Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f1089b5-25e9-3ce9-82f4-e9604812d69e.roa
File:                     5f1089b5-25e9-3ce9-82f4-e9604812d69e.roa (raw, json)
Hash identifier:          d7J4Ca1ot5sHUt2LcDcMv4ks64TeH0FRHW1w6hqECiY=
Subject key identifier:   C1:16:9E:7B:8C:1B:EA:28:46:2B:74:B5:FA:CB:22:A8:7C:88:56:45
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AB22176BD2F8BEC21594D8A80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f1089b5-25e9-3ce9-82f4-e9604812d69e.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     18779
IP address blocks:        104.253.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:76:bd:2f:8b:ec:21:59:4d:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=310eda3e-5b2c-4f13-beab-bad1ac7ef6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:f7:48:9d:8f:91:7b:d9:82:44:1c:a6:21:
                    38:c1:48:c1:56:bd:fd:ea:dc:19:cd:29:3f:9c:e3:
                    b1:13:b9:ac:be:4c:40:0f:31:e3:17:0d:9d:16:58:
                    24:81:5e:0f:ed:04:6a:94:a1:bc:71:6a:68:d7:d1:
                    a0:30:4c:eb:06:a4:8d:02:4c:02:5b:b0:80:94:f4:
                    7e:1c:c7:9c:6a:fa:e1:6c:25:c9:0d:31:f5:ec:89:
                    cc:1c:29:d0:bd:39:e7:03:e9:0c:93:6d:69:e9:74:
                    e1:2e:c3:b7:f2:c8:75:59:ad:25:c8:b3:68:d5:d0:
                    2f:6e:50:45:9a:a9:0d:ba:26:c3:be:d5:6e:4c:a5:
                    ad:42:07:33:8d:91:9a:b5:82:3d:ad:12:8f:36:36:
                    9f:ea:0b:9c:78:75:f5:77:2b:8a:a8:b1:ca:df:bd:
                    8c:8b:e9:2c:f8:74:d1:50:87:89:5b:13:87:d0:d1:
                    c7:45:f8:56:1e:44:5d:c4:a8:19:9e:c6:46:d0:e2:
                    d6:83:61:3d:61:da:ce:90:ad:fd:83:a9:d5:1d:e3:
                    af:09:1e:45:39:81:cc:6b:88:d5:de:9b:de:d9:a8:
                    cc:c9:b7:2f:10:b9:e9:92:3f:d7:ff:6c:09:ee:28:
                    f3:5c:02:4b:b8:07:ad:20:1d:01:5f:22:df:f0:d7:
                    57:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:16:9E:7B:8C:1B:EA:28:46:2B:74:B5:FA:CB:22:A8:7C:88:56:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5f1089b5-25e9-3ce9-82f4-e9604812d69e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:24:d8:06:38:25:00:07:72:cb:e6:f6:fc:2d:4a:c6:e8:c0:
         4a:cf:3a:fa:5f:e6:68:32:03:b0:7e:60:a3:82:46:c5:f2:14:
         4a:9e:dc:6e:7c:52:9c:31:89:87:5a:2f:51:aa:32:b4:a7:4f:
         6f:58:1b:7c:24:f7:aa:cb:60:1c:70:48:f7:1f:83:93:7b:9c:
         48:ec:38:8c:1a:93:b8:fc:02:a2:83:a4:0d:7b:90:e2:4a:89:
         c9:6f:55:34:e8:05:15:da:bb:70:cd:4d:24:1c:e8:8d:5f:05:
         e5:cb:72:40:aa:a0:9e:6a:a7:59:4d:0a:a4:a4:9b:4f:8d:5d:
         9a:ba:a7:83:34:f5:65:a4:17:51:1f:0c:12:27:50:90:97:3d:
         25:36:80:86:80:e2:27:6c:24:3a:94:86:f8:61:8b:5a:16:47:
         80:5f:00:1c:cd:61:e0:14:31:30:81:6d:78:63:de:39:f3:ae:
         ac:98:bd:51:7c:fc:21:df:64:3d:3f:4a:18:1d:79:47:9a:9c:
         84:c9:07:98:bf:5e:3e:96:c3:64:d9:c4:f6:8c:ac:c9:f2:99:
         0e:99:75:4f:d7:e6:2d:89:e6:c1:a3:b9:dd:1a:99:22:d8:7d:
         07:f4:89:84:f3:6c:59:97:86:05:29:68:14:76:7f:76:41:c7:
         77:a8:80:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyIXa9L4vsIVlNioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MzEwZWRhM2UtNWIyYy00ZjEzLWJlYWItYmFkMWFjN2VmNmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+73SJ2PkXvZgkQcpiE4wUjBVr396twZzSk/
nOOxE7msvkxADzHjFw2dFlgkgV4P7QRqlKG8cWpo19GgMEzrBqSNAkwCW7CAlPR+
HMecavrhbCXJDTH17InMHCnQvTnnA+kMk21p6XThLsO38sh1Wa0lyLNo1dAvblBF
mqkNuibDvtVuTKWtQgczjZGatYI9rRKPNjaf6guceHX1dyuKqLHK372Mi+ks+HTR
UIeJWxOH0NHHRfhWHkRdxKgZnsZG0OLWg2E9YdrOkK39g6nVHeOvCR5FOYHMa4jV
3pve2ajMybcvELnpkj/X/2wJ7ijzXAJLuAetIB0BXyLf8NdXOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMEWnnuMG+ooRit0tfrLIqh8iFZFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNWYxMDg5YjUtMjVlOS0z
Y2U5LTgyZjQtZTk2MDQ4MTJkNjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP0JMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFsk2AY4JQAHcsvm9vwtSsbowErPOvpf5mgyA7B+YKOCRsXyFEqe3G58
UpwxiYdaL1GqMrSnT29YG3wk96rLYBxwSPcfg5N7nEjsOIwak7j8AqKDpA17kOJK
iclvVTToBRXau3DNTSQc6I1fBeXLckCqoJ5qp1lNCqSkm0+NXZq6p4M09WWkF1Ef
DBInUJCXPSU2gIaA4idsJDqUhvhhi1oWR4BfABzNYeAUMTCBbXhj3jnzrqyYvVF8
/CHfZD0/ShgdeUeanITJB5i/Xj6Ww2TZxPaMrMnymQ6ZdU/X5i2J5sGjud0amSLY
fQf0iYTzbFmXhgUpaBR2f3ZBx3eogPs=
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:18:15 2025 by rpki-client