Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d729ec1c-b7b3-3bee-9de9-e4e212b8e9a0.roa
File:                     d729ec1c-b7b3-3bee-9de9-e4e212b8e9a0.roa (raw, json)
Hash identifier:          PtEPC1hCFq/wxi8PLOdOr5MB/b05qLSVSYJ7ONtFzOE=
Subject key identifier:   F0:EE:19:8A:F8:AF:E2:4E:42:D3:4D:49:E1:27:3B:63:72:B3:AB:B6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849D164F3BDF14E7A4EEEE32CA0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d729ec1c-b7b3-3bee-9de9-e4e212b8e9a0.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     18779
IP address blocks:        104.252.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:f3:bd:f1:4e:7a:4e:ee:e3:2c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=341bf914-19fe-4a07-a1b8-2694bb481b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:74:ce:6f:87:dd:97:d0:b6:be:dc:11:26:
                    96:fe:34:32:37:c5:5b:bc:73:e6:d2:8d:dc:bc:82:
                    ef:a0:75:40:a0:d5:d0:61:46:e3:bc:a4:17:4e:bb:
                    f5:18:50:38:fe:fe:79:4f:a9:68:e7:4c:2e:12:b1:
                    b4:cb:81:6c:34:0e:87:8a:2b:b0:03:07:25:77:0e:
                    10:17:b7:1d:53:f4:be:2f:a9:32:87:2c:87:c2:a8:
                    c3:51:90:48:d7:b1:fb:c8:8e:39:6e:5e:a1:6c:30:
                    a5:9e:27:c9:0a:e5:2b:30:e0:f1:cb:78:6d:21:c9:
                    ef:90:67:d9:17:d3:b2:43:53:3e:2a:9d:c7:8c:61:
                    10:40:5f:8c:6f:0f:c8:35:bb:7c:af:bb:e2:14:72:
                    7c:bc:44:b6:bd:d2:b9:a2:cb:ab:68:33:1c:9d:f7:
                    cc:e3:2a:a9:25:f6:71:59:4b:17:d3:89:ef:06:64:
                    23:15:cc:d4:15:19:13:79:f0:22:eb:27:23:c8:ee:
                    ee:a8:44:79:b6:72:ef:aa:5d:a9:25:4f:b8:8c:c0:
                    7e:03:08:0c:ab:18:61:ba:c8:81:25:ce:e5:85:64:
                    83:77:b2:38:58:95:62:98:be:7d:7e:70:8e:74:e9:
                    fe:90:2a:22:e0:db:93:65:f7:4a:a1:c2:7a:99:fd:
                    13:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EE:19:8A:F8:AF:E2:4E:42:D3:4D:49:E1:27:3B:63:72:B3:AB:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d729ec1c-b7b3-3bee-9de9-e4e212b8e9a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:16:4c:47:24:05:fc:f1:17:b2:57:07:26:13:5c:eb:71:cd:
         ca:69:26:a1:78:d7:5e:a2:67:9d:ce:6f:99:e6:89:86:f3:75:
         d2:85:84:2a:2c:69:b6:6a:dc:80:57:49:69:a4:42:84:fb:88:
         d3:65:84:88:60:fd:4f:b8:d1:fa:94:df:8b:cc:6d:e8:10:c1:
         a2:e4:64:fa:b9:91:f3:71:a5:e9:eb:4e:f7:e5:1e:20:4a:f4:
         9b:16:4e:a3:2b:56:66:70:c4:df:a2:ea:c8:b2:13:3d:b2:1c:
         04:8e:66:bd:b4:f3:aa:13:ec:4e:7a:70:0e:2b:c4:64:95:7d:
         e4:20:e2:ef:dd:60:6a:36:3b:cf:2c:58:8c:64:c5:c9:25:14:
         4e:51:a1:2f:71:11:cd:57:76:14:bd:25:21:f8:23:80:c9:b6:
         3a:cf:37:76:4d:47:df:a3:1a:90:f7:63:02:7f:6a:5e:b6:29:
         87:d9:f3:bb:83:c2:f6:9d:1e:39:01:5c:59:8b:61:8a:6d:2d:
         b9:cd:32:4d:19:ce:4a:c4:b9:59:f7:83:bd:3f:50:ae:d2:3d:
         f7:42:84:c2:e7:97:ed:41:dd:58:c0:b7:d7:8b:47:78:af:0a:
         63:4a:86:4d:21:ba:29:63:47:cf:25:1b:09:40:c6:6e:85:bf:
         b1:bd:8e:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZPO98U56Tu7jLKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
MzQxYmY5MTQtMTlmZS00YTA3LWExYjgtMjY5NGJiNDgxYjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw290zm+H3ZfQtr7cESaW/jQyN8VbvHPm0o3c
vILvoHVAoNXQYUbjvKQXTrv1GFA4/v55T6lo50wuErG0y4FsNA6HiiuwAwcldw4Q
F7cdU/S+L6kyhyyHwqjDUZBI17H7yI45bl6hbDClnifJCuUrMODxy3htIcnvkGfZ
F9OyQ1M+Kp3HjGEQQF+Mbw/INbt8r7viFHJ8vES2vdK5osuraDMcnffM4yqpJfZx
WUsX04nvBmQjFczUFRkTefAi6ycjyO7uqER5tnLvql2pJU+4jMB+AwgMqxhhusiB
Jc7lhWSDd7I4WJVimL59fnCOdOn+kCoi4NuTZfdKocJ6mf0TXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPDuGYr4r+JOQtNNSeEnO2Nys6u2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZDcyOWVjMWMtYjdiMy0z
YmVlLTlkZTktZTRlMjEyYjhlOWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPwdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJUWTEckBfzxF7JXByYTXOtxzcppJqF4116iZ53Ob5nmiYbzddKFhCos
abZq3IBXSWmkQoT7iNNlhIhg/U+40fqU34vMbegQwaLkZPq5kfNxpenrTvflHiBK
9JsWTqMrVmZwxN+i6siyEz2yHASOZr2086oT7E56cA4rxGSVfeQg4u/dYGo2O88s
WIxkxcklFE5RoS9xEc1XdhS9JSH4I4DJtjrPN3ZNR9+jGpD3YwJ/al62KYfZ87uD
wvadHjkBXFmLYYptLbnNMk0ZzkrEuVn3g70/UK7SPfdChMLnl+1B3VjAt9eLR3iv
CmNKhk0huiljR88lGwlAxm6Fv7G9jqU=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:27:30 2025 by rpki-client