CF:24:FD:3F:60:81:37:D0:A6:42:71:D7:DB:C1:4C:B6:3F:3E:A6
Certificate issuer:       /CN=776cdb06-1306-4fbd-b690-680ab4fe3f19
Certificate serial:       010D0C9F43285848B35B65B1DE2A282CA340ABC0
Authority key identifier: CF:2F:18:51:CD:2F:C6:34:EC:48:C5:D8:07:F7:88:DB:D0:FC:8E:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/2372ec00-a4b3-36ce-a0a2-79212ce7a2cb.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     203380
IP address blocks:        104.152.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/776cdb06-1306-4fbd-b690-680ab4fe3f19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/776cdb06-1306-4fbd-b690-680ab4fe3f19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:65:b1:de:2a:28:2c:a3:40:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776cdb06-1306-4fbd-b690-680ab4fe3f19
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=6392349a-138b-49db-9841-0ef7fd91a1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f0:3d:74:7a:cd:2a:91:63:ee:69:fa:cc:c8:
                    da:f3:34:56:ce:76:f3:ae:d4:db:06:00:95:7a:ff:
                    21:96:12:98:48:ae:9e:1a:89:a7:32:06:d7:9e:37:
                    c6:02:f4:95:d7:78:8f:25:a9:e1:b5:29:80:aa:bc:
                    b9:2c:4b:fa:5b:b1:44:b4:3b:47:e6:d2:b1:f4:81:
                    40:8b:b9:02:74:a1:a6:c7:cf:42:30:e5:e5:69:aa:
                    9d:e6:46:a7:45:84:03:67:91:5d:af:1d:c1:53:cf:
                    9a:3b:4c:84:19:01:66:64:db:bb:4f:9d:54:92:9a:
                    72:ac:e9:85:33:5a:3b:bb:5d:0a:0c:3f:f6:66:0e:
                    d9:11:aa:2f:bb:95:12:8f:f4:ef:35:b1:53:8f:05:
                    cd:78:3f:02:f4:48:b2:b1:50:86:25:d4:88:3e:da:
                    07:bd:0f:31:c5:a2:25:12:73:de:56:2d:5d:4d:6a:
                    00:d8:4c:af:5c:ba:80:6e:94:6d:17:1c:84:7b:86:
                    4a:d4:18:43:87:af:bd:c9:57:08:07:29:7f:01:17:
                    16:f5:8b:1c:73:a3:c7:ee:cd:dc:a6:6b:d6:2f:14:
                    ab:ec:66:d2:c7:81:b2:be:79:35:d7:f5:0a:24:c3:
                    1c:37:e7:ac:01:ea:c9:c3:3d:f6:93:67:00:93:0a:
                    c9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CF:24:FD:3F:60:81:37:D0:A6:42:71:D7:DB:C1:4C:B6:3F:3E:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/2372ec00-a4b3-36ce-a0a2-79212ce7a2cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19/776cdb06-1306-4fbd-b690-680ab4fe3f19.crl

            X509v3 Authority Key Identifier:
                keyid:CF:2F:18:51:CD:2F:C6:34:EC:48:C5:D8:07:F7:88:DB:D0:FC:8E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/776cdb06-1306-4fbd-b690-680ab4fe3f19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:a5:02:7d:9f:c5:c2:a7:79:20:36:93:f9:8e:28:ee:a6:91:
