Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/1ffa4420-a77c-3233-b218-428b8ed4c452.roa
File:                     1ffa4420-a77c-3233-b218-428b8ed4c452.roa (raw, json)
Hash identifier:          wQD3azpOtAeNFj+0MvaD3ZrtPqiYtnV+7mCm7dk29g8=
Subject key identifier:   6C:66:17:A8:57:A3:10:C2:75:F2:F9:EF:64:D1:81:F4:B7:54:DE:48
Certificate issuer:       /CN=f52d9dd2-a206-4694-a550-d6639e33e9f6
Certificate serial:       010D0C9F4328584A235D09B98FC4C6E6E192B180
Authority key identifier: BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/1ffa4420-a77c-3233-b218-428b8ed4c452.roa
Signing time:             Mon 09 Jun 2025 21:41:31 +0000
ROA not before:           Mon 09 Jun 2025 21:41:31 +0000
ROA not after:            Sun 07 Sep 2025 21:41:31 +0000
asID:                     40714
IP address blocks:        104.204.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:5d:09:b9:8f:c4:c6:e6:e1:92:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f52d9dd2-a206-4694-a550-d6639e33e9f6
        Validity
            Not Before: Jun  9 21:41:31 2025 GMT
            Not After : Sep  7 21:41:31 2025 GMT
        Subject: CN=4e1fb430-673d-4e0b-add5-456de6f548fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:61:85:b0:e8:62:62:ee:98:4d:23:2d:f7:80:
                    00:db:09:dc:b0:f1:83:91:1f:e8:90:1f:04:9e:2c:
                    2a:d2:ba:89:b8:86:f1:dc:96:ed:8f:2e:9c:7d:0a:
                    32:2d:b7:ec:2b:77:b7:18:e7:a5:71:43:86:0f:5d:
                    d9:3d:07:c0:23:d1:b0:53:37:38:49:5d:cf:be:94:
                    39:2e:d1:c0:de:83:5c:8f:62:74:5f:80:18:4c:f3:
                    31:1b:26:ca:a7:49:87:d2:0f:45:18:2e:2d:83:be:
                    51:05:61:c9:7a:a9:71:81:61:ed:25:44:c2:8e:15:
                    66:7b:0d:16:5f:9a:73:ae:b4:d6:06:42:ab:90:13:
                    23:fc:50:bf:63:56:8e:06:c2:62:d6:36:87:5e:c3:
                    a7:29:48:ce:af:d2:96:88:9a:16:90:32:9e:0e:77:
                    49:80:51:ae:5e:5f:6c:19:01:c2:3d:d0:78:52:b0:
                    30:92:a3:2b:d9:cc:b4:6a:b7:47:9a:ab:bf:e5:e9:
                    38:a5:c1:48:57:9e:14:9b:a9:28:1c:4d:91:73:bc:
                    c9:24:c5:0e:05:78:06:59:d3:be:3d:73:c1:b1:db:
                    d6:9b:ff:38:f3:3a:33:6d:3c:92:96:20:18:82:5e:
                    30:76:01:c4:35:80:19:ef:bb:71:48:7b:31:2e:d9:
                    7f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:66:17:A8:57:A3:10:C2:75:F2:F9:EF:64:D1:81:F4:B7:54:DE:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/1ffa4420-a77c-3233-b218-428b8ed4c452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl

            X509v3 Authority Key Identifier:
