Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d0749d81-fd16-3151-b91e-568ed46c08a4.roa
File:                     d0749d81-fd16-3151-b91e-568ed46c08a4.roa (raw, json)
Hash identifier:          neCkMMqOofZB5WXcXoVITCHlwqInDTj+JrCRaSowZKI=
Subject key identifier:   DD:AC:50:DB:6E:27:BE:BA:D3:7D:B2:7C:27:3E:9E:B3:CC:CE:86:6F
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584986253DFAE18CC482D8181700
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d0749d81-fd16-3151-b91e-568ed46c08a4.roa
Signing time:             Mon 14 Apr 2025 14:07:11 +0000
ROA not before:           Mon 14 Apr 2025 14:07:11 +0000
ROA not after:            Sun 13 Jul 2025 14:07:11 +0000
asID:                     16276
IP address blocks:        104.243.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:25:3d:fa:e1:8c:c4:82:d8:18:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Apr 14 14:07:11 2025 GMT
            Not After : Jul 13 14:07:11 2025 GMT
        Subject: CN=e839e015-8dcd-474b-9977-ed1bcd6d49e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:92:ca:c8:de:21:20:44:40:f9:ee:3d:60:1b:
                    8b:dc:e3:8b:03:1a:05:8e:f2:cd:c0:f8:60:4d:80:
                    ca:5c:e2:fa:58:d1:29:b6:ee:9a:66:2b:7d:f7:54:
                    c9:e3:54:c2:87:1a:05:1f:65:cf:9e:53:f3:5a:87:
                    ca:7d:53:5c:37:a1:e5:60:b8:ca:37:3b:cd:3c:c2:
                    7b:2d:ef:f8:e7:58:63:e7:db:14:6f:e8:1c:74:56:
                    98:d1:12:cc:6d:45:e3:9e:7b:a9:1c:68:a4:66:e8:
                    e2:b7:0e:67:b1:20:0a:f6:3f:f3:4e:02:58:2c:de:
                    df:0f:79:f4:1a:89:a6:62:68:86:d4:c0:22:55:d5:
                    7a:5f:3e:21:fc:30:fe:c1:98:e8:25:b2:25:a5:21:
                    72:73:41:2c:86:e0:1b:20:c1:1f:34:2b:5a:26:83:
                    d1:be:87:f5:38:1e:de:07:d5:4b:07:3d:21:a5:8a:
                    5e:8e:06:7b:35:80:96:0a:d0:eb:cd:67:18:79:4e:
                    ba:8a:ef:d9:a7:86:bd:9d:44:37:f9:c9:55:3a:66:
                    b5:74:b5:52:20:8a:d9:f9:bc:26:d0:7a:a4:04:fa:
                    9f:1b:6a:c8:f4:58:29:13:b3:36:9b:4f:9a:ff:69:
                    6a:de:c2:8e:b7:b9:5f:3d:5b:94:66:a1:4e:18:14:
                    a9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AC:50:DB:6E:27:BE:BA:D3:7D:B2:7C:27:3E:9E:B3:CC:CE:86:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d0749d81-fd16-3151-b91e-568ed46c08a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:05:f5:b7:1e:41:5b:25:86:bb:65:e8:0e:8a:ca:c5:a8:f9:
         65:65:75:6a:82:10:dc:54:20:cb:47:80:3e:ad:cd:1b:4f:2b:
         91:6c:ed:c2:77:78:8a:19:af:ea:f1:56:42:82:6a:c2:0e:21:
         a7:1d:9d:28:15:34:78:51:25:2a:a7:a7:69:37:b2:e8:99:7e:
         26:c2:fa:7a:57:c8:66:17:d7:6b:4c:7c:53:6c:55:93:81:b7:
         af:31:7e:7f:60:cc:ac:f3:02:12:58:a1:94:27:06:63:00:12:
         f9:3b:6a:82:fa:5a:1c:b9:c2:0a:c1:1d:b2:46:1b:b8:50:16:
         d2:08:c2:c6:a3:08:01:49:cd:cb:cd:91:8f:70:00:92:ce:6c:
         71:a1:39:a3:39:07:00:82:05:02:4a:2d:46:60:a5:6f:67:69:
         bd:24:95:37:7f:a9:07:4a:93:b9:38:82:0f:f5:fc:27:3b:bd:
         11:46:5e:8e:25:11:62:fc:f7:1a:05:94:37:33:a4:da:a6:27:
         3b:de:78:40:19:53:c8:c8:95:17:6f:66:83:dd:c8:c7:57:86:
         f0:38:1b:d3:4d:42:d2:c8:30:77:1a:6b:d0:9d:9b:4d:0f:ff:
         09:1a:db:fa:5c:16:53:ae:a4:45:07:0d:9c:4c:f1:9b:fc:ee:
         6f:d6:12:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGJT364YzEgtgYFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDQxNDE0MDcxMVoXDTI1MDcxMzE0MDcxMVowLzEtMCsGA1UEAxMk
ZTgzOWUwMTUtOGRjZC00NzRiLTk5NzctZWQxYmNkNmQ0OWU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJLKyN4hIERA+e49YBuL3OOLAxoFjvLNwPhg
TYDKXOL6WNEptu6aZit991TJ41TChxoFH2XPnlPzWofKfVNcN6HlYLjKNzvNPMJ7
Le/451hj59sUb+gcdFaY0RLMbUXjnnupHGikZujitw5nsSAK9j/zTgJYLN7fD3n0
GommYmiG1MAiVdV6Xz4h/DD+wZjoJbIlpSFyc0EshuAbIMEfNCtaJoPRvof1OB7e
B9VLBz0hpYpejgZ7NYCWCtDrzWcYeU66iu/Zp4a9nUQ3+clVOma1dLVSIIrZ+bwm
0HqkBPqfG2rI9FgpE7M2m0+a/2lq3sKOt7lfPVuUZqFOGBSppQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN2sUNtuJ766032yfCc+nrPMzoZvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDA3NDlkODEtZmQxNi0z
MTUxLWI5MWUtNTY4ZWQ0NmMwOGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIUF9bceQVslhrtl6A6KysWo+WVldWqCENxUIMtHgD6tzRtPK5Fs7cJ3
eIoZr+rxVkKCasIOIacdnSgVNHhRJSqnp2k3suiZfibC+npXyGYX12tMfFNsVZOB
t68xfn9gzKzzAhJYoZQnBmMAEvk7aoL6Why5wgrBHbJGG7hQFtIIwsajCAFJzcvN
kY9wAJLObHGhOaM5BwCCBQJKLUZgpW9nab0klTd/qQdKk7k4gg/1/Cc7vRFGXo4l
EWL89xoFlDczpNqmJzveeEAZU8jIlRdvZoPdyMdXhvA4G9NNQtLIMHcaa9Cdm00P
/wka2/pcFlOupEUHDZxM8Zv87m/WEh8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:08 2025 by rpki-client