         0a:e0:aa:4f:62:c8:a8:7a:2f:9b:e8:f0:d5:74:ec:eb:14:28:
         5e:28:21:f3:10:ef:06:d8:f4:64:40:85:44:c2:79:bc:c7:9a:
         f0:08:f3:91:e5:17:6e:f3:ab:86:8d:b1:c0:4c:03:11:2a:0c:
         89:33:a3:3e:2e:66:99:ba:6a:f5:0b:27:95:2a:be:db:1a:6c:
         96:a6:ab:a1:58:b2:b8:7a:92:a9:96:79:8e:d9:52:16:cd:f2:
         62:75:b7:cc:69:27:03:48:4f:f8:ee:50:ae:17:c2:66:06:77:
         3b:b2:4d:92:a1:f8:b8:8a:5a:83:23:20:55:d6:12:74:96:39:
         f3:31:ec:cf:a0:5c:56:84:63:e3:76:97:41:9a:e4:1c:9e:ad:
         79:0d:c4:15:56:a0:d4:f4:5e:e5:72:bb:35:9d:49:48:29:7f:
         ff:57:0a:11:61:44:78:dc:0c:3a:d4:aa:76:94:5b:9c:a3:44:
         75:da:59:94:bf:0a:7f:93:9e:f8:51:94:d8:a0:e1:cc:99:b8:
         4b:5b:5c:95:b2:52:14:ca:6c:96:77:2c:b2:1d:f9:0c:81:4e:
         c6:2f:fc:61:a8:38:31:5a:28:24:03:e1:d9:6f:c7:44:54:4b:
         1a:e5:73:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW2Wx3iooLKNAq8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc2Y2RiMDYtMTMwNi00ZmJkLWI2OTAtNjgwYWI0ZmUz
ZjE5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk
NjM5MjM0OWEtMTM4Yi00OWRiLTk4NDEtMGVmN2ZkOTFhMWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPA9dHrNKpFj7mn6zMja8zRWznbzrtTbBgCV
ev8hlhKYSK6eGomnMgbXnjfGAvSV13iPJanhtSmAqry5LEv6W7FEtDtH5tKx9IFA
i7kCdKGmx89CMOXlaaqd5kanRYQDZ5Fdrx3BU8+aO0yEGQFmZNu7T51UkppyrOmF
M1o7u10KDD/2Zg7ZEaovu5USj/TvNbFTjwXNeD8C9EiysVCGJdSIPtoHvQ8xxaIl
EnPeVi1dTWoA2EyvXLqAbpRtFxyEe4ZK1BhDh6+9yVcIByl/ARcW9Yscc6PH7s3c
pmvWLxSr7GbSx4Gyvnk11/UKJMMcN+esAerJwz32k2cAkwrJ9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPbPJP0/YIE30KZCcdfbwUy2Pz6mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NzZj
ZGIwNi0xMzA2LTRmYmQtYjY5MC02ODBhYjRmZTNmMTkvMjM3MmVjMDAtYTRiMy0z
NmNlLWEwYTItNzkyMTJjZTdhMmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzc2Y2RiMDYtMTMwNi00ZmJkLWI2
OTAtNjgwYWI0ZmUzZjE5Lzc3NmNkYjA2LTEzMDYtNGZiZC1iNjkwLTY4MGFiNGZl
M2YxOS5jcmwwHwYDVR0jBBgwFoAUzy8YUc0vxjTsSMXYB/eI29D8joQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83NzZjZGIwNi0xMzA2LTRmYmQtYjY5MC02ODBh
YjRmZTNmMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaJgxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA6lAn2fxcKneSA2k/mOKO6mkQrgqk9iyKh6L5vo8NV07OsUKF4oIfMQ
7wbY9GRAhUTCebzHmvAI85HlF27zq4aNscBMAxEqDIkzoz4uZpm6avULJ5Uqvtsa
bJamq6FYsrh6kqmWeY7ZUhbN8mJ1t8xpJwNIT/juUK4XwmYGdzuyTZKh+LiKWoMj
IFXWEnSWOfMx7M+gXFaEY+N2l0Ga5ByerXkNxBVWoNT0XuVyuzWdSUgpf/9XChFh
RHjcDDrUqnaUW5yjRHXaWZS/Cn+TnvhRlNig4cyZuEtbXJWyUhTKbJZ3LLId+QyB
TsYv/GGoODFaKCQD4dlvx0RUSxrlc5o=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:20 2025 by rpki-client