Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4527ed3e-ad93-30d1-b3d3-e76dfd13df87.roa
File:                     4527ed3e-ad93-30d1-b3d3-e76dfd13df87.roa (raw, json)
Hash identifier:          1AFWGJmBFX9/OVRuYEgU/drLNmNhpheIOnnQJEoFEXg=
Subject key identifier:   94:96:BD:B7:B7:9A:4C:24:66:87:88:FF:E7:3B:43:0C:65:B1:E9:C5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849D164FA45440751CF028DB800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4527ed3e-ad93-30d1-b3d3-e76dfd13df87.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     18779
IP address blocks:        104.253.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:fa:45:44:07:51:cf:02:8d:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=2a1802e2-5326-48d6-9999-f5bdac1c5020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b8:52:87:fe:a4:26:bd:38:ad:e4:1b:89:6c:
                    e0:87:15:1a:59:2c:a3:a9:70:41:f0:86:d1:6a:2f:
                    90:40:42:b6:36:55:56:08:e6:23:26:13:3a:8d:fe:
                    4b:0c:c0:2f:46:d5:f5:fb:c5:fb:0f:35:cc:24:b1:
                    48:ae:5a:2e:59:ab:e2:47:a3:8d:04:e9:1c:12:45:
                    da:1b:8e:1d:12:d8:0d:b9:6a:a7:48:6f:ed:13:13:
                    55:e7:8f:33:00:dc:92:04:e6:6a:93:75:f0:a2:9e:
                    9d:24:08:fe:69:09:5e:29:cf:00:eb:49:f4:35:b9:
                    7c:96:6d:26:91:ec:b4:8f:39:63:d3:33:17:c1:5e:
                    ac:fa:90:0c:f4:5b:5e:18:cb:fe:b2:e5:d9:91:db:
                    f8:71:ce:25:77:09:2b:69:74:fa:5f:0f:bf:71:f3:
                    f1:99:61:86:63:25:54:65:29:99:b0:9c:67:6e:04:
                    8a:8b:e3:cf:08:43:fe:6a:be:c7:3a:8a:49:9f:b7:
                    14:cb:5b:12:c5:b9:cc:d1:d1:c9:f6:64:72:85:2e:
                    e1:89:08:49:85:59:92:14:8e:b8:1f:3a:3c:96:12:
                    4b:cd:2c:2a:04:16:d2:c2:16:21:94:65:e5:5d:b6:
                    d4:22:58:a2:b7:45:09:b0:bc:c9:d0:d2:8d:82:61:
                    03:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:96:BD:B7:B7:9A:4C:24:66:87:88:FF:E7:3B:43:0C:65:B1:E9:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4527ed3e-ad93-30d1-b3d3-e76dfd13df87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:ba:3d:0f:09:7d:a7:0d:11:19:0c:c9:f2:72:8b:6b:ff:63:
         3a:27:d4:c8:82:62:b7:3d:5d:74:b9:df:6b:40:8b:6d:e7:b4:
         67:cf:f0:09:71:78:33:75:18:07:c9:c2:74:c8:83:b4:42:38:
         2a:f2:df:a2:6b:d3:63:63:d2:2f:b3:7a:66:31:6c:23:f7:85:
         cd:a7:41:37:15:49:f5:ea:91:f0:78:08:91:2a:b6:b7:78:16:
         60:82:24:a9:95:74:d1:cf:b7:08:c2:cc:82:a9:8d:5a:89:a8:
         a0:19:ef:e2:7c:ce:e4:65:e4:09:23:cf:03:7c:55:c1:c7:62:
         be:c8:94:a4:df:65:ac:95:8c:5c:8e:7f:28:c0:76:bf:fb:2c:
         e5:8e:85:af:a2:23:f2:45:ec:7b:45:cf:2e:d0:39:0e:43:e7:
         4e:a0:fa:50:a0:f7:8e:14:a8:32:95:15:c4:74:75:ee:c5:4f:
         02:73:3c:10:f2:6b:0c:4e:3d:44:aa:7a:38:58:78:34:07:18:
         45:e6:f7:45:53:99:96:dd:c8:2e:9b:7e:55:3f:d3:69:e2:ba:
         b3:87:27:d7:11:55:ef:50:ec:0b:55:7a:f3:fb:85:cd:b0:aa:
         ff:55:48:a0:3d:07:0a:cb:dc:bc:d4:85:25:76:f9:81:ae:99:
         19:cd:a2:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZPpFRAdRzwKNuAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
MmExODAyZTItNTMyNi00OGQ2LTk5OTktZjViZGFjMWM1MDIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7hSh/6kJr04reQbiWzghxUaWSyjqXBB8IbR
ai+QQEK2NlVWCOYjJhM6jf5LDMAvRtX1+8X7DzXMJLFIrlouWaviR6ONBOkcEkXa
G44dEtgNuWqnSG/tExNV548zANySBOZqk3Xwop6dJAj+aQleKc8A60n0Nbl8lm0m
key0jzlj0zMXwV6s+pAM9FteGMv+suXZkdv4cc4ldwkraXT6Xw+/cfPxmWGGYyVU
ZSmZsJxnbgSKi+PPCEP+ar7HOopJn7cUy1sSxbnM0dHJ9mRyhS7hiQhJhVmSFI64
Hzo8lhJLzSwqBBbSwhYhlGXlXbbUIliit0UJsLzJ0NKNgmEDXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJSWvbe3mkwkZoeI/+c7QwxlsenFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDUyN2VkM2UtYWQ5My0z
MGQxLWIzZDMtZTc2ZGZkMTNkZjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP30MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIy6PQ8JfacNERkMyfJyi2v/Yzon1MiCYrc9XXS532tAi23ntGfP8Alx
eDN1GAfJwnTIg7RCOCry36Jr02Nj0i+zemYxbCP3hc2nQTcVSfXqkfB4CJEqtrd4
FmCCJKmVdNHPtwjCzIKpjVqJqKAZ7+J8zuRl5AkjzwN8VcHHYr7IlKTfZayVjFyO
fyjAdr/7LOWOha+iI/JF7HtFzy7QOQ5D506g+lCg944UqDKVFcR0de7FTwJzPBDy
awxOPUSqejhYeDQHGEXm90VTmZbdyC6bflU/02niurOHJ9cRVe9Q7AtVevP7hc2w
qv9VSKA9BwrL3LzUhSV2+YGumRnNotU=
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:57:13 2025 by rpki-client