Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ff3c003e-bdd7-3848-ab75-d1a1f683055c.roa
File:                     ff3c003e-bdd7-3848-ab75-d1a1f683055c.roa (raw, json)
Hash identifier:          815IXE1iarhsajQABkAXoEIT1SsVTV/NsSvz6lCyHXU=
Subject key identifier:   B3:8B:BB:87:D3:48:54:50:A7:78:A2:2F:E3:48:4D:04:91:AC:E7:01
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8C70D87D5419412AA5711680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ff3c003e-bdd7-3848-ab75-d1a1f683055c.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     12271
IP address blocks:        104.252.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:d8:7d:54:19:41:2a:a5:71:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=af01d82f-8511-4d9d-b99b-2a08549a79f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8e:0f:d7:6d:19:33:00:db:30:ff:84:f4:e0:
                    30:2b:3c:4f:66:00:33:2b:47:91:aa:63:d0:10:ce:
                    48:f9:ca:62:bb:49:58:73:b9:e7:5d:b2:d2:e2:e5:
                    ea:e1:1b:2e:91:d5:56:1b:f5:56:8a:d3:4d:8c:b7:
                    b5:e1:09:19:b5:3f:7d:2c:43:23:94:fa:37:f8:2f:
                    07:ee:da:52:44:28:e8:5a:d2:7e:59:cc:42:0b:e1:
                    ce:52:6b:c1:4b:b2:66:d8:89:4e:d3:ea:5d:86:74:
                    81:95:01:4a:20:d1:4c:1f:e0:a0:5c:d2:3a:75:85:
                    d1:e5:3b:70:ca:fb:9e:9c:b6:09:f0:63:88:13:26:
                    8b:c1:81:92:91:f9:ee:f5:e5:08:4e:12:21:f4:dd:
                    9e:ec:85:2a:a4:b4:59:b1:0a:0e:91:dc:2e:64:47:
                    28:4b:0c:8d:08:b6:c8:dc:50:7a:6d:ad:29:94:4a:
                    81:ed:d5:e3:14:69:4d:fc:f8:05:68:5f:ad:46:5a:
                    56:a1:2b:96:18:26:0f:00:05:df:2b:bb:75:06:e6:
                    df:1e:2a:42:2e:0c:e0:bb:04:56:88:76:28:ed:88:
                    f7:2e:16:93:e7:7f:e6:fa:a6:2f:59:03:86:d0:29:
                    89:97:6b:37:dd:3c:aa:70:ee:b9:b8:93:85:2d:33:
                    4e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8B:BB:87:D3:48:54:50:A7:78:A2:2F:E3:48:4D:04:91:AC:E7:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ff3c003e-bdd7-3848-ab75-d1a1f683055c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:db:3e:1b:b7:31:b9:84:e7:d2:e4:77:44:d1:14:c0:c9:25:
         57:3b:dc:16:b6:fb:18:1e:3b:87:c0:20:a9:1b:e1:6c:6c:12:
         ce:bd:ed:e4:74:a3:c5:ec:ae:61:fb:76:4f:e6:16:0d:e7:68:
         36:2b:22:28:c2:c7:03:e0:0b:e5:c0:60:18:89:ae:31:63:7e:
         59:2b:50:7f:75:92:4f:9e:28:83:c7:ee:eb:28:fa:ad:ed:63:
         f9:c8:77:ff:17:86:ad:46:34:ca:f0:cb:66:01:6d:93:82:fe:
         13:9e:5c:68:da:34:05:22:ac:2d:a2:3e:bd:b0:8b:97:84:1c:
         09:56:fb:d1:f7:9e:06:4d:23:34:12:aa:68:b2:fc:63:8c:9e:
         ac:ab:9c:07:08:2a:7f:8e:a9:c9:08:7e:03:8d:30:5e:da:2b:
         55:0c:c6:9e:5f:16:55:7a:93:95:08:5d:04:c1:1d:80:0c:58:
         94:02:3d:53:26:d4:5c:bb:ee:76:89:39:41:c0:24:e5:7e:de:
         94:88:4f:b5:17:1c:d5:1a:f9:fe:60:6b:e4:7f:23:01:ee:21:
         fc:ed:b3:a6:56:e6:72:b1:5b:32:44:22:27:b7:b6:c7:3c:d4:
         44:64:55:5a:87:f7:4e:02:7c:d3:25:9c:57:86:3d:b9:ca:1d:
         7d:3b:95:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcNh9VBlBKqVxFoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk
YWYwMWQ4MmYtODUxMS00ZDlkLWI5OWItMmEwODU0OWE3OWY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4I4P120ZMwDbMP+E9OAwKzxPZgAzK0eRqmPQ
EM5I+cpiu0lYc7nnXbLS4uXq4RsukdVWG/VWitNNjLe14QkZtT99LEMjlPo3+C8H
7tpSRCjoWtJ+WcxCC+HOUmvBS7Jm2IlO0+pdhnSBlQFKINFMH+CgXNI6dYXR5Ttw
yvuenLYJ8GOIEyaLwYGSkfnu9eUIThIh9N2e7IUqpLRZsQoOkdwuZEcoSwyNCLbI
3FB6ba0plEqB7dXjFGlN/PgFaF+tRlpWoSuWGCYPAAXfK7t1BubfHipCLgzguwRW
iHYo7Yj3LhaT53/m+qYvWQOG0CmJl2s33TyqcO65uJOFLTNOmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLOLu4fTSFRQp3iiL+NITQSRrOcBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZmYzYzAwM2UtYmRkNy0z
ODQ4LWFiNzUtZDFhMWY2ODMwNTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPyeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFzbPhu3MbmE59Lkd0TRFMDJJVc73Ba2+xgeO4fAIKkb4WxsEs697eR0
o8XsrmH7dk/mFg3naDYrIijCxwPgC+XAYBiJrjFjflkrUH91kk+eKIPH7uso+q3t
Y/nId/8Xhq1GNMrwy2YBbZOC/hOeXGjaNAUirC2iPr2wi5eEHAlW+9H3ngZNIzQS
qmiy/GOMnqyrnAcIKn+OqckIfgONMF7aK1UMxp5fFlV6k5UIXQTBHYAMWJQCPVMm
1Fy77naJOUHAJOV+3pSIT7UXHNUa+f5ga+R/IwHuIfzts6ZW5nKxWzJEIie3tsc8
1ERkVVqH904CfNMlnFeGPbnKHX07lZg=
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:55:10 2025 by rpki-client