                keyid:BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.204.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:f7:9e:42:d1:e2:9c:bd:56:7f:9b:74:7b:4a:3b:b5:b8:16:
         44:4a:c6:74:ee:72:19:1c:34:82:98:76:59:5f:be:12:25:b7:
         73:50:cf:e1:48:94:dd:b3:1b:71:dd:f9:68:26:15:37:b7:1c:
         34:03:ec:8f:b0:2d:bc:47:84:bb:d2:3c:93:06:7e:90:af:52:
         cb:d2:2d:64:a1:67:5d:74:ca:10:dd:8b:56:6f:10:86:b9:c2:
         4e:80:97:9a:28:fc:10:f5:fd:5d:d5:2c:6a:ab:a1:8b:d6:ce:
         18:f1:56:14:8e:40:16:54:64:f7:35:fa:f1:fd:07:9e:54:ae:
         6e:be:09:07:80:e6:d1:6c:a1:07:8c:7f:04:8d:6c:bf:8b:49:
         84:ac:76:22:fe:10:04:04:3f:8c:8d:dc:69:90:82:3e:dd:14:
         ec:27:9b:35:95:22:7e:9e:6d:0a:2a:3d:0e:be:a1:cd:f7:bb:
         31:76:fe:98:07:10:4a:31:68:5f:f0:57:df:a9:39:5c:3f:ee:
         ec:f2:01:8f:71:29:9e:8a:54:25:83:5f:2a:69:b0:51:e5:1c:
         10:09:86:3b:ee:63:f9:5d:f9:b8:63:c3:52:73:18:04:77:a4:
         4a:08:b8:98:d6:59:6b:13:9b:02:45:ae:d9:d4:58:6c:11:63:
         3d:e9:3a:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojXQm5j8TG5uGSsYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjUyZDlkZDItYTIwNi00Njk0LWE1NTAtZDY2MzllMzNl
OWY2MB4XDTI1MDYwOTIxNDEzMVoXDTI1MDkwNzIxNDEzMVowLzEtMCsGA1UEAxMk
NGUxZmI0MzAtNjczZC00ZTBiLWFkZDUtNDU2ZGU2ZjU0OGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGGFsOhiYu6YTSMt94AA2wncsPGDkR/okB8E
niwq0rqJuIbx3Jbtjy6cfQoyLbfsK3e3GOelcUOGD13ZPQfAI9GwUzc4SV3PvpQ5
LtHA3oNcj2J0X4AYTPMxGybKp0mH0g9FGC4tg75RBWHJeqlxgWHtJUTCjhVmew0W
X5pzrrTWBkKrkBMj/FC/Y1aOBsJi1jaHXsOnKUjOr9KWiJoWkDKeDndJgFGuXl9s
GQHCPdB4UrAwkqMr2cy0ardHmqu/5ek4pcFIV54Um6koHE2Rc7zJJMUOBXgGWdO+
PXPBsdvWm/848zozbTySliAYgl4wdgHENYAZ77txSHsxLtl/JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGxmF6hXoxDCdfL572TRgfS3VN5IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNTJk
OWRkMi1hMjA2LTQ2OTQtYTU1MC1kNjYzOWUzM2U5ZjYvMWZmYTQ0MjAtYTc3Yy0z
MjMzLWIyMTgtNDI4YjhlZDRjNDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjUyZDlkZDItYTIwNi00Njk0LWE1
NTAtZDY2MzllMzNlOWY2L2Y1MmQ5ZGQyLWEyMDYtNDY5NC1hNTUwLWQ2NjM5ZTMz
ZTlmNi5jcmwwHwYDVR0jBBgwFoAUvef1VICmOwv+tubvHg+zGOF337kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNTJkOWRkMi1hMjA2LTQ2OTQtYTU1MC1kNjYz
OWUzM2U5ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMyQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACT3nkLR4py9Vn+bdHtKO7W4FkRKxnTuchkcNIKYdllfvhIlt3NQz+FI
lN2zG3Hd+WgmFTe3HDQD7I+wLbxHhLvSPJMGfpCvUsvSLWShZ110yhDdi1ZvEIa5
wk6Al5oo/BD1/V3VLGqroYvWzhjxVhSOQBZUZPc1+vH9B55Urm6+CQeA5tFsoQeM
fwSNbL+LSYSsdiL+EAQEP4yN3GmQgj7dFOwnmzWVIn6ebQoqPQ6+oc33uzF2/pgH
EEoxaF/wV9+pOVw/7uzyAY9xKZ6KVCWDXyppsFHlHBAJhjvuY/ld+bhjw1JzGAR3
pEoIuJjWWWsTmwJFrtnUWGwRYz3pOtE=
-----END CERTIFICATE-----
Generated at Thu Jun 19 09:06:24 2025 by rpki-client