Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/314143ae-eccf-3ab5-b8fa-0f000854bfd0.roa
File:                     314143ae-eccf-3ab5-b8fa-0f000854bfd0.roa (raw, json)
Hash identifier:          bu1WOBXdD/uN3GvhMxKoH8rmYz/8P3PzQ5ECGZHqg3g=
Subject key identifier:   56:BE:25:43:BD:72:F0:0A:7B:AA:85:BD:33:4C:01:E8:29:84:F4:90
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858492E13B38427E6EB56AB679E80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/314143ae-eccf-3ab5-b8fa-0f000854bfd0.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     396356
IP address blocks:        104.252.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:b3:84:27:e6:eb:56:ab:67:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=ef306f2b-a7f8-4920-ae52-ff576eaa922b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8e:3e:0a:96:79:c8:22:de:24:3a:60:39:ee:
                    58:f6:3b:3d:8b:44:6f:b5:82:1c:cf:12:22:7a:b8:
                    4c:3a:dd:ab:22:4e:9e:ec:76:70:20:9e:13:b2:9e:
                    29:29:49:1e:a8:13:99:00:0e:9b:72:14:0e:c8:08:
                    b5:5d:7d:92:b6:98:ab:e7:db:0f:4d:99:de:5b:ab:
                    b9:b2:1d:a1:b6:6d:70:18:ed:dd:1a:98:a0:ce:2d:
                    f1:34:d2:91:f6:f3:39:ae:ef:c6:2f:5d:cf:98:1e:
                    b9:92:51:77:4e:13:f3:62:e7:2d:28:be:7e:92:94:
                    48:63:f6:1d:d0:2b:3f:0a:3e:71:2a:3f:96:89:9a:
                    36:55:b7:54:4e:88:6a:a6:9b:9e:8c:90:83:af:b9:
                    67:9f:6d:67:5b:e8:81:1c:15:e3:91:b7:c6:c9:39:
                    dc:dd:e8:5b:a7:f2:d9:bd:84:7b:87:b2:85:6b:9e:
                    d4:43:c6:8c:15:95:5e:ad:33:ca:f7:53:3c:de:f6:
                    f6:51:56:6b:1b:a8:76:91:64:71:81:85:5f:2e:be:
                    c5:5c:d4:8b:fd:71:6a:06:8b:53:2f:74:f3:8e:a3:
                    f0:6c:69:6c:fc:2d:9e:f1:df:7d:d9:25:e1:95:98:
                    af:55:e5:07:93:af:b4:e0:b2:70:ce:08:e5:18:c6:
                    75:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BE:25:43:BD:72:F0:0A:7B:AA:85:BD:33:4C:01:E8:29:84:F4:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/314143ae-eccf-3ab5-b8fa-0f000854bfd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d8:5e:77:11:8d:f7:70:31:1b:59:24:95:95:69:97:ea:98:
         ad:7c:5e:0e:67:38:7c:09:e9:a5:40:af:c9:82:2a:59:1d:1e:
         5c:7a:d5:11:3d:43:43:26:e1:cb:42:ac:fa:d4:34:5c:45:11:
         d4:c7:b5:7a:ac:26:ea:4c:3d:e6:dc:c6:d9:57:8b:40:cd:c0:
         17:4b:c6:af:95:23:8c:b8:21:21:22:77:a4:bd:27:c3:de:54:
         46:61:16:53:45:9f:58:b8:97:7b:37:33:3c:68:28:d0:ca:93:
         94:7a:8f:dd:18:26:f5:85:01:99:28:39:0e:0d:94:ac:ed:44:
         cb:cd:f1:39:12:44:da:95:3c:28:3e:58:42:5c:b5:52:93:a4:
         1f:e9:40:95:b0:78:65:1d:c8:2b:1d:32:78:b1:a1:a9:69:04:
         e2:a4:7a:28:71:f1:b6:67:73:e0:c8:84:eb:0c:10:1f:bc:87:
         c4:c0:c3:6d:cf:7b:1a:cc:e5:10:36:4a:e7:dd:7b:db:77:65:
         ff:38:b5:d1:27:ec:c9:62:6f:a1:00:25:d3:d6:e2:88:73:b5:
         e7:a7:bf:d5:42:fc:16:16:1d:9a:0a:9f:fc:22:5f:10:5d:5f:
         1d:67:dc:9b:12:52:cd:dc:81:1b:4a:df:e9:9f:f3:2c:d1:92:
         16:ea:bf:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE7OEJ+brVqtnnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk
ZWYzMDZmMmItYTdmOC00OTIwLWFlNTItZmY1NzZlYWE5MjJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI4+CpZ5yCLeJDpgOe5Y9js9i0RvtYIczxIi
erhMOt2rIk6e7HZwIJ4Tsp4pKUkeqBOZAA6bchQOyAi1XX2Stpir59sPTZneW6u5
sh2htm1wGO3dGpigzi3xNNKR9vM5ru/GL13PmB65klF3ThPzYuctKL5+kpRIY/Yd
0Cs/Cj5xKj+WiZo2VbdUTohqppuejJCDr7lnn21nW+iBHBXjkbfGyTnc3ehbp/LZ
vYR7h7KFa57UQ8aMFZVerTPK91M83vb2UVZrG6h2kWRxgYVfLr7FXNSL/XFqBotT
L3TzjqPwbGls/C2e8d992SXhlZivVeUHk6+04LJwzgjlGMZ1aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFa+JUO9cvAKe6qFvTNMAegphPSQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzE0MTQzYWUtZWNjZi0z
YWI1LWI4ZmEtMGYwMDA4NTRiZmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPy8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIzYXncRjfdwMRtZJJWVaZfqmK18Xg5nOHwJ6aVAr8mCKlkdHlx61RE9
Q0Mm4ctCrPrUNFxFEdTHtXqsJupMPebcxtlXi0DNwBdLxq+VI4y4ISEid6S9J8Pe
VEZhFlNFn1i4l3s3MzxoKNDKk5R6j90YJvWFAZkoOQ4NlKztRMvN8TkSRNqVPCg+
WEJctVKTpB/pQJWweGUdyCsdMnixoalpBOKkeihx8bZnc+DIhOsMEB+8h8TAw23P
exrM5RA2Sufde9t3Zf84tdEn7Mlib6EAJdPW4ohzteenv9VC/BYWHZoKn/wiXxBd
Xx1n3JsSUs3cgRtK3+mf8yzRkhbqv8U=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:41 2025 by rpki-client