Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fc51587e-0819-3d2b-9348-efa71bb3cf65.roa
File:                     fc51587e-0819-3d2b-9348-efa71bb3cf65.roa (raw, json)
Hash identifier:          CsrAoZ/sP4FVycGD4wAc8uS8YBtnnQAFLyV/t0eSEoM=
Subject key identifier:   05:C7:B4:1E:8F:A7:42:6D:DD:1C:84:E7:4B:05:A2:44:74:4E:B2:DB
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584A7E7B896015DA83538FCC7400
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fc51587e-0819-3d2b-9348-efa71bb3cf65.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        104.237.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:89:60:15:da:83:53:8f:cc:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=fa056968-0e08-44b4-9a5e-4c34e5e974bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:44:a0:23:14:5f:97:61:88:b9:3d:10:ff:cb:
                    98:53:db:1f:fd:23:10:f9:b3:b5:4e:d1:3f:81:d9:
                    85:09:3e:4c:c2:53:22:88:93:77:c1:08:86:b2:46:
                    91:8b:2f:6d:dc:25:e2:ef:0a:8f:87:51:d3:e3:35:
                    44:48:e4:e1:c5:de:27:aa:c6:3d:72:b7:15:96:e9:
                    00:97:c7:14:06:63:e5:2b:e9:a5:ff:eb:38:ff:58:
                    2f:55:b1:bb:6d:79:bd:0e:f7:8d:0f:c2:39:db:12:
                    db:b3:9e:d1:78:79:75:58:70:32:b9:98:03:bc:7f:
                    1e:8b:75:34:49:61:9b:e1:25:08:a6:89:8f:0f:91:
                    68:c5:e7:9c:d4:8b:1e:77:fb:6d:4d:2a:fc:1c:9e:
                    b8:dc:8d:28:17:81:28:6a:78:b4:9f:52:87:97:0f:
                    d7:a9:35:84:00:64:94:b3:f0:ed:a6:c3:c7:6e:96:
                    58:d8:27:06:92:2e:a7:86:5d:de:33:84:8c:5a:69:
                    f6:03:f5:56:76:dd:39:b8:2d:d6:d9:c6:5a:7a:f4:
                    57:b2:55:50:6c:70:89:53:33:ba:c3:63:8a:55:f5:
                    de:99:d0:04:9d:1c:f3:b0:9c:bd:e3:d5:8a:37:16:
                    ee:7d:53:d1:d8:c8:38:91:0a:c8:2c:04:be:db:47:
                    49:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C7:B4:1E:8F:A7:42:6D:DD:1C:84:E7:4B:05:A2:44:74:4E:B2:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/fc51587e-0819-3d2b-9348-efa71bb3cf65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:39:bc:19:83:74:b3:d2:c5:38:15:b3:a0:98:63:64:6d:76:
         63:89:60:59:30:4d:a7:e8:fb:b9:3f:27:6e:3e:44:2f:a1:4e:
         d2:96:e0:e2:d9:5e:c4:7c:21:61:e2:ab:6c:a1:b5:57:3d:78:
         30:00:60:ab:08:26:f9:e1:da:22:f0:ef:df:c6:0c:7f:6b:41:
         1a:67:7f:a4:22:41:a2:f8:23:b1:16:23:9a:d3:97:2c:b2:ba:
         c9:89:53:85:7e:01:51:e3:55:26:e0:23:a0:94:81:1e:1f:a7:
         c4:be:87:41:b8:35:16:49:7d:b6:17:a2:4d:a2:ca:31:e1:06:
         ec:4a:73:27:e4:77:ee:d2:af:79:90:d9:fe:7d:ae:84:3e:a4:
         70:5b:e2:7d:6a:4b:4f:d0:88:64:ee:ad:4a:0d:ab:cf:61:35:
         8a:33:e8:96:ef:85:52:77:60:63:f9:84:80:0e:98:78:0f:dc:
         31:61:56:b0:74:5e:d4:21:16:3f:3f:78:99:e0:93:48:26:92:
         71:d9:72:62:8b:c7:20:b7:9b:8a:16:78:ae:3e:c3:d0:f7:a9:
         c0:24:fc:26:76:f7:5f:60:97:3d:b4:38:86:89:4d:eb:7b:1c:
         13:2c:80:79:f0:c7:56:77:9c:0b:7f:66:fd:55:f2:ac:e9:74:
         4e:a8:f1:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4lgFdqDU4/MdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
ZmEwNTY5NjgtMGUwOC00NGI0LTlhNWUtNGMzNGU1ZTk3NGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0SgIxRfl2GIuT0Q/8uYU9sf/SMQ+bO1TtE/
gdmFCT5MwlMiiJN3wQiGskaRiy9t3CXi7wqPh1HT4zVESOThxd4nqsY9crcVlukA
l8cUBmPlK+ml/+s4/1gvVbG7bXm9DveND8I52xLbs57ReHl1WHAyuZgDvH8ei3U0
SWGb4SUIpomPD5Foxeec1Ised/ttTSr8HJ643I0oF4Eoani0n1KHlw/XqTWEAGSU
s/DtpsPHbpZY2CcGki6nhl3eM4SMWmn2A/VWdt05uC3W2cZaevRXslVQbHCJUzO6
w2OKVfXemdAEnRzzsJy949WKNxbufVPR2Mg4kQrILAS+20dJJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAXHtB6Pp0Jt3RyE50sFokR0TrLbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZmM1MTU4N2UtMDgxOS0z
ZDJiLTkzNDgtZWZhNzFiYjNjZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaO24MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFg5vBmDdLPSxTgVs6CYY2RtdmOJYFkwTafo+7k/J24+RC+hTtKW4OLZ
XsR8IWHiq2yhtVc9eDAAYKsIJvnh2iLw79/GDH9rQRpnf6QiQaL4I7EWI5rTlyyy
usmJU4V+AVHjVSbgI6CUgR4fp8S+h0G4NRZJfbYXok2iyjHhBuxKcyfkd+7Sr3mQ
2f59roQ+pHBb4n1qS0/QiGTurUoNq89hNYoz6JbvhVJ3YGP5hIAOmHgP3DFhVrB0
XtQhFj8/eJngk0gmknHZcmKLxyC3m4oWeK4+w9D3qcAk/CZ2919glz20OIaJTet7
HBMsgHnwx1Z3nAt/Zv1V8qzpdE6o8f0=
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:32:46 2025 by rpki-client