Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/323a0546-d4d5-3569-8228-3b89e02edad8.roa
File:                     323a0546-d4d5-3569-8228-3b89e02edad8.roa (raw, json)
Hash identifier:          phckYIp8TKvJpxQwPSMbd7pKEVBDfMRVQqnLOVnIi1M=
Subject key identifier:   30:85:A1:0A:F0:99:37:A1:17:D2:75:73:81:EE:2E:F5:7D:D2:D7:B5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A112524258394E418EB1DD440
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/323a0546-d4d5-3569-8228-3b89e02edad8.roa
Signing time:             Tue 03 Jun 2025 09:04:20 +0000
ROA not before:           Tue 03 Jun 2025 09:04:20 +0000
ROA not after:            Mon 01 Sep 2025 09:04:20 +0000
asID:                     212238
IP address blocks:        104.252.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:25:24:25:83:94:e4:18:eb:1d:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  3 09:04:20 2025 GMT
            Not After : Sep  1 09:04:20 2025 GMT
        Subject: CN=9c904df2-a6e0-485c-be0b-7aa21265cb05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cd:20:f4:b0:d4:2a:ef:64:58:c4:97:4a:b0:
                    32:c0:ef:fd:f7:28:3e:a2:c4:a9:ef:a7:67:a6:ea:
                    1c:ff:7f:43:75:de:0d:55:6b:38:69:ae:db:1e:24:
                    dc:35:da:63:de:2b:ac:d4:39:96:59:e6:da:84:1a:
                    4b:47:98:34:e1:10:0d:a5:d7:d0:38:45:74:93:ac:
                    6f:fe:e2:f0:70:e4:11:d2:87:d9:36:60:7f:6c:ab:
                    94:93:4f:d9:3b:fb:5d:8b:32:89:64:d4:49:c6:d2:
                    25:ca:8c:34:48:ba:c2:cf:58:84:16:94:f1:1c:3e:
                    bf:ba:e8:ef:68:41:a0:eb:07:e2:6b:88:24:9d:c7:
                    05:d8:ca:60:09:d4:04:0a:d5:35:ed:50:6d:b6:ae:
                    2b:23:1e:6e:b2:c3:86:7c:00:0c:4d:4f:84:60:48:
                    b1:0a:c3:13:d7:4b:0d:d4:55:6f:79:be:ed:1b:e1:
                    4a:e4:18:9b:1b:f6:98:79:94:51:52:f7:50:93:f4:
                    7b:0b:70:b1:ba:48:7a:1f:34:b0:54:80:3f:76:b2:
                    8b:85:1e:48:b2:a4:8e:38:8c:f1:cf:e4:86:86:49:
                    11:12:82:c6:76:26:cd:18:0d:7c:4d:af:26:56:28:
                    37:f0:42:6c:2d:6c:aa:dc:71:ed:55:09:9a:4b:1c:
                    bb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:85:A1:0A:F0:99:37:A1:17:D2:75:73:81:EE:2E:F5:7D:D2:D7:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/323a0546-d4d5-3569-8228-3b89e02edad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a8:42:a3:b4:2f:e0:66:aa:dd:58:06:80:7b:3b:c3:bb:1a:
         2b:46:5b:6d:e0:6b:55:75:59:a3:1d:8d:5c:ef:f1:45:ba:04:
         55:4f:09:61:5a:2f:66:e9:80:33:c2:bb:a7:06:c4:a6:d9:54:
         49:bc:0b:a3:0f:5c:08:49:5e:64:a2:bf:60:7d:68:7d:56:67:
         94:92:db:5e:f0:fd:6d:37:c4:16:a4:91:9e:80:73:9d:ae:dd:
         92:55:5c:2a:3c:42:b8:f1:27:04:01:da:b4:5a:cb:38:ff:b9:
         d3:ac:61:3e:20:52:1a:be:6b:98:69:37:cf:fb:ec:a7:c4:b6:
         e1:d1:25:85:ce:e8:ca:c0:3b:66:88:23:b6:5d:95:52:71:ac:
         b4:3c:5d:3f:42:ee:11:d5:06:c5:f2:c3:1a:52:ab:ea:aa:a2:
         00:6f:54:89:9f:f2:fa:09:5c:b1:ad:83:d9:96:e9:4f:d8:9c:
         6a:88:9d:07:53:d8:bc:db:7a:88:ae:63:74:b0:13:68:d4:09:
         ff:87:67:01:1b:e1:78:23:77:7c:d9:6e:6b:80:28:23:6c:55:
         97:9b:f4:e8:54:3b:91:80:eb:8e:98:f4:bc:4d:7a:36:cc:92:
         77:28:d3:35:1a:88:46:e8:56:d8:b2:cc:ed:a6:a9:5f:df:9f:
         8e:79:3b:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRJSQlg5TkGOsd1EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDYwMzA5MDQyMFoXDTI1MDkwMTA5MDQyMFowLzEtMCsGA1UEAxMk
OWM5MDRkZjItYTZlMC00ODVjLWJlMGItN2FhMjEyNjVjYjA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs0g9LDUKu9kWMSXSrAywO/99yg+osSp76dn
puoc/39Ddd4NVWs4aa7bHiTcNdpj3ius1DmWWebahBpLR5g04RANpdfQOEV0k6xv
/uLwcOQR0ofZNmB/bKuUk0/ZO/tdizKJZNRJxtIlyow0SLrCz1iEFpTxHD6/uujv
aEGg6wfia4gknccF2MpgCdQECtU17VBttq4rIx5ussOGfAAMTU+EYEixCsMT10sN
1FVveb7tG+FK5BibG/aYeZRRUvdQk/R7C3Cxukh6HzSwVIA/drKLhR5IsqSOOIzx
z+SGhkkREoLGdibNGA18Ta8mVig38EJsLWyq3HHtVQmaSxy7swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDCFoQrwmTehF9J1c4HuLvV90te1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzIzYTA1NDYtZDRkNS0z
NTY5LTgyMjgtM2I4OWUwMmVkYWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPyfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACqoQqO0L+Bmqt1YBoB7O8O7GitGW23ga1V1WaMdjVzv8UW6BFVPCWFa
L2bpgDPCu6cGxKbZVEm8C6MPXAhJXmSiv2B9aH1WZ5SS217w/W03xBakkZ6Ac52u
3ZJVXCo8QrjxJwQB2rRayzj/udOsYT4gUhq+a5hpN8/77KfEtuHRJYXO6MrAO2aI
I7ZdlVJxrLQ8XT9C7hHVBsXywxpSq+qqogBvVImf8voJXLGtg9mW6U/YnGqInQdT
2LzbeoiuY3SwE2jUCf+HZwEb4Xgjd3zZbmuAKCNsVZeb9OhUO5GA646Y9LxNejbM
knco0zUaiEboVtiyzO2mqV/fn455OzY=
-----END CERTIFICATE-----
Generated at Sat Jun 14 17:49:25 2025 by rpki-client