Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2b6454f-7686-3079-ab8c-554b7d8e0ec8.roa
File:                     d2b6454f-7686-3079-ab8c-554b7d8e0ec8.roa (raw, json)
Hash identifier:          VtPlZaFvhYZK5mE4pHCGQJI7zu1EqF1Mgpk/kwQ7gSQ=
Subject key identifier:   56:61:3A:51:96:DE:E2:41:FA:3C:20:2E:74:82:52:24:5D:4F:5B:0E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858488DC9148BA4C40898B4F4E160
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2b6454f-7686-3079-ab8c-554b7d8e0ec8.roa
Signing time:             Wed 15 Jan 2025 15:01:01 +0000
ROA not before:           Wed 15 Jan 2025 15:01:01 +0000
ROA not after:            Tue 15 Apr 2025 14:01:01 +0000
asID:                     202015
IP address blocks:        104.252.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8d:c9:14:8b:a4:c4:08:98:b4:f4:e1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 15 15:01:01 2025 GMT
            Not After : Apr 15 14:01:01 2025 GMT
        Subject: CN=38fdb322-66b1-4c86-a231-e30822080905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fc:2c:1d:41:32:2f:34:96:01:3a:58:34:9c:
                    71:e9:9b:6d:58:91:6f:8c:aa:46:ac:28:f4:2e:45:
                    ba:fe:ba:bd:90:74:85:4a:d1:47:74:d6:75:12:e4:
                    d2:72:fb:b4:82:6c:75:4f:77:06:f4:47:a9:fd:fd:
                    5f:4a:8a:74:70:8d:95:03:af:cd:89:55:02:28:2c:
                    92:72:cb:83:b7:c4:8f:3f:d3:4d:8b:f1:c6:1d:67:
                    15:ab:67:32:3e:b8:a5:44:e2:69:56:9b:01:98:0f:
                    d3:8d:9b:e9:56:99:9b:80:4d:14:91:9e:38:f5:5c:
                    59:8a:4b:bc:ba:cd:e7:11:fd:a9:a2:32:80:e3:e3:
                    64:ea:77:94:00:fa:59:0d:11:f9:8a:e5:f4:42:6a:
                    90:9b:cc:03:10:4c:a1:db:10:cd:94:23:2b:24:35:
                    4b:68:d2:3f:98:4f:b1:81:96:cb:2d:f9:00:ad:db:
                    90:70:83:58:00:b5:0f:43:4c:f8:ef:2f:eb:8c:83:
                    83:f9:75:a4:6c:89:5b:07:21:7b:24:bd:2f:04:33:
                    9c:96:d1:fc:9c:39:ef:1b:b1:9e:05:1e:60:90:91:
                    32:63:34:dd:1f:7f:b1:5f:54:4f:52:4f:75:c4:9d:
                    f3:67:50:e2:6a:eb:cc:0f:8a:cd:21:1c:6a:5f:89:
                    88:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:61:3A:51:96:DE:E2:41:FA:3C:20:2E:74:82:52:24:5D:4F:5B:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d2b6454f-7686-3079-ab8c-554b7d8e0ec8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:a9:a5:86:38:e8:c3:14:b2:39:8f:72:96:cd:9e:ed:38:d7:
         34:66:ca:d8:e4:8c:3e:7d:d6:42:7d:33:29:d7:a4:f9:05:d4:
         34:5c:73:ed:68:da:af:49:c9:f3:23:7f:96:6f:86:00:f4:0e:
         cd:d3:ab:5b:9d:f6:f1:5c:de:c6:25:48:d7:05:c6:20:01:57:
         f7:87:55:51:8f:4e:fa:c8:26:f5:32:f8:27:7a:ac:58:d6:0b:
         80:61:3b:35:f0:4e:d0:b4:b8:e2:b6:f2:71:bd:3a:8c:a9:cd:
         73:13:c3:8d:cf:ee:f9:49:bb:d1:09:fe:19:31:a8:ba:69:6d:
         c3:29:f9:f1:08:ab:4d:84:4a:a9:89:95:30:a5:d1:f3:f4:f8:
         53:bb:4c:d3:c6:37:e9:22:c4:7d:2c:e9:7b:02:c6:32:b2:37:
         32:d9:0f:bd:cd:6f:eb:ae:21:44:a6:75:ff:ec:db:f0:57:e7:
         79:1a:03:9c:fe:aa:ca:8e:7f:b0:77:28:bd:de:47:87:00:52:
         e3:e9:05:ad:06:d6:9f:c1:6e:59:d8:30:e4:ea:48:17:2e:b9:
         44:15:b8:ff:14:22:05:37:f7:4f:39:7f:c6:f3:d5:68:53:d3:
         37:da:da:97:88:c3:9c:0d:84:95:be:54:ad:f9:56:87:ba:6e:
         f0:f5:8e:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiNyRSLpMQImLT04WAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDExNTE1MDEwMVoXDTI1MDQxNTE0MDEwMVowLzEtMCsGA1UEAxMk
MzhmZGIzMjItNjZiMS00Yzg2LWEyMzEtZTMwODIyMDgwOTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvwsHUEyLzSWATpYNJxx6ZttWJFvjKpGrCj0
LkW6/rq9kHSFStFHdNZ1EuTScvu0gmx1T3cG9Eep/f1fSop0cI2VA6/NiVUCKCyS
csuDt8SPP9NNi/HGHWcVq2cyPrilROJpVpsBmA/TjZvpVpmbgE0UkZ449VxZiku8
us3nEf2pojKA4+Nk6neUAPpZDRH5iuX0QmqQm8wDEEyh2xDNlCMrJDVLaNI/mE+x
gZbLLfkArduQcINYALUPQ0z47y/rjIOD+XWkbIlbByF7JL0vBDOcltH8nDnvG7Ge
BR5gkJEyYzTdH3+xX1RPUk91xJ3zZ1DiauvMD4rNIRxqX4mI2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFZhOlGW3uJB+jwgLnSCUiRdT1sOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDJiNjQ1NGYtNzY4Ni0z
MDc5LWFiOGMtNTU0YjdkOGUwZWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPwlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADappYY46MMUsjmPcpbNnu041zRmytjkjD591kJ9MynXpPkF1DRcc+1o
2q9JyfMjf5ZvhgD0Ds3Tq1ud9vFc3sYlSNcFxiABV/eHVVGPTvrIJvUy+Cd6rFjW
C4BhOzXwTtC0uOK28nG9OoypzXMTw43P7vlJu9EJ/hkxqLppbcMp+fEIq02ESqmJ
lTCl0fP0+FO7TNPGN+kixH0s6XsCxjKyNzLZD73Nb+uuIUSmdf/s2/BX53kaA5z+
qsqOf7B3KL3eR4cAUuPpBa0G1p/BblnYMOTqSBcuuUQVuP8UIgU39085f8bz1WhT
0zfa2peIw5wNhJW+VK35Voe6bvD1jqc=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:07 2025 by rpki-client