Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/47a34aff-26d7-3464-87b0-9a69189ab671.roa
File:                     47a34aff-26d7-3464-87b0-9a69189ab671.roa (raw, json)
Hash identifier:          YX6xJksMN5loaKTxYdRR3Muq4mJ1wEW99TuImv6tVww=
Subject key identifier:   DD:49:7D:7C:9D:31:66:47:23:0C:ED:48:46:12:FE:33:C0:DB:A1:0E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F2A5559932EEC22186A19980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/47a34aff-26d7-3464-87b0-9a69189ab671.roa
Signing time:             Fri 23 May 2025 10:52:34 +0000
ROA not before:           Fri 23 May 2025 10:52:34 +0000
ROA not after:            Thu 21 Aug 2025 10:52:34 +0000
asID:                     44477
IP address blocks:        104.165.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:a5:55:99:32:ee:c2:21:86:a1:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 23 10:52:34 2025 GMT
            Not After : Aug 21 10:52:34 2025 GMT
        Subject: CN=74e8882a-f343-44f1-b2a2-0cffe3461cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:19:ed:ba:f7:9e:6e:ef:bb:cd:18:81:8e:a8:
                    34:84:16:a3:27:da:0f:68:9d:6c:f3:7b:40:d7:fb:
                    fa:60:f0:09:e7:f5:48:35:d6:30:37:cf:43:2f:01:
                    d6:b7:14:4b:c7:01:ef:8c:ff:fb:11:26:72:e3:97:
                    97:42:c5:9f:3d:ac:c9:6c:a6:f6:28:e2:0a:90:73:
                    ab:75:7c:c9:be:3a:8d:4d:8a:00:2d:45:95:95:5e:
                    0e:85:a3:69:b5:2a:52:f1:1e:c9:1c:3e:ae:c1:8b:
                    d3:bd:59:ee:4c:05:f9:dd:47:5b:c6:3c:87:31:ce:
                    5e:0d:0c:b0:15:96:25:ac:b0:6e:69:98:cf:21:08:
                    1f:38:23:36:70:4d:12:19:3b:02:8f:73:09:e5:b8:
                    cf:59:63:b6:ac:f4:5b:64:ae:32:46:cb:b8:5b:2e:
                    37:b8:cc:fc:57:ec:81:fe:2c:fe:80:1a:64:5d:42:
                    77:86:f8:cf:da:d6:cd:97:ff:0c:ed:05:9d:fa:b7:
                    83:aa:ee:bd:37:eb:3d:ba:03:87:0b:25:dc:0c:8d:
                    92:52:69:0e:f5:23:36:70:74:08:1a:a9:35:38:4c:
                    1e:a1:ff:a9:9a:0b:3d:af:0f:ea:29:a0:b2:76:44:
                    3b:30:eb:68:02:a9:49:f6:3f:02:7f:f4:92:0c:3c:
                    8e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:49:7D:7C:9D:31:66:47:23:0C:ED:48:46:12:FE:33:C0:DB:A1:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/47a34aff-26d7-3464-87b0-9a69189ab671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:d8:a8:5d:f3:b3:13:22:19:5e:f1:47:18:e7:80:a9:1c:0b:
         c7:9b:6a:ff:20:0e:9a:ac:dc:b3:07:18:72:75:8d:34:93:4e:
         ea:29:76:cf:fe:66:03:ad:7b:6c:13:dc:bb:be:c9:02:f0:c0:
         d1:7f:94:33:f2:7f:aa:23:b7:32:c0:4f:51:67:96:2f:bf:c4:
         0a:96:26:56:9c:64:50:e5:23:ad:11:34:8a:3e:b0:30:c9:8d:
         b1:e2:b5:03:0a:5e:4e:1e:c4:83:10:82:12:67:a5:6b:45:18:
         a2:51:76:22:bc:83:16:65:a9:d9:f7:96:31:17:8c:05:c6:c4:
         f7:aa:02:4d:d8:02:c2:37:8d:fa:bc:ed:44:f6:30:4b:0d:f9:
         a6:36:d9:71:c8:32:2f:20:87:b2:a8:9f:f2:1c:14:7d:1a:d3:
         e7:7b:7a:e7:93:0a:2a:ee:b8:df:85:ec:ff:cd:58:95:e2:18:
         1a:00:ff:2b:5a:fc:84:86:e8:94:1e:7a:0e:da:c7:6d:5c:e2:
         dd:ac:88:b6:23:b7:69:f3:c7:6f:e7:a1:ba:0e:d9:87:6e:d8:
         1c:cd:60:a0:f7:11:a4:86:a6:57:27:63:9d:76:28:87:49:ed:
         02:22:0a:29:7e:54:e5:f8:14:7e:a6:e0:78:f1:a6:54:45:6e:
         45:b3:3c:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnypVWZMu7CIYahmYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUyMzEwNTIzNFoXDTI1MDgyMTEwNTIzNFowLzEtMCsGA1UEAxMk
NzRlODg4MmEtZjM0My00NGYxLWIyYTItMGNmZmUzNDYxY2MyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxntuveebu+7zRiBjqg0hBajJ9oPaJ1s83tA
1/v6YPAJ5/VINdYwN89DLwHWtxRLxwHvjP/7ESZy45eXQsWfPazJbKb2KOIKkHOr
dXzJvjqNTYoALUWVlV4OhaNptSpS8R7JHD6uwYvTvVnuTAX53UdbxjyHMc5eDQyw
FZYlrLBuaZjPIQgfOCM2cE0SGTsCj3MJ5bjPWWO2rPRbZK4yRsu4Wy43uMz8V+yB
/iz+gBpkXUJ3hvjP2tbNl/8M7QWd+reDqu69N+s9ugOHCyXcDI2SUmkO9SM2cHQI
Gqk1OEweof+pmgs9rw/qKaCydkQ7MOtoAqlJ9j8Cf/SSDDyOmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN1JfXydMWZHIwztSEYS/jPA26EOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNDdhMzRhZmYtMjZkNy0z
NDY0LTg3YjAtOWE2OTE4OWFiNjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKWOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJrYqF3zsxMiGV7xRxjngKkcC8ebav8gDpqs3LMHGHJ1jTSTTuopds/+
ZgOte2wT3Lu+yQLwwNF/lDPyf6ojtzLAT1Fnli+/xAqWJlacZFDlI60RNIo+sDDJ
jbHitQMKXk4exIMQghJnpWtFGKJRdiK8gxZlqdn3ljEXjAXGxPeqAk3YAsI3jfq8
7UT2MEsN+aY22XHIMi8gh7Kon/IcFH0a0+d7eueTCiruuN+F7P/NWJXiGBoA/yta
/ISG6JQeeg7ax21c4t2siLYjt2nzx2/noboO2Ydu2BzNYKD3EaSGplcnY512KIdJ
7QIiCil+VOX4FH6m4HjxplRFbkWzPK4=
-----END CERTIFICATE-----
Generated at Tue Jun 17 01:26:39 2025 by rpki-client