Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32bce3c7-4124-37b3-abf3-aa2f79db27aa.roa
File:                     32bce3c7-4124-37b3-abf3-aa2f79db27aa.roa (raw, json)
Hash identifier:          8AJjh92D7ZGRhAQdZRN1nN5a5ypgdoXj0eQ0Hlso+ko=
Subject key identifier:   0E:29:AC:5F:3C:A4:D6:D1:E7:7B:78:50:98:44:99:D7:64:02:F4:0D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B57A35ECF6C79E68E0CAA400
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32bce3c7-4124-37b3-abf3-aa2f79db27aa.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     212238
IP address blocks:        104.164.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:35:ec:f6:c7:9e:68:e0:ca:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=c21421fd-fcdd-41c6-b47d-3ebf3bbb7344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:59:5d:19:51:ca:ea:4f:ec:c8:b1:05:ab:
                    dc:ed:3b:8a:88:4f:a5:bd:0e:75:e3:49:7f:ef:d0:
                    95:88:26:1f:33:1d:c6:f7:6c:45:f5:53:de:ee:ca:
                    40:32:3f:60:f2:66:f2:ab:54:8b:fe:98:c4:c2:f8:
                    ac:b2:ef:38:d1:0a:37:b1:78:20:53:4b:4f:18:c5:
                    01:1c:3f:ed:cd:ed:96:2a:d8:98:2f:42:f1:00:b3:
                    d5:09:4d:58:be:f1:d4:dd:16:85:4c:58:03:1e:d9:
                    a3:69:ba:16:97:cc:30:18:88:90:24:7c:f7:7d:e8:
                    52:17:5e:99:8d:fe:e5:83:41:1a:de:ad:e4:ce:ad:
                    8d:47:b1:9f:15:be:08:44:95:1e:88:e3:4d:94:1b:
                    f8:49:7f:8b:31:10:b4:e3:c2:36:1a:df:0c:5f:4b:
                    29:31:bd:7a:3c:00:55:1c:1f:2c:5e:fd:c5:1e:5c:
                    cf:37:eb:78:d4:c5:48:bd:2c:c8:94:95:e4:c1:ce:
                    ee:77:d7:b6:dd:b8:84:13:c9:60:be:50:b4:5c:dd:
                    9f:dd:c2:95:91:08:ca:32:3e:8f:7a:4c:0c:6a:a7:
                    ad:d9:e7:71:68:c2:9e:e5:f6:03:4a:4d:2f:07:56:
                    e4:ce:01:b2:02:2b:a5:d0:68:70:8f:1c:2f:87:a2:
                    0b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:29:AC:5F:3C:A4:D6:D1:E7:7B:78:50:98:44:99:D7:64:02:F4:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32bce3c7-4124-37b3-abf3-aa2f79db27aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:78:2a:00:06:a8:ce:e4:2c:ba:2f:4f:8e:31:31:08:a1:34:
         c9:fb:2e:fa:bc:87:83:03:e5:63:49:7e:61:71:c0:fc:7d:e3:
         06:d1:ae:fa:d9:9f:ab:c2:b7:3a:ef:40:b5:68:58:f9:2a:af:
         a0:69:41:b2:62:94:83:bc:a8:cb:f0:6c:ca:76:01:77:c9:d1:
         0a:e6:ed:59:53:0e:2d:ff:ab:eb:be:92:97:e8:c4:b5:9a:41:
         fd:b2:26:a7:64:fa:01:52:83:2d:98:1c:f0:af:85:77:74:43:
         f4:48:5c:aa:6f:a7:3b:d0:fc:18:0b:26:66:e8:de:f5:60:a5:
         5a:b8:96:d5:b0:c4:9c:05:64:c5:6e:6e:11:6c:7e:39:64:d5:
         42:e7:bb:5e:1a:bb:b4:bd:a8:be:2d:1c:6c:2a:d5:11:03:43:
         2d:b4:e5:0f:a3:9f:72:f1:90:b3:63:b4:fe:f3:fb:f6:bf:27:
         ce:43:30:6b:76:85:7e:dc:60:22:95:50:ec:13:35:cf:6c:11:
         7f:3c:b3:2b:1f:4a:8e:d2:67:5d:08:c5:78:85:5c:4c:1b:2f:
         0e:ca:db:07:4d:51:49:db:7b:25:3a:ad:bf:56:a9:88:9a:91:
         7d:06:1e:06:f5:c6:e0:74:aa:5c:4f:12:0a:b6:91:a4:ed:db:
         ad:f9:b3:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ejXs9seeaODKpAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk
YzIxNDIxZmQtZmNkZC00MWM2LWI0N2QtM2ViZjNiYmI3MzQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1lZXRlRyupP7MixBavc7TuKiE+lvQ5140l/
79CViCYfMx3G92xF9VPe7spAMj9g8mbyq1SL/pjEwvissu840Qo3sXggU0tPGMUB
HD/tze2WKtiYL0LxALPVCU1YvvHU3RaFTFgDHtmjaboWl8wwGIiQJHz3fehSF16Z
jf7lg0Ea3q3kzq2NR7GfFb4IRJUeiONNlBv4SX+LMRC048I2Gt8MX0spMb16PABV
HB8sXv3FHlzPN+t41MVIvSzIlJXkwc7ud9e23biEE8lgvlC0XN2f3cKVkQjKMj6P
ekwMaqet2edxaMKe5fYDSk0vB1bkzgGyAiul0Ghwjxwvh6ILvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA4prF88pNbR53t4UJhEmddkAvQNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzJiY2UzYzctNDEyNC0z
N2IzLWFiZjMtYWEyZjc5ZGIyN2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKSrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEh4KgAGqM7kLLovT44xMQihNMn7Lvq8h4MD5WNJfmFxwPx94wbRrvrZ
n6vCtzrvQLVoWPkqr6BpQbJilIO8qMvwbMp2AXfJ0Qrm7VlTDi3/q+u+kpfoxLWa
Qf2yJqdk+gFSgy2YHPCvhXd0Q/RIXKpvpzvQ/BgLJmbo3vVgpVq4ltWwxJwFZMVu
bhFsfjlk1ULnu14au7S9qL4tHGwq1REDQy205Q+jn3LxkLNjtP7z+/a/J85DMGt2
hX7cYCKVUOwTNc9sEX88sysfSo7SZ10IxXiFXEwbLw7K2wdNUUnbeyU6rb9WqYia
kX0GHgb1xuB0qlxPEgq2kaTt2635sws=
-----END CERTIFICATE-----
Generated at Sat May 10 19:07:53 2025 by rpki-client