Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab5cdec2-a45f-3364-a6fb-d7d007214a9d.roa
File:                     ab5cdec2-a45f-3364-a6fb-d7d007214a9d.roa (raw, json)
Hash identifier:          MQ6WKfGZBdgJT7Gy7dVyZT2Tgd0Y2Q4W3XWrZnR7sh8=
Subject key identifier:   76:49:6C:A2:64:EB:37:A4:D6:FB:6C:00:4D:4E:78:C8:5E:AE:8F:77
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849E7BA63DEB36418601DAD4440
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab5cdec2-a45f-3364-a6fb-d7d007214a9d.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     7029
IP address blocks:        104.253.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:63:de:b3:64:18:60:1d:ad:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=4a83fee1-ecdb-4946-8d5f-7d7e18d22583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f5:58:f8:41:e1:10:eb:7d:61:d8:e3:a1:be:
                    3d:a0:8a:89:fc:d0:c5:f1:1a:36:bc:25:c3:ea:80:
                    a3:30:40:95:3f:70:0a:5a:51:41:bd:c5:07:98:42:
                    90:f7:94:b5:ea:c3:05:54:19:c8:f5:c4:91:a5:d1:
                    3e:e1:7e:fc:5f:8e:27:69:fa:95:58:93:73:c7:c3:
                    56:aa:8a:fd:6d:12:68:be:ad:18:2b:f4:24:eb:6c:
                    68:6a:5f:49:03:e1:7e:72:37:18:f9:d3:69:da:8a:
                    c2:ea:64:4d:70:0c:5b:1c:10:d6:29:17:2a:de:c5:
                    ee:56:a9:46:37:33:3c:73:31:4a:86:32:d1:c5:31:
                    0f:e1:29:57:a4:22:f4:12:2f:d2:bb:50:30:c0:0b:
                    81:df:3f:8f:0c:c8:2a:15:30:8d:2d:4e:7b:ed:81:
                    ff:39:a4:97:a5:da:21:6b:56:ff:1b:ee:c8:51:b1:
                    78:3f:56:3b:d6:56:7c:58:c4:2b:57:ef:c4:29:51:
                    ed:72:fc:1a:87:44:18:bf:f6:69:00:9c:1d:66:2d:
                    52:3a:f8:e1:e2:13:69:6e:7c:fb:68:c4:7c:73:9f:
                    d8:bd:03:cb:a7:64:71:b8:0b:97:af:bb:e7:c8:53:
                    c1:1d:10:7b:16:a2:2c:f3:5b:8e:cf:6a:ec:7e:d8:
                    f7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:49:6C:A2:64:EB:37:A4:D6:FB:6C:00:4D:4E:78:C8:5E:AE:8F:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ab5cdec2-a45f-3364-a6fb-d7d007214a9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c8:92:60:04:2a:7b:6f:99:f8:42:8d:98:90:ca:57:3a:85:
         7e:b9:49:5e:5c:79:e7:60:37:bb:02:6d:bd:17:db:e4:64:c1:
         aa:23:ab:ee:da:e4:6e:30:82:95:4f:02:ad:a4:da:35:92:38:
         66:8f:53:54:c6:10:11:32:d7:43:f4:7e:76:ab:eb:77:80:a7:
         41:9a:a9:29:3c:88:62:1a:f4:56:3c:10:b5:4c:6d:7e:0e:b5:
         9e:cd:7a:46:5f:66:04:30:82:da:65:41:98:15:43:66:0c:5c:
         04:a9:72:28:5a:e0:c9:63:47:ec:83:6f:d2:dd:34:2a:c2:98:
         58:88:92:48:d2:2e:ec:d3:2d:6e:23:08:0c:c1:92:ee:c7:ec:
         81:80:a7:5b:17:a2:38:d9:d4:6c:9e:90:df:9c:2e:98:82:6b:
         82:1a:8e:3b:be:99:74:3f:ee:1e:a2:88:03:78:dc:be:9e:b7:
         bd:a4:39:5e:94:e7:e6:e1:59:3e:23:d4:a1:49:ab:95:5a:8a:
         13:75:31:f7:fc:2e:21:e8:f3:e6:a8:cf:9c:49:d2:50:e0:50:
         94:8c:57:b9:b1:53:9f:90:46:cd:14:93:62:8e:18:fb:8b:28:
         81:14:5c:df:3d:b1:a0:db:37:dd:4e:0b:3e:d1:82:37:7a:1b:
         ad:86:b6:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnumPes2QYYB2tREAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
NGE4M2ZlZTEtZWNkYi00OTQ2LThkNWYtN2Q3ZTE4ZDIyNTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPVY+EHhEOt9Ydjjob49oIqJ/NDF8Ro2vCXD
6oCjMECVP3AKWlFBvcUHmEKQ95S16sMFVBnI9cSRpdE+4X78X44nafqVWJNzx8NW
qor9bRJovq0YK/Qk62xoal9JA+F+cjcY+dNp2orC6mRNcAxbHBDWKRcq3sXuVqlG
NzM8czFKhjLRxTEP4SlXpCL0Ei/Su1AwwAuB3z+PDMgqFTCNLU577YH/OaSXpdoh
a1b/G+7IUbF4P1Y71lZ8WMQrV+/EKVHtcvwah0QYv/ZpAJwdZi1SOvjh4hNpbnz7
aMR8c5/YvQPLp2RxuAuXr7vnyFPBHRB7FqIs81uOz2rsftj3UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHZJbKJk6zek1vtsAE1OeMhero93MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYWI1Y2RlYzItYTQ1Zi0z
MzY0LWE2ZmItZDdkMDA3MjE0YTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLIkmAEKntvmfhCjZiQylc6hX65SV5ceedgN7sCbb0X2+Rkwaojq+7a
5G4wgpVPAq2k2jWSOGaPU1TGEBEy10P0fnar63eAp0GaqSk8iGIa9FY8ELVMbX4O
tZ7NekZfZgQwgtplQZgVQ2YMXASpciha4MljR+yDb9LdNCrCmFiIkkjSLuzTLW4j
CAzBku7H7IGAp1sXojjZ1GyekN+cLpiCa4Iajju+mXQ/7h6iiAN43L6et72kOV6U
5+bhWT4j1KFJq5VaihN1Mff8LiHo8+aoz5xJ0lDgUJSMV7mxU5+QRs0Uk2KOGPuL
KIEUXN89saDbN91OCz7Rgjd6G62GtnI=
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:45:01 2025 by rpki-client