Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1c4f3cfc-070a-34f5-bfc1-aa8e4a87b907.roa
File:                     1c4f3cfc-070a-34f5-bfc1-aa8e4a87b907.roa (raw, json)
Hash identifier:          DNjwVauZM3/vk2oVqWoRaXlKSXjYw9BsmcBPAGjvTcg=
Subject key identifier:   74:02:92:CC:AD:A0:19:32:C9:15:54:47:AE:1A:5C:99:5A:CC:D1:BC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849D164F83F063C724791B87F80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1c4f3cfc-070a-34f5-bfc1-aa8e4a87b907.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     18779
IP address blocks:        104.253.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:f8:3f:06:3c:72:47:91:b8:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=14033bb9-f237-48be-b479-2da39663bb1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:83:99:f5:a0:a6:ca:0b:8f:98:08:75:44:
                    12:3f:be:cb:69:47:ac:ea:7c:10:95:32:f9:c0:46:
                    da:bd:44:3b:62:ec:d7:38:d4:32:bd:75:48:46:78:
                    b4:8b:8e:d0:ec:e1:33:7f:ce:27:15:1e:39:57:4b:
                    51:53:b5:a8:ec:1f:22:73:a0:18:49:dd:88:a6:70:
                    27:a8:58:f4:e9:08:d0:a9:cf:e6:ed:c2:fd:07:cb:
                    d6:bb:c9:29:66:ae:d6:c4:d7:51:d2:f8:5d:c0:7d:
                    24:a8:d7:e1:41:74:11:a3:9c:fa:3b:78:1e:a6:f6:
                    06:07:0c:c5:78:3b:4c:b9:23:5e:dd:47:ed:a2:0e:
                    ae:79:ad:d7:6c:59:80:3c:a1:44:31:c3:5b:67:05:
                    c2:12:1b:26:e7:30:bc:48:41:17:bd:88:85:92:a3:
                    dc:7e:a3:ba:6f:b8:47:9c:cf:a0:b8:e8:4f:fb:01:
                    5f:1b:72:63:f7:45:cb:09:ad:40:64:c9:f4:f3:88:
                    fb:5c:11:05:ee:0d:6b:89:6f:b5:7e:49:ee:ed:da:
                    3f:45:ce:33:f9:b6:20:12:a0:ec:14:e4:4f:34:bc:
                    a2:0f:64:c2:9c:6e:0c:1b:3c:44:5b:03:d4:0e:10:
                    f1:4a:a0:1d:0b:03:ca:74:e5:d8:b6:6e:61:79:25:
                    73:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:02:92:CC:AD:A0:19:32:C9:15:54:47:AE:1A:5C:99:5A:CC:D1:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1c4f3cfc-070a-34f5-bfc1-aa8e4a87b907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:e9:e8:f1:38:32:47:2b:9b:32:91:7e:50:94:0d:7e:39:51:
         49:d4:12:8a:68:6d:31:b8:44:d5:41:b6:c2:59:26:b8:49:27:
         cf:4b:1c:99:fa:e6:d6:bf:3e:43:0f:f1:8c:e0:5d:1d:24:22:
         ae:76:00:35:de:83:66:21:7f:28:ab:c7:31:79:06:8b:9a:be:
         2a:a4:fd:f8:65:1a:f9:50:ca:74:73:85:58:2c:b7:91:55:6a:
         67:38:30:22:a4:d3:e9:72:96:c3:95:4f:cf:8b:e4:f6:4c:18:
         74:30:75:87:7d:17:d0:c1:dd:51:17:f2:93:e1:6c:0e:74:de:
         e5:6d:0f:37:f7:a2:2a:31:b9:71:9c:cd:11:2f:06:c2:71:1a:
         0f:53:0a:41:e2:ab:b5:34:3f:57:cf:dd:e4:23:d4:6b:ef:dc:
         be:97:25:b5:3f:fa:07:51:81:85:06:82:c8:c2:fa:d5:43:44:
         44:67:9c:b8:5a:08:e4:d7:51:1b:0f:23:8b:14:d7:b8:47:a2:
         06:54:39:17:d6:a4:46:18:07:1a:69:fb:01:14:bf:c7:fd:cb:
         78:7e:7c:a4:d7:b0:0f:97:48:f3:a9:64:88:16:5e:da:e5:c1:
         38:8b:ad:14:d4:46:f7:c7:04:50:c5:2d:99:7d:e3:3e:f5:1f:
         13:cb:d7:1a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZPg/BjxyR5G4f4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
MTQwMzNiYjktZjIzNy00OGJlLWI0NzktMmRhMzk2NjNiYjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVaDmfWgpsoLj5gIdUQSP77LaUes6nwQlTL5
wEbavUQ7YuzXONQyvXVIRni0i47Q7OEzf84nFR45V0tRU7Wo7B8ic6AYSd2IpnAn
qFj06QjQqc/m7cL9B8vWu8kpZq7WxNdR0vhdwH0kqNfhQXQRo5z6O3gepvYGBwzF
eDtMuSNe3Uftog6uea3XbFmAPKFEMcNbZwXCEhsm5zC8SEEXvYiFkqPcfqO6b7hH
nM+guOhP+wFfG3Jj90XLCa1AZMn084j7XBEF7g1riW+1fknu7do/Rc4z+bYgEqDs
FORPNLyiD2TCnG4MGzxEWwPUDhDxSqAdCwPKdOXYtm5heSVz7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHQCksytoBkyyRVUR64aXJlazNG8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMWM0ZjNjZmMtMDcwYS0z
NGY1LWJmYzEtYWE4ZTRhODdiOTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaP1mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFbp6PE4MkcrmzKRflCUDX45UUnUEopobTG4RNVBtsJZJrhJJ89LHJn6
5ta/PkMP8YzgXR0kIq52ADXeg2YhfyirxzF5Bouaviqk/fhlGvlQynRzhVgst5FV
amc4MCKk0+lylsOVT8+L5PZMGHQwdYd9F9DB3VEX8pPhbA503uVtDzf3oioxuXGc
zREvBsJxGg9TCkHiq7U0P1fP3eQj1Gvv3L6XJbU/+gdRgYUGgsjC+tVDRERnnLha
COTXURsPI4sU17hHogZUORfWpEYYBxpp+wEUv8f9y3h+fKTXsA+XSPOpZIgWXtrl
wTiLrRTURvfHBFDFLZl94z71HxPL1xo=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:37:20 2025 by rpki-client