Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9ae63486-f0ee-3501-a21d-8cbb8f19c1d0.roa
File:                     9ae63486-f0ee-3501-a21d-8cbb8f19c1d0.roa (raw, json)
Hash identifier:          gvua/IZkagpcGS4RtvZ7wvQsEDBPLT2O0JinBQ0ovN4=
Subject key identifier:   82:22:E7:2D:29:41:CA:E5:5E:AC:2A:5A:3B:26:C1:6B:FE:95:DA:53
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584950F96EB4775E0EAEDF3F7800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9ae63486-f0ee-3501-a21d-8cbb8f19c1d0.roa
Signing time:             Wed 26 Mar 2025 13:00:53 +0000
ROA not before:           Wed 26 Mar 2025 13:00:53 +0000
ROA not after:            Tue 24 Jun 2025 13:00:53 +0000
asID:                     57043
IP address blocks:        104.253.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:50:f9:6e:b4:77:5e:0e:ae:df:3f:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 26 13:00:53 2025 GMT
            Not After : Jun 24 13:00:53 2025 GMT
        Subject: CN=09571752-e15e-4ca4-9bc0-214fda0d3c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9d:8f:31:4e:c9:c3:72:31:b6:0c:fb:6b:d4:
                    13:f2:85:f2:20:d6:61:bb:66:16:c6:45:38:04:23:
                    7b:09:20:fe:04:01:94:9d:9e:cb:37:f8:4b:d5:31:
                    d4:4a:fe:85:2f:d1:7f:bd:75:5e:7c:cd:f6:43:3d:
                    f3:c4:2f:89:29:3f:4e:c5:84:df:51:a3:cd:f7:0b:
                    bb:3e:4c:85:87:88:84:62:ee:58:cc:76:be:ec:28:
                    08:1f:57:2d:93:b8:7d:b3:c1:05:f5:6e:b6:b7:66:
                    b8:60:0b:85:b3:97:f8:70:26:ed:1c:59:ca:d6:92:
                    03:cf:2f:8f:e8:de:99:46:4d:55:90:31:5c:5f:ce:
                    85:d6:8f:12:e4:f7:ed:2b:85:75:51:5b:c3:ee:aa:
                    53:9b:c6:fb:fd:aa:ca:26:4f:82:ad:d3:81:0c:01:
                    bc:97:5e:61:c5:ca:5f:28:06:0f:5a:f2:64:c2:42:
                    a1:00:5f:ca:4e:af:59:3c:8c:a0:3d:58:ee:17:40:
                    c0:d7:df:d8:9f:52:a9:59:7e:dd:23:d6:62:28:44:
                    ee:5f:0f:66:ca:99:00:19:c2:6b:76:98:55:c8:e4:
                    ec:0c:8f:1f:a4:1c:98:35:2f:e1:16:57:0e:b1:d2:
                    9b:43:c1:f5:c8:24:fc:4c:e5:6d:0c:b7:de:bc:00:
                    54:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:22:E7:2D:29:41:CA:E5:5E:AC:2A:5A:3B:26:C1:6B:FE:95:DA:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9ae63486-f0ee-3501-a21d-8cbb8f19c1d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:da:79:c1:e3:7a:9d:71:c3:98:c9:2b:8f:bc:c2:cb:b1:fc:
         3a:aa:56:6d:ad:24:42:b8:43:80:7e:ad:cd:6c:fd:01:cf:74:
         cb:ff:88:db:98:c8:d9:15:55:66:cc:0a:c0:c3:28:ff:99:46:
         65:ba:74:8b:5c:af:de:56:e1:e8:98:7a:37:17:74:ba:f8:d5:
         db:db:f7:0c:f3:3b:59:33:6b:66:56:0e:57:9d:5d:3c:5a:06:
         c7:b4:54:c8:f5:5b:e8:2a:8d:87:ab:be:00:eb:97:ac:f9:d9:
         92:81:1d:42:d0:f6:b7:f3:dc:1d:5f:dc:92:8b:5e:13:72:31:
         f6:fe:9f:28:ab:97:de:25:32:14:6a:c9:ce:88:55:02:b7:68:
         71:5d:74:3c:b7:15:71:b7:9e:d6:7d:e1:03:61:f5:a0:97:0c:
         36:3e:47:f3:6c:f9:b0:22:ca:2e:f1:7f:49:bb:a3:e9:87:12:
         9c:42:6c:b9:16:d9:3c:0e:9c:7a:61:ba:e2:3d:fa:a8:ef:c3:
         d8:da:61:39:e5:b3:ca:27:e0:c0:a1:06:5b:62:17:2b:a7:03:
         b6:5a:ed:9d:f1:40:24:3e:3f:24:b9:98:13:53:57:db:44:91:
         48:e5:a3:e6:1f:a8:53:a4:3f:f2:7d:4f:dd:8f:c2:64:d0:d2:
         8a:57:08:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+W60d14Ort8/eAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk
MDk1NzE3NTItZTE1ZS00Y2E0LTliYzAtMjE0ZmRhMGQzYzMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ2PMU7Jw3Ixtgz7a9QT8oXyINZhu2YWxkU4
BCN7CSD+BAGUnZ7LN/hL1THUSv6FL9F/vXVefM32Qz3zxC+JKT9OxYTfUaPN9wu7
PkyFh4iEYu5YzHa+7CgIH1ctk7h9s8EF9W62t2a4YAuFs5f4cCbtHFnK1pIDzy+P
6N6ZRk1VkDFcX86F1o8S5PftK4V1UVvD7qpTm8b7/arKJk+CrdOBDAG8l15hxcpf
KAYPWvJkwkKhAF/KTq9ZPIygPVjuF0DA19/Yn1KpWX7dI9ZiKETuXw9mypkAGcJr
dphVyOTsDI8fpByYNS/hFlcOsdKbQ8H1yCT8TOVtDLfevABUWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIIi5y0pQcrlXqwqWjsmwWv+ldpTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOWFlNjM0ODYtZjBlZS0z
NTAxLWEyMWQtOGNiYjhmMTljMWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHaecHjep1xw5jJK4+8wsux/DqqVm2tJEK4Q4B+rc1s/QHPdMv/iNuY
yNkVVWbMCsDDKP+ZRmW6dItcr95W4eiYejcXdLr41dvb9wzzO1kza2ZWDledXTxa
Bse0VMj1W+gqjYervgDrl6z52ZKBHULQ9rfz3B1f3JKLXhNyMfb+nyirl94lMhRq
yc6IVQK3aHFddDy3FXG3ntZ94QNh9aCXDDY+R/Ns+bAiyi7xf0m7o+mHEpxCbLkW
2TwOnHphuuI9+qjvw9jaYTnls8on4MChBltiFyunA7Za7Z3xQCQ+PyS5mBNTV9tE
kUjlo+YfqFOkP/J9T92PwmTQ0opXCI8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:29:44 2025 by rpki-client