Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b97d1b9-7f99-38ae-81f7-03995cf891bf.roa
File:                     3b97d1b9-7f99-38ae-81f7-03995cf891bf.roa (raw, json)
Hash identifier:          O2Q4JoXfc/QyoCpyCmbDxVWs8TKxtO9YyLQyhOELYeI=
Subject key identifier:   41:F7:C1:A9:94:1B:E3:24:84:70:58:0E:52:25:1F:35:B2:81:A1:E7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CF6836ED5511089A0EAAA900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b97d1b9-7f99-38ae-81f7-03995cf891bf.roa
Signing time:             Sat 10 May 2025 19:56:08 +0000
ROA not before:           Sat 10 May 2025 19:56:08 +0000
ROA not after:            Fri 08 Aug 2025 19:56:08 +0000
asID:                     18779
IP address blocks:        104.164.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:68:36:ed:55:11:08:9a:0e:aa:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 10 19:56:08 2025 GMT
            Not After : Aug  8 19:56:08 2025 GMT
        Subject: CN=c6b676c9-c8c2-41e2-aa79-38855956ce41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:18:24:b1:40:d2:95:cd:5f:58:90:d6:27:49:
                    15:a7:31:14:cb:84:cb:1a:f8:3c:44:7a:88:b2:fa:
                    f9:7d:4d:68:63:29:67:81:79:e6:2e:41:7c:1c:60:
                    b6:48:a6:b7:54:38:b9:0a:8b:38:4e:56:24:d6:8e:
                    80:ad:38:b0:d1:e3:1c:ed:17:07:29:c1:9f:c0:5a:
                    a2:a6:73:d4:34:a6:95:1b:37:c4:0b:e7:10:0a:3e:
                    d0:1f:32:0c:58:07:68:97:23:46:70:c9:10:c6:29:
                    00:4e:d2:a9:8a:76:e5:a2:42:56:89:3a:6f:39:9f:
                    75:b8:e4:bb:7c:49:6e:2c:8e:fb:ff:0d:f3:4c:7b:
                    90:72:ff:9e:4f:30:d3:7a:1d:ae:1f:07:1c:e9:16:
                    24:3a:4a:d5:1a:6f:ee:d7:ce:70:ff:fa:8a:dc:10:
                    68:af:bc:f7:59:05:a1:fd:c7:bf:e7:cc:92:bf:30:
                    65:15:56:e5:ac:95:b2:b7:3d:7b:24:b8:4a:61:b4:
                    77:22:2c:66:e6:5c:4c:93:b9:5b:00:f1:a9:b5:de:
                    6a:04:