Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2de8598f-ce89-372f-a903-5a25b9114c8d.roa
File:                     2de8598f-ce89-372f-a903-5a25b9114c8d.roa (raw, json)
Hash identifier:          L1sejt00rKg24eMSZyYEpmM4GXm6cPVaskY6HvHGs+o=
Subject key identifier:   C8:39:B1:7E:F4:66:A1:C4:6E:3B:E7:15:CC:45:C5:21:33:B3:D5:2E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AAB26708ECEBCAEF11386D180
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2de8598f-ce89-372f-a903-5a25b9114c8d.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     397373
IP address blocks:        104.253.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:70:8e:ce:bc:ae:f1:13:86:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=d343e716-68c8-4567-b10f-a1e7d1ce3f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c0:39:01:d2:f0:38:de:54:85:7f:0a:15:41:
                    38:5d:cb:90:59:27:3c:75:c1:cd:69:7b:bf:c3:32:
                    47:be:c3:4f:57:99:42:90:37:45:f8:15:3c:9d:86:
                    e6:93:90:94:6d:8e:a3:99:6d:87:fa:13:e4:cb:7e:
                    f1:d1:6e:f3:fb:e7:ce:c4:82:09:d8:0b:86:af:63:
                    7c:8a:a3:9f:60:e3:fa:b4:2e:98:57:a2:ea:bd:aa:
                    e6:87:96:2b:30:30:7e:34:55:f1:5f:a6:14:5f:74:
                    1b:28:26:e5:0c:36:ce:c5:02:c0:29:94:d9:8d:0f:
                    b1:5b:eb:06:e1:12:38:d9:ff:f3:4b:69:30:d5:fe:
                    d3:4c:b6:f4:19:11:96:a7:e6:48:68:6c:b5:e6:fd:
                    c9:bb:bc:61:1c:b0:d1:ac:1c:36:d4:f3:9c:8b:c5:
                    7f:59:e3:26:31:aa:98:8c:40:ec:eb:ed:0d:66:d4:
                    fd:61:68:fc:85:cc:12:37:3f:d8:5e:ff:bd:1e:f0:
                    3c:92:3a:e3:f1:32:6d:82:eb:b1:bd:3a:98:c2:7c:
                    9b:f7:95:79:38:50:c3:5f:e1:0d:3e:01:3c:f6:08:
                    69:e3:7f:88:53:a5:b3:54:b2:c0:6e:8a:ae:ed:89:
                    2b:04:4e:0f:f4:71:ab:23:44:98:26:ea:35:a2:60:
                    59:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:39:B1:7E:F4:66:A1:C4:6E:3B:E7:15:CC:45:C5:21:33:B3:D5:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2de8598f-ce89-372f-a903-5a25b9114c8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:5b:a9:0f:96:71:8d:30:80:52:38:e1:fb:ee:aa:38:3a:dd:
         93:c2:6c:54:8e:7c:ac:b2:34:de:1c:48:5f:7b:e6:6d:f7:37:
         0c:28:79:35:46:72:c8:14:41:1a:f8:62:df:fd:be:11:9b:4c:
         ab:d6:78:b7:1f:ff:1c:7f:1a:ba:53:7c:2d:58:1c:1d:14:c5:
         ec:d3:36:90:32:ce:6b:7f:d4:4e:fe:34:2e:4e:3b:10:a2:ef:
         c4:0a:4a:f9:3f:f5:36:31:2c:fe:53:68:51:b1:4e:de:5f:df:
         53:22:63:3b:aa:26:0e:fd:51:9f:5c:67:3b:aa:f6:6e:84:81:
         b4:64:95:26:31:68:ab:12:4c:e1:16:71:c8:f6:25:35:50:f4:
         12:57:d4:a3:e3:64:d2:78:b0:0d:bb:c5:78:64:ac:a7:0f:b7:
         d6:b1:c3:5b:e4:a8:9b:fc:bf:28:17:e9:51:ca:cd:2f:98:2b:
         08:8f:c8:a5:75:81:65:d4:05:3b:44:ae:78:28:cc:c9:55:fc:
         57:ef:9d:bd:e3:af:36:77:78:69:b0:07:e3:20:80:6f:a7:7f:
         be:69:ff:08:c1:bc:bc:01:b6:43:f6:64:62:41:10:d3:28:f4:
         85:ca:84:b3:9d:3d:e5:4b:b2:08:6c:e1:a6:47:3c:00:cc:bc:
         66:95:98:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJnCOzryu8ROG0YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk
ZDM0M2U3MTYtNjhjOC00NTY3LWIxMGYtYTFlN2QxY2UzZjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8A5AdLwON5UhX8KFUE4XcuQWSc8dcHNaXu/
wzJHvsNPV5lCkDdF+BU8nYbmk5CUbY6jmW2H+hPky37x0W7z++fOxIIJ2AuGr2N8
iqOfYOP6tC6YV6Lqvarmh5YrMDB+NFXxX6YUX3QbKCblDDbOxQLAKZTZjQ+xW+sG
4RI42f/zS2kw1f7TTLb0GRGWp+ZIaGy15v3Ju7xhHLDRrBw21POci8V/WeMmMaqY
jEDs6+0NZtT9YWj8hcwSNz/YXv+9HvA8kjrj8TJtguuxvTqYwnyb95V5OFDDX+EN
PgE89ghp43+IU6WzVLLAboqu7YkrBE4P9HGrI0SYJuo1omBZGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMg5sX70ZqHEbjvnFcxFxSEzs9UuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmRlODU5OGYtY2U4OS0z
NzJmLWE5MDMtNWEyNWI5MTE0YzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP2KMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC1bqQ+WcY0wgFI44fvuqjg63ZPCbFSOfKyyNN4cSF975m33NwwoeTVG
csgUQRr4Yt/9vhGbTKvWeLcf/xx/GrpTfC1YHB0UxezTNpAyzmt/1E7+NC5OOxCi
78QKSvk/9TYxLP5TaFGxTt5f31MiYzuqJg79UZ9cZzuq9m6EgbRklSYxaKsSTOEW
ccj2JTVQ9BJX1KPjZNJ4sA27xXhkrKcPt9axw1vkqJv8vygX6VHKzS+YKwiPyKV1
gWXUBTtErngozMlV/Ffvnb3jrzZ3eGmwB+MggG+nf75p/wjBvLwBtkP2ZGJBENMo
9IXKhLOdPeVLsghs4aZHPADMvGaVmME=
-----END CERTIFICATE-----
Generated at Wed Jul 30 12:05:52 2025 by rpki-client