Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/59251d6b-7942-34b3-9ee0-07bdcf7f7c2d.roa
File:                     59251d6b-7942-34b3-9ee0-07bdcf7f7c2d.roa (raw, json)
Hash identifier:          08P2KHyTcpT2u77fR0KLd7m3xXcO/UZM+W0JzZscmcg=
Subject key identifier:   F2:C8:D7:E5:5A:D7:7E:B8:36:D4:6A:4F:48:82:C0:87:16:DA:EE:C6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849D164F998D9DBE8EA742637C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/59251d6b-7942-34b3-9ee0-07bdcf7f7c2d.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     18779
IP address blocks:        104.253.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:f9:98:d9:db:e8:ea:74:26:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=1fd29a17-6039-49c9-bd3e-dca51b3ef3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:bd:6f:38:ca:5e:81:a6:4d:c8:68:0c:4d:
                    81:21:73:e2:bd:26:dc:56:cc:67:ec:8d:c8:60:48:
                    c5:73:ed:6e:0d:6e:f7:8a:b7:7b:7b:ff:9a:5d:51:
                    c6:f2:05:de:be:48:45:ac:e5:c6:54:ea:64:de:51:
                    e2:60:65:33:f1:44:bd:65:cf:ce:b3:68:f6:6a:84:
                    00:f8:8a:a5:e4:ad:f8:74:23:53:87:7e:c3:42:fa:
                    58:a5:39:0d:17:4e:0e:38:e9:d1:57:6f:86:7b:69:
                    19:89:fc:51:ea:44:78:33:06:54:73:ec:4d:a2:a5:
                    08:d3:ad:96:93:bc:f1:bf:0c:5d:16:81:7a:49:d9:
                    91:c3:c3:65:aa:81:fd:93:77:fd:05:bf:5e:31:b6:
                    cc:e1:c5:59:9b:13:08:1a:50:d7:c8:a7:6b:a3:ff:
                    8c:6d:86:83:78:b0:a6:b9:4f:87:bf:74:e7:17:a7:
                    ff:7a:5c:80:a0:a3:1d:ef:d0:7f:2a:0f:1e:46:37:
                    76:27:e0:f1:2a:a5:63:9d:7d:0e:40:28:91:79:97:
                    a2:9c:bd:56:c2:b0:fb:22:3e:32:fb:61:87:31:90:
                    50:71:c5:af:88:4d:d6:c8:06:b0:de:11:ff:ae:82:
                    10:a7:2b:05:bc:f1:48:00:41:4b:5f:7c:aa:64:d1:
                    1f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C8:D7:E5:5A:D7:7E:B8:36:D4:6A:4F:48:82:C0:87:16:DA:EE:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/59251d6b-7942-34b3-9ee0-07bdcf7f7c2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:62:d0:d9:8f:18:84:be:38:95:42:24:8d:1a:7d:e9:77:83:
         23:c4:f3:84:e8:ef:85:ca:42:24:95:b8:4f:a8:34:72:f7:4b:
         1d:b8:31:44:ec:03:9a:d0:da:72:e9:13:b1:dc:1b:96:b2:fd:
         fd:84:b4:92:0f:8f:55:d5:a9:52:e8:65:6a:52:e1:24:9b:ec:
         07:2c:52:35:ed:54:4c:45:ed:bd:af:27:21:ba:fc:2b:08:5a:
         d3:0f:19:89:03:65:95:86:9c:18:a8:37:42:0e:98:9f:d7:98:
         1e:eb:53:7c:c8:83:34:33:cd:b7:8c:8c:4c:68:fa:5d:ac:b3:
         6b:53:80:e0:18:dd:87:91:7c:6b:f6:8e:b7:ea:39:64:96:6c:
         00:f6:27:95:6e:60:63:8b:0f:31:0e:9a:8a:55:a1:57:a1:45:
         72:7f:64:9b:16:f4:86:bd:c9:83:53:43:37:24:d4:9b:ac:33:
         29:96:c9:58:77:09:9a:f8:9f:f2:76:6a:5d:28:5f:22:a5:db:
         0b:d4:10:d3:2b:38:5b:07:a0:67:48:13:f7:3c:9a:df:37:35:
         1a:21:3d:db:ab:8b:10:3f:aa:0b:87:d2:76:92:c0:a0:b7:cc:
         4c:64:c5:36:eb:cb:d7:de:39:9b:07:62:99:eb:e1:8d:f8:76:
         ff:e2:31:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZPmY2dvo6nQmN8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
MWZkMjlhMTctNjAzOS00OWM5LWJkM2UtZGNhNTFiM2VmM2U1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+W9bzjKXoGmTchoDE2BIXPivSbcVsxn7I3I
YEjFc+1uDW73ird7e/+aXVHG8gXevkhFrOXGVOpk3lHiYGUz8US9Zc/Os2j2aoQA
+Iql5K34dCNTh37DQvpYpTkNF04OOOnRV2+Ge2kZifxR6kR4MwZUc+xNoqUI062W
k7zxvwxdFoF6SdmRw8NlqoH9k3f9Bb9eMbbM4cVZmxMIGlDXyKdro/+MbYaDeLCm
uU+Hv3TnF6f/elyAoKMd79B/Kg8eRjd2J+DxKqVjnX0OQCiReZeinL1WwrD7Ij4y
+2GHMZBQccWviE3WyAaw3hH/roIQpysFvPFIAEFLX3yqZNEf+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPLI1+Va1364NtRqT0iCwIcW2u7GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTkyNTFkNmItNzk0Mi0z
NGIzLTllZTAtMDdiZGNmN2Y3YzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaP28MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZi0NmPGIS+OJVCJI0afel3gyPE84To74XKQiSVuE+oNHL3Sx24MUTs
A5rQ2nLpE7HcG5ay/f2EtJIPj1XVqVLoZWpS4SSb7AcsUjXtVExF7b2vJyG6/CsI
WtMPGYkDZZWGnBioN0IOmJ/XmB7rU3zIgzQzzbeMjExo+l2ss2tTgOAY3YeRfGv2
jrfqOWSWbAD2J5VuYGOLDzEOmopVoVehRXJ/ZJsW9Ia9yYNTQzck1JusMymWyVh3
CZr4n/J2al0oXyKl2wvUENMrOFsHoGdIE/c8mt83NRohPdurixA/qguH0naSwKC3
zExkxTbry9feOZsHYpnr4Y34dv/iMfk=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:49:24 2025 by rpki-client