Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/18929dd0-8abe-380b-8457-8fd0f487c7b5.roa
File:                     18929dd0-8abe-380b-8457-8fd0f487c7b5.roa (raw, json)
Hash identifier:          1CQRIfvwbbmQBUKkqn5/cPjVS27GMkC3DP81xkxLgEY=
Subject key identifier:   83:47:4C:26:7B:3A:52:B4:56:E5:F0:93:85:7A:E3:95:0F:EE:E8:A3
Certificate issuer:       /CN=e5333a6e-37dc-4213-b928-ae0341454759
Certificate serial:       010D0C9F43285848EF6154F569CCA0C5D7EDB930
Authority key identifier: 39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/18929dd0-8abe-380b-8457-8fd0f487c7b5.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     46650
IP address blocks:        104.245.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:54:f5:69:cc:a0:c5:d7:ed:b9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5333a6e-37dc-4213-b928-ae0341454759
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=493468fb-d2e4-4add-a5e7-fea8d501dd8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d5:60:0a:33:44:02:5b:31:f7:44:47:2d:27:
                    25:20:de:20:9a:3d:c7:01:96:b7:ea:ff:d6:e7:5d:
                    9e:76:54:38:8d:bf:23:a8:74:5b:ef:05:18:c4:6a:
                    0e:76:cc:24:92:1d:39:49:cb:a7:35:77:1c:3c:1a:
                    d3:f0:78:d4:7a:d6:4a:ac:bf:3b:23:67:ab:e3:46:
                    e9:90:02:92:7f:fe:af:0e:a8:76:78:a2:b0:67:73:
                    60:02:6d:12:88:49:87:69:75:5e:ad:8c:c1:4b:e5:
                    ff:77:24:4b:a7:8d:b7:fb:9a:f4:4b:bd:d2:45:4b:
                    c6:a7:a0:5c:c9:4b:3c:6a:bd:6c:66:52:c5:20:ff:
                    7f:63:fe:96:6b:b1:d2:ad:e8:24:5d:da:b3:9f:41:
                    99:f5:57:76:38:68:a1:41:f7:bd:37:c1:af:26:e2:
                    cb:37:e3:06:c8:3f:0a:61:f2:1d:c7:20:80:08:5f:
                    90:8b:7d:91:40:da:c4:48:82:c3:9f:93:06:94:9e:
                    29:28:91:49:17:92:fb:96:d5:44:8e:3a:c2:a5:52:
                    0d:f5:1a:a5:68:59:03:a9:f1:00:f6:90:bd:5d:0d:
                    83:bb:dd:d7:d1:eb:74:ef:0b:54:7a:c7:59:c7:96:
                    6f:6b:32:cd:ef:33:7d:11:19:17:d2:35:9a:5f:ac:
                    9f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:47:4C:26:7B:3A:52:B4:56:E5:F0:93:85:7A:E3:95:0F:EE:E8:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/18929dd0-8abe-380b-8457-8fd0f487c7b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759/e5333a6e-37dc-4213-b928-ae0341454759.crl

            X509v3 Authority Key Identifier:
                keyid:39:3C:9B:6B:84:4D:12:F0:64:F5:53:BB:8F:7F:31:00:A1:27:A0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e5333a6e-37dc-4213-b928-ae0341454759.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:76:94:96:6f:7c:bd:10:60:54:cc:6d:5b:85:5a:d5:f7:49:
