Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00e1768c-d45f-3afd-b6ef-b5ec244c0251.roa
File:                     00e1768c-d45f-3afd-b6ef-b5ec244c0251.roa (raw, json)
Hash identifier:          onnQWv1t5Kg+YOmAX4EDMgFp1emZxTNST61GdOFxK1Y=
Subject key identifier:   5B:63:C9:69:3A:F7:C6:48:FA:B9:D4:84:B4:ED:FF:54:0B:FD:2D:77
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848BFEBAD6035C87E3FAE6521C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00e1768c-d45f-3afd-b6ef-b5ec244c0251.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     396982
IP address blocks:        104.198.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:ad:60:35:c8:7e:3f:ae:65:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=5778464c-9bf7-4e3b-bd9d-d73eea571cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d4:4b:e1:ac:e3:9d:af:a6:6c:e7:7f:55:e6:
                    53:86:f9:f7:2a:cf:55:06:c7:b0:29:11:71:af:3a:
                    6d:ef:29:2c:23:f0:7b:a5:7f:62:d8:a7:41:25:0c:
                    89:1b:c5:ac:37:26:a1:73:d9:c3:fa:53:06:69:0e:
                    e9:d8:a4:11:ee:4e:64:85:7c:0c:8f:1e:8c:de:07:
                    bc:ae:a9:d8:6e:03:c1:3f:51:6d:15:be:5e:31:64:
                    cb:32:b5:08:89:49:cf:fd:c8:c1:cd:7e:84:12:c0:
                    9b:ac:39:7f:d7:96:c9:02:e2:a5:67:f3:d4:21:03:
                    ca:b0:55:d9:c0:c1:11:ff:97:ea:aa:7f:70:d2:d8:
                    5a:5e:6c:0a:2d:5a:68:30:d5:30:4a:2b:b3:c2:2c:
                    e1:03:be:09:8b:33:e5:b4:88:67:0c:80:eb:d1:6b:
                    69:d9:49:1f:aa:38:73:bf:da:b4:d2:44:53:9f:9e:
                    67:b3:ce:42:48:7e:c8:17:ed:cb:86:db:56:6a:ef:
                    f7:b7:c1:be:fc:50:9e:17:bd:56:3b:89:32:4c:54:
                    25:69:92:70:aa:32:f7:07:08:35:a2:9d:15:05:53:
                    a2:45:a4:5b:c8:0c:83:7b:37:73:0c:70:13:7c:ca:
                    1a:6d:4a:a6:18:84:16:03:9c:8d:fd:1e:d3:80:70:
                    91:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:63:C9:69:3A:F7:C6:48:FA:B9:D4:84:B4:ED:FF:54:0B:FD:2D:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/00e1768c-d45f-3afd-b6ef-b5ec244c0251.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.198.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:53:53:38:4e:d3:a3:b2:91:a3:6a:9f:b7:07:43:41:31:f9:
         e4:22:6a:ce:ee:ca:44:cc:9f:7b:a4:15:02:36:b5:8d:7d:8a:
         62:ad:1a:63:40:67:3b:19:f3:44:41:ca:4e:cc:07:50:7b:67:
         ba:fb:cf:53:79:13:47:83:1e:a3:6c:a7:7f:33:4d:de:18:e3:
         78:3a:a0:59:04:25:33:dd:40:df:81:44:35:09:a0:2d:63:c5:
         4e:77:bd:43:09:23:c4:b6:e4:ed:99:47:98:5c:98:8b:47:c3:
         70:24:d0:1c:19:e6:b0:38:17:bd:0f:da:be:2d:86:09:14:aa:
         dc:69:03:27:59:a2:f1:c2:8f:a0:04:12:13:e9:86:28:4b:7b:
         d4:7e:8d:67:a1:b1:6e:b1:4a:b7:46:85:02:e4:c0:40:5e:56:
         21:87:d4:fd:23:dc:81:55:c6:cc:f6:ee:c1:db:f0:22:ce:66:
         92:5b:91:ee:cd:5b:ee:45:45:cc:95:a9:91:bd:e9:eb:fa:92:
         c9:71:3a:8f:7f:e8:0e:3b:ed:13:20:ae:a7:14:97:10:a3:87:
         a5:87:10:06:38:dc:b4:ce:19:4c:45:2b:60:76:88:17:d9:f5:
         3c:ce:47:ba:c5:18:87:e6:79:04:c7:c2:ab:92:73:db:d8:99:
         87:a6:e0:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/661gNch+P65lIcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk
NTc3ODQ2NGMtOWJmNy00ZTNiLWJkOWQtZDczZWVhNTcxY2RhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdRL4azjna+mbOd/VeZThvn3Ks9VBsewKRFx
rzpt7yksI/B7pX9i2KdBJQyJG8WsNyahc9nD+lMGaQ7p2KQR7k5khXwMjx6M3ge8
rqnYbgPBP1FtFb5eMWTLMrUIiUnP/cjBzX6EEsCbrDl/15bJAuKlZ/PUIQPKsFXZ
wMER/5fqqn9w0thaXmwKLVpoMNUwSiuzwizhA74JizPltIhnDIDr0Wtp2Ukfqjhz
v9q00kRTn55ns85CSH7IF+3LhttWau/3t8G+/FCeF71WO4kyTFQlaZJwqjL3Bwg1
op0VBVOiRaRbyAyDezdzDHATfMoabUqmGIQWA5yN/R7TgHCRywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFtjyWk698ZI+rnUhLTt/1QL/S13MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMDBlMTc2OGMtZDQ1Zi0z
YWZkLWI2ZWYtYjVlYzI0NGMwMjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACJTUzhO06OykaNqn7cHQ0Ex+eQias7uykTMn3ukFQI2tY19imKtGmNA
ZzsZ80RByk7MB1B7Z7r7z1N5E0eDHqNsp38zTd4Y43g6oFkEJTPdQN+BRDUJoC1j
xU53vUMJI8S25O2ZR5hcmItHw3Ak0BwZ5rA4F70P2r4thgkUqtxpAydZovHCj6AE
EhPphihLe9R+jWehsW6xSrdGhQLkwEBeViGH1P0j3IFVxsz27sHb8CLOZpJbke7N
W+5FRcyVqZG96ev6kslxOo9/6A477RMgrqcUlxCjh6WHEAY43LTOGUxFK2B2iBfZ
9TzOR7rFGIfmeQTHwquSc9vYmYem4P8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 20:55:06 2025 by rpki-client