Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7fee4387-3af0-36b5-87dc-dc2b57d4591c.roa
File:                     7fee4387-3af0-36b5-87dc-dc2b57d4591c.roa (raw, json)
Hash identifier:          vM8HBcPKXBzTNq1L9Ci9ib4m8sfkLof41tprTNl/b8o=
Subject key identifier:   4F:5D:79:5C:89:E6:F6:35:76:05:31:17:51:20:53:62:21:63:65:EC
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848BFEBB535FD00EB8D4FA54C40
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7fee4387-3af0-36b5-87dc-dc2b57d4591c.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     36040
IP address blocks:        104.237.186.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:b5:35:fd:00:eb:8d:4f:a5:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=f29ed37c-cedf-4d9c-b049-384fd99abbdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:67:25:27:d3:de:b3:51:c4:e0:18:72:2e:68:
                    36:70:cd:16:4f:1f:da:dc:7a:a9:d5:43:02:3d:d1:
                    ab:c1:f4:af:b5:0e:dc:e7:49:2b:2d:a7:96:be:da:
                    88:0d:e3:79:6b:b8:11:0d:a4:1c:b8:e7:ec:75:7a:
                    55:09:8f:fd:7c:7f:96:8e:a7:bf:45:14:5f:54:39:
                    7e:c5:df:66:dc:d2:7e:66:7e:97:ac:e6:b1:93:e2:
                    27:8f:87:64:cc:f2:1d:a1:1d:be:30:5d:a9:fd:0e:
                    a9:49:25:14:54:f8:25:5f:e6:2f:63:ea:ad:9a:a7:
                    58:46:d4:d7:62:2f:3f:e1:af:bf:7f:de:0b:d4:37:
                    67:4e:e7:cc:89:55:b5:d3:57:29:8e:97:01:c8:7b:
                    c4:ed:a5:bc:4d:37:86:65:32:e0:61:a1:82:c1:33:
                    26:be:99:3d:bb:32:d7:a7:44:7f:71:e2:ab:38:d4:
                    75:2d:1f:28:b2:46:43:3e:14:4b:a6:ed:5d:21:a2:
                    5b:01:fd:ad:6c:03:95:b5:42:7a:4e:f5:cb:2e:d2:
                    de:14:69:62:6e:96:e4:28:1d:95:0d:67:85:ae:bc:
                    31:ed:b9:d9:7b:44:82:38:da:e5:a5:b9:76:b8:2a:
                    83:bf:39:17:a9:50:fb:b1:f7:b3:93:0e:a9:d6:49:
                    7c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5D:79:5C:89:E6:F6:35:76:05:31:17:51:20:53:62:21:63:65:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/7fee4387-3af0-36b5-87dc-dc2b57d4591c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.186.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:51:62:9b:68:b9:c3:51:6c:80:f4:b4:dc:c5:84:48:90:91:
         a2:44:ef:a1:6c:00:72:7b:37:a4:bc:59:92:49:ad:a1:57:9e:
         ad:f9:ed:34:45:78:5a:e0:db:b0:3d:f1:3c:4c:ef:3a:a8:41:
         13:32:bf:a2:f1:db:84:75:ee:4c:64:5a:3a:5e:4a:9e:a1:53:
         fd:f5:27:9c:c7:76:41:b1:30:2d:15:50:d9:fc:b0:3a:a8:d2:
         39:18:0d:46:37:11:e0:6d:ea:81:6a:5b:5d:49:81:5e:6c:ca:
         c3:ea:df:77:e4:a0:ef:9e:83:93:40:8b:07:cb:9b:65:49:b3:
         a6:02:2c:50:f4:b2:40:04:44:28:51:bd:0b:16:1b:fe:46:89:
         4f:6c:69:35:11:74:6b:95:db:81:7b:13:bf:fd:b7:fb:0b:a7:
         d3:b4:97:47:84:8d:9c:e3:42:cc:b7:d4:dd:68:9d:c3:60:d4:
         a0:96:ed:46:ff:8f:35:e5:a8:be:39:dc:d6:cc:78:67:16:c3:
         bf:5d:3a:21:e2:36:ff:b5:40:30:1f:49:cd:33:2d:2a:4c:a9:
         c2:5a:42:06:e0:6f:56:5b:7d:96:b5:15:74:4b:89:96:36:56:
         45:ed:11:7a:37:9f:7a:2e:8d:74:c3:49:fd:15:f1:a4:6d:d7:
         c2:7e:1c:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/67U1/QDrjU+lTEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
ZjI5ZWQzN2MtY2VkZi00ZDljLWIwNDktMzg0ZmQ5OWFiYmRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGclJ9Pes1HE4BhyLmg2cM0WTx/a3Hqp1UMC
PdGrwfSvtQ7c50krLaeWvtqIDeN5a7gRDaQcuOfsdXpVCY/9fH+Wjqe/RRRfVDl+
xd9m3NJ+Zn6XrOaxk+Inj4dkzPIdoR2+MF2p/Q6pSSUUVPglX+YvY+qtmqdYRtTX
Yi8/4a+/f94L1DdnTufMiVW101cpjpcByHvE7aW8TTeGZTLgYaGCwTMmvpk9uzLX
p0R/ceKrONR1LR8oskZDPhRLpu1dIaJbAf2tbAOVtUJ6TvXLLtLeFGlibpbkKB2V
DWeFrrwx7bnZe0SCONrlpbl2uCqDvzkXqVD7sfezkw6p1kl8EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE9deVyJ5vY1dgUxF1EgU2IhY2XsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvN2ZlZTQzODctM2FmMC0z
NmI1LTg3ZGMtZGMyYjU3ZDQ1OTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaO26MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK1RYptoucNRbID0tNzFhEiQkaJE76FsAHJ7N6S8WZJJraFXnq357TRF
eFrg27A98TxM7zqoQRMyv6Lx24R17kxkWjpeSp6hU/31J5zHdkGxMC0VUNn8sDqo
0jkYDUY3EeBt6oFqW11JgV5sysPq33fkoO+eg5NAiwfLm2VJs6YCLFD0skAERChR
vQsWG/5GiU9saTURdGuV24F7E7/9t/sLp9O0l0eEjZzjQsy31N1oncNg1KCW7Ub/
jzXlqL453NbMeGcWw79dOiHiNv+1QDAfSc0zLSpMqcJaQgbgb1ZbfZa1FXRLiZY2
VkXtEXo3n3oujXTDSf0V8aRt18J+HPg=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:28:43 2025 by rpki-client