Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5498e469-cb6d-37a7-941d-ab18e13b1419.roa
File:                     5498e469-cb6d-37a7-941d-ab18e13b1419.roa (raw, json)
Hash identifier:          DRX35DEGGcbj5H7MlshIMmjTbs59G5ApddL1z6hW0+Q=
Subject key identifier:   2A:72:F4:FC:DC:1A:7A:0B:37:4E:2B:69:41:6F:46:86:27:B3:FD:CD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AB220C905650CEE3BA5908F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5498e469-cb6d-37a7-941d-ab18e13b1419.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     18779
IP address blocks:        104.252.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:c9:05:65:0c:ee:3b:a5:90:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=598a0e2d-f6f6-4c57-8768-a9b722533181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a8:fc:cb:e8:7b:e7:56:0b:9a:a3:36:08:63:
                    2d:55:dc:e4:75:cf:ba:21:2a:38:e4:fb:f0:54:42:
                    09:12:44:c9:09:c7:03:cf:f5:b5:28:43:c8:89:8c:
                    c4:3a:ad:23:73:24:29:3d:e1:ea:a6:2f:b2:09:9a:
                    93:65:0f:56:95:f2:36:50:12:23:1f:a5:e4:83:42:
                    ba:a1:0b:e6:ea:e2:8d:8b:72:ee:52:5d:e0:5a:e4:
                    03:39:38:cb:33:02:13:19:0e:31:4c:85:85:c4:d7:
                    08:11:9f:70:12:0f:ad:d6:40:88:c7:3f:8d:60:3a:
                    19:86:6c:55:49:2f:9e:0e:c9:8e:90:a3:ba:10:ed:
                    2e:65:17:6a:67:fa:1a:5b:e1:bf:f0:d8:d6:82:55:
                    ec:a8:6a:3a:38:4d:ea:c7:f6:20:36:64:f9:2d:6e:
                    04:29:7b:a4:d0:c1:d3:e8:3c:e0:be:94:ce:1a:a0:
                    f8:e3:7f:0f:8c:a1:72:7f:00:ac:60:b4:bc:e8:40:
                    dd:0e:16:ee:58:a1:d0:2d:8c:ba:17:57:1d:5b:03:
                    93:0b:b6:30:5e:06:b6:01:21:1f:85:e4:20:4e:40:
                    bc:a0:c7:11:23:f6:07:20:36:e8:b3:49:fa:b2:c6:
                    61:ad:8d:8a:e5:b5:d5:a5:ce:a3:8a:85:1f:3f:4c:
                    86:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:72:F4:FC:DC:1A:7A:0B:37:4E:2B:69:41:6F:46:86:27:B3:FD:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5498e469-cb6d-37a7-941d-ab18e13b1419.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ba:cb:e5:82:d8:e0:43:6d:98:13:12:44:4f:d6:31:49:a6:
         95:44:81:9f:e1:92:4e:53:23:1e:6d:ec:db:46:6f:55:c2:d2:
         b1:01:ff:95:00:72:f8:f4:f2:e1:a6:c6:74:4f:50:c8:e3:15:
         a5:3e:28:71:dc:d4:a0:58:49:df:77:01:78:af:1b:70:63:9c:
         14:0b:1d:8c:33:cd:88:34:64:34:89:dc:14:cc:55:b9:28:5a:
         9e:83:08:e3:7b:20:6c:d8:c2:63:75:af:2f:21:2b:ff:eb:7c:
         e5:d2:84:44:80:2a:68:b0:3f:08:4b:9c:cf:6d:04:4f:5f:cb:
         f3:f6:ef:29:12:04:71:9d:95:76:7c:03:30:ea:93:bd:3d:07:
         f2:ff:36:4c:14:65:35:76:2b:72:b2:27:ac:4f:ef:62:fd:1c:
         de:d4:c4:87:0f:93:64:23:9e:fa:87:b6:a2:8f:ca:0a:05:3a:
         1c:42:0f:7d:dd:bb:d0:8d:50:4c:be:82:83:70:ab:f1:6f:5e:
         0b:5b:3b:7f:e8:6f:a3:e5:34:d8:a3:fe:ff:63:13:4c:6e:9d:
         4d:55:21:a2:01:56:40:a1:a5:27:2b:8a:bb:7e:1f:5f:79:61:
         f8:8d:6b:81:dc:3a:78:7a:2a:9a:8c:d2:e5:e0:13:1d:5c:cc:
         5c:74:9e:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIMkFZQzuO6WQjwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NTk4YTBlMmQtZjZmNi00YzU3LTg3NjgtYTliNzIyNTMzMTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6j8y+h751YLmqM2CGMtVdzkdc+6ISo45Pvw
VEIJEkTJCccDz/W1KEPIiYzEOq0jcyQpPeHqpi+yCZqTZQ9WlfI2UBIjH6Xkg0K6
oQvm6uKNi3LuUl3gWuQDOTjLMwITGQ4xTIWFxNcIEZ9wEg+t1kCIxz+NYDoZhmxV
SS+eDsmOkKO6EO0uZRdqZ/oaW+G/8NjWglXsqGo6OE3qx/YgNmT5LW4EKXuk0MHT
6DzgvpTOGqD4438PjKFyfwCsYLS86EDdDhbuWKHQLYy6F1cdWwOTC7YwXga2ASEf
heQgTkC8oMcRI/YHIDbos0n6ssZhrY2K5bXVpc6jioUfP0yGFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCpy9PzcGnoLN04raUFvRoYns/3NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTQ5OGU0NjktY2I2ZC0z
N2E3LTk0MWQtYWIxOGUxM2IxNDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaPxSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAu6y+WC2OBDbZgTEkRP1jFJppVEgZ/hkk5TIx5t7NtGb1XC0rEB/5UA
cvj08uGmxnRPUMjjFaU+KHHc1KBYSd93AXivG3BjnBQLHYwzzYg0ZDSJ3BTMVbko
Wp6DCON7IGzYwmN1ry8hK//rfOXShESAKmiwPwhLnM9tBE9fy/P27ykSBHGdlXZ8
AzDqk709B/L/NkwUZTV2K3KyJ6xP72L9HN7UxIcPk2QjnvqHtqKPygoFOhxCD33d
u9CNUEy+goNwq/FvXgtbO3/ob6PlNNij/v9jE0xunU1VIaIBVkChpScrirt+H195
YfiNa4HcOnh6KpqM0uXgEx1czFx0nh0=
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:16:23 2025 by rpki-client