Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f0daad8-23c9-30d5-8b7c-a5651eda0167.roa
File:                     5f0daad8-23c9-30d5-8b7c-a5651eda0167.roa (raw, json)
Hash identifier:          SfCPuIOvXJY5SF5c/HZjdSEDpvMoitxz5AHR3b3FnqY=
Subject key identifier:   10:E2:40:70:4E:FC:BB:6D:C5:44:82:43:0C:1F:18:F2:84:37:04:48
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849D164F4E67E0AD2CC1E538500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f0daad8-23c9-30d5-8b7c-a5651eda0167.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     18779
IP address blocks:        104.252.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:f4:e6:7e:0a:d2:cc:1e:53:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=9715e6b8-1205-479e-9101-057e5a369c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6d:e3:6b:54:44:dd:a8:99:fe:fd:33:ab:9a:
                    85:2b:7c:42:a6:fe:19:c5:11:15:81:48:b3:1d:96:
                    2a:ae:27:1e:13:6f:9b:c1:5c:ba:d3:41:d0:f2:25:
                    f4:7d:cb:c2:e0:7f:c5:df:ea:6f:d5:9f:53:86:af:
                    6c:b0:bc:42:cf:a9:29:81:ab:2f:ab:2b:a4:3f:48:
                    25:a7:5b:d3:15:1c:ee:39:db:3c:ac:5a:38:2e:26:
                    d9:ec:a9:c4:86:8d:f6:67:db:69:c4:30:c3:cb:92:
                    7e:93:88:74:5a:eb:27:46:14:e4:6a:43:af:53:29:
                    b5:f1:07:27:10:30:4d:ec:a9:85:11:28:4b:fe:9a:
                    b8:ff:e7:cf:2d:f6:f5:6e:3d:e4:1a:31:03:a3:e4:
                    2b:0e:ad:ba:f8:34:d0:df:63:94:03:d2:48:02:87:
                    08:b5:d8:c8:85:5c:fa:5b:8c:ff:3e:35:9f:f0:f2:
                    8a:18:ef:6a:d8:dd:4c:e9:d9:74:cb:0d:e8:26:ac:
                    9e:e4:56:c5:03:18:72:e1:4a:16:9e:1a:88:7d:e9:
                    92:71:aa:2a:d5:88:23:e7:d1:cd:1e:f1:fc:6c:4e:
                    8f:e4:57:4f:52:48:b3:56:40:40:3f:85:45:da:41:
                    c4:62:57:91:f0:61:32:d5:d1:f6:bd:4a:39:fe:d4:
                    6f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E2:40:70:4E:FC:BB:6D:C5:44:82:43:0C:1F:18:F2:84:37:04:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f0daad8-23c9-30d5-8b7c-a5651eda0167.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ee:27:ab:a9:93:c1:56:53:e8:e7:a6:14:5d:fb:a5:99:46:
         da:6d:f2:18:a1:d1:b9:1e:46:67:34:91:56:74:89:63:0f:ce:
         0a:90:18:e2:ca:d6:5e:5a:c6:ba:20:16:e7:7a:e9:b5:a5:3c:
         fe:d6:9c:00:39:b3:b3:35:48:33:61:d2:73:f8:c6:47:11:62:
         7c:62:dd:27:2d:3a:ae:27:26:be:bc:0b:b3:4b:96:54:a6:d7:
         7a:47:94:76:bf:dc:64:0e:0e:16:3f:d9:fd:94:82:e9:16:a2:
         bb:b7:48:e9:57:b9:74:32:94:13:9c:07:52:6f:7c:71:b8:de:
         1f:50:92:30:3c:ee:05:85:da:2f:0b:1c:0b:af:4b:c1:b0:ff:
         f0:1e:55:db:93:1e:df:24:d2:88:14:40:51:43:ea:f1:e3:f4:
         73:a3:7c:21:ca:75:a6:86:b3:b5:61:44:e5:ab:bd:30:f1:c6:
         2e:42:be:b2:96:f1:4a:8e:84:dc:26:da:56:a9:5a:36:7b:02:
         68:fd:ce:fd:e5:74:45:2a:15:36:31:da:e9:4b:34:ee:b7:8a:
         25:71:62:4b:c4:9b:44:f8:64:36:55:87:a6:57:f9:bc:4d:5d:
         d4:a9:cc:8a:24:4f:1d:a7:1f:7f:40:6b:44:b0:31:dc:c2:94:
         0c:20:ff:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZPTmfgrSzB5ThQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
OTcxNWU2YjgtMTIwNS00NzllLTkxMDEtMDU3ZTVhMzY5YzJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG3ja1RE3aiZ/v0zq5qFK3xCpv4ZxREVgUiz
HZYqriceE2+bwVy600HQ8iX0fcvC4H/F3+pv1Z9Thq9ssLxCz6kpgasvqyukP0gl
p1vTFRzuOds8rFo4LibZ7KnEho32Z9tpxDDDy5J+k4h0WusnRhTkakOvUym18Qcn
EDBN7KmFEShL/pq4/+fPLfb1bj3kGjEDo+QrDq26+DTQ32OUA9JIAocItdjIhVz6
W4z/PjWf8PKKGO9q2N1M6dl0yw3oJqye5FbFAxhy4UoWnhqIfemScaoq1Ygj59HN
HvH8bE6P5FdPUkizVkBAP4VF2kHEYleR8GEy1dH2vUo5/tRvJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBDiQHBO/LttxUSCQwwfGPKENwRIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNWYwZGFhZDgtMjNjOS0z
MGQ1LThiN2MtYTU2NTFlZGEwMTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaPxeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHuJ6upk8FWU+jnphRd+6WZRtpt8hih0bkeRmc0kVZ0iWMPzgqQGOLK
1l5axrogFud66bWlPP7WnAA5s7M1SDNh0nP4xkcRYnxi3SctOq4nJr68C7NLllSm
13pHlHa/3GQODhY/2f2UgukWoru3SOlXuXQylBOcB1JvfHG43h9QkjA87gWF2i8L
HAuvS8Gw//AeVduTHt8k0ogUQFFD6vHj9HOjfCHKdaaGs7VhROWrvTDxxi5CvrKW
8UqOhNwm2lapWjZ7Amj9zv3ldEUqFTYx2ulLNO63iiVxYkvEm0T4ZDZVh6ZX+bxN
XdSpzIokTx2nH39Aa0SwMdzClAwg/wo=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:40:55 2025 by rpki-client