Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5b6c30e6-d845-3b7b-b73c-29b0405e82cc.roa
File:                     5b6c30e6-d845-3b7b-b73c-29b0405e82cc.roa (raw, json)
Hash identifier:          GVJL6tVZiS+/BDVyXiREAXe7fD/r3pejWi37ZUXt4Uk=
Subject key identifier:   F7:B0:66:AD:02:4D:9B:5F:CE:0E:F6:4E:92:F2:F2:9E:C3:29:84:D5
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285849D42FB6934C6FA8C06881B000
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5b6c30e6-d845-3b7b-b73c-29b0405e82cc.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     54004
IP address blocks:        104.37.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:b6:93:4c:6f:a8:c0:68:81:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=f45da20d-8012-4c57-bb99-f77c983d4ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f9:0b:30:20:76:21:72:1c:12:02:42:51:be:
                    1e:3b:0f:1a:28:09:dc:68:12:e0:30:6c:01:56:33:
                    34:bd:2d:ea:1e:41:9a:bb:67:e5:be:88:3f:03:9d:
                    1d:d8:98:9c:58:25:41:92:88:94:4a:d9:ad:42:c8:
                    39:29:b4:55:89:77:74:14:f4:ef:53:2a:14:11:5a:
                    8e:bc:73:c0:7c:34:ce:5f:4c:77:0a:83:7a:d6:20:
                    e6:4b:14:dc:1e:04:09:89:21:1d:87:88:8e:8d:3a:
                    2f:76:12:40:0b:b8:9f:af:75:3f:46:97:ee:ac:c1:
                    2e:b9:8e:1f:48:13:66:bb:f8:c3:86:16:73:ce:a9:
                    d4:91:09:4c:60:e2:90:21:cc:bf:7b:bf:46:58:e8:
                    80:97:5e:79:2b:d7:b1:98:13:d5:41:51:f6:41:49:
                    a0:f2:83:58:f4:5a:53:db:84:42:a7:fc:98:d4:98:
                    dc:74:45:a9:fb:4e:a0:bf:a1:8c:92:b7:75:e1:c3:
                    8d:a3:3e:03:75:13:40:bf:07:17:6c:15:7e:23:21:
                    e1:97:dc:2e:cc:8d:39:bf:60:6c:d8:55:7d:25:5a:
                    64:7b:95:5d:cd:90:ee:fb:39:43:71:12:93:a4:0e:
                    6b:8f:08:17:b6:17:83:18:2a:ec:12:fa:11:b0:b8:
                    8f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B0:66:AD:02:4D:9B:5F:CE:0E:F6:4E:92:F2:F2:9E:C3:29:84:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5b6c30e6-d845-3b7b-b73c-29b0405e82cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:39:42:e5:d9:79:5d:7e:4d:61:9d:d4:37:a2:ea:27:74:5f:
         da:40:14:21:17:a7:d2:81:8b:ea:e5:46:33:7d:f7:da:5d:57:
         fd:e1:d1:25:6b:d9:8b:8f:1f:32:43:12:7d:18:56:84:3e:69:
         3f:6e:48:6c:8b:ad:25:f1:c1:6c:7d:fc:33:6d:fc:f4:28:f3:
         74:cb:59:db:42:cc:db:72:a3:c2:25:6c:5a:9f:79:fc:f2:89:
         f3:64:81:43:54:30:32:4d:6f:17:0c:0c:03:71:bc:9d:d1:e2:
         79:df:8c:7f:41:2b:11:b0:55:d6:54:81:1d:a6:99:c4:e3:50:
         13:0d:72:fc:03:44:23:3e:15:9f:1a:0e:2d:02:b6:ae:d4:b3:
         16:bb:83:9f:65:b1:71:15:53:09:4e:b4:2d:e3:dc:af:46:1d:
         a3:df:26:8b:66:4c:a8:62:d6:cf:34:41:bf:90:cb:43:7d:e3:
         a4:a7:2b:c7:32:f0:a1:48:70:c8:dc:79:7f:fb:2a:45:7e:26:
         5f:45:e0:4c:e7:33:08:72:b9:51:f2:78:56:86:d0:b6:73:1f:
         e2:e3:8c:bb:39:fd:b0:34:21:e1:2d:19:f4:95:e1:55:58:30:
         78:b3:1a:55:8d:2b:b7:75:d0:60:6c:2f:2b:da:c6:2d:41:e2:
         0d:10:96:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL7aTTG+owGiBsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
ZjQ1ZGEyMGQtODAxMi00YzU3LWJiOTktZjc3Yzk4M2Q0YWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/kLMCB2IXIcEgJCUb4eOw8aKAncaBLgMGwB
VjM0vS3qHkGau2flvog/A50d2JicWCVBkoiUStmtQsg5KbRViXd0FPTvUyoUEVqO
vHPAfDTOX0x3CoN61iDmSxTcHgQJiSEdh4iOjTovdhJAC7ifr3U/RpfurMEuuY4f
SBNmu/jDhhZzzqnUkQlMYOKQIcy/e79GWOiAl155K9exmBPVQVH2QUmg8oNY9FpT
24RCp/yY1JjcdEWp+06gv6GMkrd14cONoz4DdRNAvwcXbBV+IyHhl9wuzI05v2Bs
2FV9JVpke5VdzZDu+zlDcRKTpA5rjwgXtheDGCrsEvoRsLiPLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPewZq0CTZtfzg72TpLy8p7DKYTVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNWI2YzMwZTYtZDg0NS0z
YjdiLWI3M2MtMjliMDQwNWU4MmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCUCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG05QuXZeV1+TWGd1Dei6id0X9pAFCEXp9KBi+rlRjN999pdV/3h0SVr
2YuPHzJDEn0YVoQ+aT9uSGyLrSXxwWx9/DNt/PQo83TLWdtCzNtyo8IlbFqfefzy
ifNkgUNUMDJNbxcMDANxvJ3R4nnfjH9BKxGwVdZUgR2mmcTjUBMNcvwDRCM+FZ8a
Di0Ctq7Usxa7g59lsXEVUwlOtC3j3K9GHaPfJotmTKhi1s80Qb+Qy0N946SnK8cy
8KFIcMjceX/7KkV+Jl9F4EznMwhyuVHyeFaG0LZzH+LjjLs5/bA0IeEtGfSV4VVY
MHizGlWNK7d10GBsLyvaxi1B4g0Qli8=
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:06:35 2025 by rpki-client