         48:8e:47:53:4c:0b:fe:2e:ab:f5:94:52:2c:00:04:64:aa:db:
         06:c8:f7:ee:5b:00:59:59:a9:88:b9:75:82:ce:12:bc:25:72:
         5e:29:f8:61:ef:ac:a2:c1:8d:f9:65:4c:ce:f1:37:ec:78:dd:
         ff:6b:e4:d4:56:26:e1:b0:ca:7c:57:56:3c:aa:f1:3f:7c:63:
         c0:2f:f3:fd:e4:e9:4e:46:ed:42:f1:0d:49:a8:cc:0c:75:5c:
         d9:ab:04:a6:ab:e6:2f:3c:06:b4:51:81:8a:f2:eb:19:52:78:
         04:f7:32:e2:43:80:75:4d:0c:64:e7:61:b5:39:06:b3:c8:d5:
         c1:2a:7a:76:99:35:73:74:11:e3:f5:6a:ed:c9:be:50:78:72:
         c9:e8:e0:eb:ea:aa:7b:e9:87:c4:3d:47:f1:85:9b:b8:c9:12:
         10:aa:6a:52:08:64:31:e4:22:55:ec:38:c4:30:ad:03:0d:3c:
         eb:83:ae:6e:ee:c7:bf:19:41:10:51:3d:d1:73:9b:e7:4a:98:
         cc:45:99:76:59:21:ce:bb:69:9e:bb:6a:24:f6:d0:d5:be:32:
         0a:2b:de:bd:4e:66:0d:3a:bd:6c:a3:37:25:43:e8:9b:73:fb:
         83:8c:eb:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVT1acygxdftuTAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTUzMzNhNmUtMzdkYy00MjEzLWI5MjgtYWUwMzQxNDU0
NzU5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
NDkzNDY4ZmItZDJlNC00YWRkLWE1ZTctZmVhOGQ1MDFkZDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtVgCjNEAlsx90RHLSclIN4gmj3HAZa36v/W
512edlQ4jb8jqHRb7wUYxGoOdswkkh05ScunNXccPBrT8HjUetZKrL87I2er40bp
kAKSf/6vDqh2eKKwZ3NgAm0SiEmHaXVerYzBS+X/dyRLp423+5r0S73SRUvGp6Bc
yUs8ar1sZlLFIP9/Y/6Wa7HSregkXdqzn0GZ9Vd2OGihQfe9N8GvJuLLN+MGyD8K
YfIdxyCACF+Qi32RQNrESILDn5MGlJ4pKJFJF5L7ltVEjjrCpVIN9RqlaFkDqfEA
9pC9XQ2Du93X0et07wtUesdZx5ZvazLN7zN9ERkX0jWaX6yfmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFINHTCZ7OlK0VuXwk4V645UP7uijMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNTMz
M2E2ZS0zN2RjLTQyMTMtYjkyOC1hZTAzNDE0NTQ3NTkvMTg5MjlkZDAtOGFiZS0z
ODBiLTg0NTctOGZkMGY0ODdjN2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTUzMzNhNmUtMzdkYy00MjEzLWI5
MjgtYWUwMzQxNDU0NzU5L2U1MzMzYTZlLTM3ZGMtNDIxMy1iOTI4LWFlMDM0MTQ1
NDc1OS5jcmwwHwYDVR0jBBgwFoAUOTyba4RNEvBk9VO7j38xAKEnoHMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lNTMzM2E2ZS0zN2RjLTQyMTMtYjkyOC1hZTAz
NDE0NTQ3NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPVcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACl2lJZvfL0QYFTMbVuFWtX3SUiOR1NMC/4uq/WUUiwABGSq2wbI9+5b
AFlZqYi5dYLOErwlcl4p+GHvrKLBjfllTM7xN+x43f9r5NRWJuGwynxXVjyq8T98
Y8Av8/3k6U5G7ULxDUmozAx1XNmrBKar5i88BrRRgYry6xlSeAT3MuJDgHVNDGTn
YbU5BrPI1cEqenaZNXN0EeP1au3JvlB4csno4Ovqqnvph8Q9R/GFm7jJEhCqalII
ZDHkIlXsOMQwrQMNPOuDrm7ux78ZQRBRPdFzm+dKmMxFmXZZIc67aZ67aiT20NW+
Mgor3r1OZg06vWyjNyVD6Jtz+4OM62Q=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:15:03 2025 by rpki-client