Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/04830817-46b3-3dd5-9f1d-be10761e65a5.roa
File:                     04830817-46b3-3dd5-9f1d-be10761e65a5.roa (raw, json)
Hash identifier:          KwFmg81kw3MjKGYtJPWBqiTdYbGXqSCZORu5pG7BXyI=
Subject key identifier:   21:3E:2B:2C:9E:7F:2C:CC:66:C4:EE:2A:3A:C0:A5:AF:DF:2C:DB:95
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858488E149C8E764BF6CEDE4AEE80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/04830817-46b3-3dd5-9f1d-be10761e65a5.roa
Signing time:             Wed 15 Jan 2025 17:33:12 +0000
ROA not before:           Wed 15 Jan 2025 17:33:12 +0000
ROA not after:            Tue 15 Apr 2025 16:33:12 +0000
asID:                     214238
IP address blocks:        104.252.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8e:14:9c:8e:76:4b:f6:ce:de:4a:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 15 17:33:12 2025 GMT
            Not After : Apr 15 16:33:12 2025 GMT
        Subject: CN=ae2cda17-ef3f-4ed6-a13e-84b810f54603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:59:f7:c5:90:aa:33:ea:e8:e3:95:f6:f6:
                    cd:85:72:be:66:07:14:f3:d6:5a:d0:30:5d:42:fc:
                    2c:e3:ab:17:78:96:b4:99:84:53:07:96:a8:74:04:
                    0f:0e:24:61:33:28:32:3b:e5:7c:66:80:82:72:35:
                    e8:0a:86:d2:44:40:1d:33:a9:51:ca:6e:01:e7:db:
                    90:f8:5b:a3:9f:b6:d9:f8:e3:e8:76:ce:c4:ed:d0:
                    db:12:28:76:85:35:99:c6:58:05:6e:a8:c3:81:9b:
                    44:4f:53:ef:00:18:96:08:3e:f1:9e:d4:10:d2:70:
                    71:e9:6d:5d:3e:29:f0:81:ea:b1:3b:8f:4d:8f:6a:
                    96:13:ff:46:8c:63:87:ef:b7:92:0c:fb:76:7a:7a:
                    0e:2c:8c:95:9f:a6:cc:2d:3f:3d:bc:ec:2f:a7:83:
                    a4:36:5b:ee:98:8f:de:1b:55:e6:67:b3:c6:89:5b:
                    8c:25:4a:9d:41:59:2b:e8:76:a5:f0:7a:19:2c:fd:
                    f6:8a:2f:8e:65:9b:18:50:a4:12:d5:87:a8:bc:f7:
                    22:6a:48:41:58:c6:9a:7f:a3:23:b9:e7:93:41:61:
                    e7:3d:a2:6b:fe:77:a7:7a:cb:af:c9:42:54:02:ef:
                    1b:95:25:14:c6:62:f9:ef:bb:ba:8f:d4:68:6e:ea:
                    39:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3E:2B:2C:9E:7F:2C:CC:66:C4:EE:2A:3A:C0:A5:AF:DF:2C:DB:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/04830817-46b3-3dd5-9f1d-be10761e65a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:8c:ea:50:db:95:05:ad:9e:c4:26:58:b7:04:c9:73:a1:0d:
         5e:fc:da:99:65:65:7b:ee:43:46:f3:f8:bf:f7:e1:a7:68:aa:
         4f:0b:a7:05:f2:24:4d:32:16:71:a2:3f:c9:17:6c:db:03:b7:
         80:f4:b1:6e:f8:6f:4f:10:21:ee:0b:4d:c9:89:89:d0:31:08:
         be:a8:36:29:3b:39:c1:c3:38:e6:9d:d5:16:b8:2b:76:02:d2:
         de:a5:b8:cf:08:54:d9:f3:21:9f:80:c2:2c:ed:20:88:ee:59:
         b3:f8:a2:db:66:49:c8:9a:78:0b:42:08:3e:7c:6b:e9:4b:9b:
         a0:e2:47:93:8d:da:56:ce:cf:ec:f7:26:cc:02:88:6f:d9:2b:
         8c:c2:e7:55:9c:1f:82:43:36:27:ac:eb:87:43:c5:1f:b5:33:
         75:3f:68:3d:a2:80:b3:dc:8c:3b:58:57:05:3b:dd:b6:59:fe:
         38:fa:d9:d7:0f:f3:20:64:f4:45:40:c4:2d:a2:53:b4:44:2c:
         0a:af:dd:a3:0a:76:5f:2f:86:02:a3:b4:11:38:71:98:da:f5:
         88:e4:95:c5:c6:55:2d:fc:3b:8f:0e:a1:fb:a4:cb:8a:a0:9f:
         6b:d8:39:a0:ee:75:cc:d9:50:33:cd:c3:c5:f8:38:a2:bd:72:
         61:b8:32:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiOFJyOdkv2zt5K7oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDExNTE3MzMxMloXDTI1MDQxNTE2MzMxMlowLzEtMCsGA1UEAxMk
YWUyY2RhMTctZWYzZi00ZWQ2LWExM2UtODRiODEwZjU0NjAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj1Z98WQqjPq6OOV9vbNhXK+ZgcU89Za0DBd
Qvws46sXeJa0mYRTB5aodAQPDiRhMygyO+V8ZoCCcjXoCobSREAdM6lRym4B59uQ
+Fujn7bZ+OPods7E7dDbEih2hTWZxlgFbqjDgZtET1PvABiWCD7xntQQ0nBx6W1d
PinwgeqxO49Nj2qWE/9GjGOH77eSDPt2enoOLIyVn6bMLT89vOwvp4OkNlvumI/e
G1XmZ7PGiVuMJUqdQVkr6Hal8HoZLP32ii+OZZsYUKQS1YeovPciakhBWMaaf6Mj
ueeTQWHnPaJr/nenesuvyUJUAu8blSUUxmL577u6j9Robuo5rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCE+KyyefyzMZsTuKjrApa/fLNuVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMDQ4MzA4MTctNDZiMy0z
ZGQ1LTlmMWQtYmUxMDc2MWU2NWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPwCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEmM6lDblQWtnsQmWLcEyXOhDV782pllZXvuQ0bz+L/34adoqk8LpwXy
JE0yFnGiP8kXbNsDt4D0sW74b08QIe4LTcmJidAxCL6oNik7OcHDOOad1Ra4K3YC
0t6luM8IVNnzIZ+AwiztIIjuWbP4ottmSciaeAtCCD58a+lLm6DiR5ON2lbOz+z3
JswCiG/ZK4zC51WcH4JDNies64dDxR+1M3U/aD2igLPcjDtYVwU73bZZ/jj62dcP
8yBk9EVAxC2iU7RELAqv3aMKdl8vhgKjtBE4cZja9YjklcXGVS38O48Oofuky4qg
n2vYOaDudczZUDPNw8X4OKK9cmG4MkA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:19 2025 by rpki-client