Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f5e5377-e879-34ff-a2cf-7a6a21f6a399.roa
File:                     8f5e5377-e879-34ff-a2cf-7a6a21f6a399.roa (raw, json)
Hash identifier:          S64X108SBB4AX7n+6DdYG9bRkzSi70bTXSw7tbDnSfU=
Subject key identifier:   0F:32:FB:10:4B:63:5B:BD:34:E5:A0:68:00:5C:BB:FE:12:22:77:F5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AB220B808AE07ED27112A0F80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f5e5377-e879-34ff-a2cf-7a6a21f6a399.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     18779
IP address blocks:        104.252.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:b8:08:ae:07:ed:27:11:2a:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=bb105fcd-6eb7-4197-9e76-753d9b660aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:75:4b:a2:6a:a2:f2:56:fc:33:f6:05:53:58:
                    fe:d6:84:ed:2d:76:96:da:53:1f:77:2c:c9:15:35:
                    f7:ba:c2:b3:af:c8:7a:f8:15:d3:ca:59:62:46:37:
                    22:cf:71:05:e6:4e:3a:79:b2:5d:35:27:c9:6d:ed:
                    05:a7:6e:6d:f9:5d:d2:e9:0b:dc:02:4c:ba:65:e6:
                    ed:51:ee:81:40:0e:6c:89:59:8a:50:04:f1:50:82:
                    60:03:eb:df:81:bf:7d:95:d3:e3:ce:92:96:cf:8a:
                    b2:37:ea:2a:b4:5a:c6:57:4a:05:f6:17:a6:18:44:
                    bf:27:39:a1:44:80:cb:2e:60:93:49:e2:02:03:15:
                    2c:a9:58:57:b6:74:05:5b:a0:bf:37:ac:b2:af:9f:
                    44:5f:60:d5:77:1d:e4:5c:af:c6:5c:a9:f6:b9:7a:
                    cc:c1:e0:ca:19:60:67:6f:d3:4a:9d:7c:59:35:e1:
                    f1:16:c4:cf:09:f4:16:4b:79:4c:7b:db:63:42:bd:
                    8b:ab:94:ea:bf:55:0f:ed:52:1d:ba:1a:25:87:31:
                    32:71:01:cd:40:20:b5:21:55:02:cb:fb:f4:f1:8d:
                    5a:0c:cd:67:b1:ca:14:5c:b5:28:2b:ae:38:d3:af:
                    69:b4:11:cc:80:c1:74:28:d3:16:8a:cf:33:d0:3f:
                    a3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:32:FB:10:4B:63:5B:BD:34:E5:A0:68:00:5C:BB:FE:12:22:77:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f5e5377-e879-34ff-a2cf-7a6a21f6a399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:97:05:14:ed:88:8a:61:c8:6b:f4:c1:8b:bb:21:8f:eb:b5:
         9c:7e:ba:e3:c9:16:55:45:8e:0f:5c:e0:c3:99:3d:a4:3f:bd:
         19:26:29:e4:6f:9b:45:68:0b:46:ae:30:57:14:a1:9a:0a:23:
         79:f5:de:ae:39:b8:0c:b7:8e:0d:7b:38:d3:6d:03:2b:ac:cb:
         8c:e5:bd:3f:f7:f3:1e:2c:72:94:9e:98:19:4a:6f:b8:f3:cb:
         6b:d6:1b:27:5e:91:87:ee:94:39:a8:74:4c:f5:49:96:21:c8:
         78:59:0d:03:10:75:c6:ec:a5:5a:0b:10:fa:06:47:81:d8:ba:
         2a:8d:ad:fb:fc:e8:23:5f:9b:80:8e:ec:56:6d:ef:7b:0c:9e:
         ab:f8:e0:89:3d:52:04:84:7e:15:4c:72:b0:df:0a:da:c6:19:
         71:ba:1d:bb:ed:8e:ae:b9:eb:84:15:12:5f:55:7d:91:ee:07:
         bf:f0:e0:ee:14:06:c2:fe:85:bf:52:97:e5:63:6f:c6:ba:83:
         7c:90:2f:43:f6:b6:bf:d1:c5:56:97:27:2a:36:89:dd:a4:26:
         dd:1e:42:1b:28:3e:27:af:a0:01:1a:37:a7:bd:95:ec:db:47:
         2a:24:b9:b7:db:73:ec:09:f5:ca:5e:0d:ca:7f:7b:db:17:ae:
         23:f7:78:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyILgIrgftJxEqD4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YmIxMDVmY2QtNmViNy00MTk3LTllNzYtNzUzZDliNjYwYWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnVLomqi8lb8M/YFU1j+1oTtLXaW2lMfdyzJ
FTX3usKzr8h6+BXTylliRjciz3EF5k46ebJdNSfJbe0Fp25t+V3S6QvcAky6Zebt
Ue6BQA5siVmKUATxUIJgA+vfgb99ldPjzpKWz4qyN+oqtFrGV0oF9hemGES/Jzmh
RIDLLmCTSeICAxUsqVhXtnQFW6C/N6yyr59EX2DVdx3kXK/GXKn2uXrMweDKGWBn
b9NKnXxZNeHxFsTPCfQWS3lMe9tjQr2Lq5Tqv1UP7VIduholhzEycQHNQCC1IVUC
y/v08Y1aDM1nscoUXLUoK644069ptBHMgMF0KNMWis8z0D+jvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA8y+xBLY1u9NOWgaABcu/4SInf1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOGY1ZTUzNzctZTg3OS0z
NGZmLWEyY2YtN2E2YTIxZjZhMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPxYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+XBRTtiIphyGv0wYu7IY/rtZx+uuPJFlVFjg9c4MOZPaQ/vRkmKeRv
m0VoC0auMFcUoZoKI3n13q45uAy3jg17ONNtAyusy4zlvT/38x4scpSemBlKb7jz
y2vWGydekYfulDmodEz1SZYhyHhZDQMQdcbspVoLEPoGR4HYuiqNrfv86CNfm4CO
7FZt73sMnqv44Ik9UgSEfhVMcrDfCtrGGXG6Hbvtjq6564QVEl9VfZHuB7/w4O4U
BsL+hb9Sl+Vjb8a6g3yQL0P2tr/RxVaXJyo2id2kJt0eQhsoPievoAEaN6e9lezb
Ryokubfbc+wJ9cpeDcp/e9sXriP3eNk=
-----END CERTIFICATE-----
Generated at Mon Aug 4 08:33:19 2025 by rpki-client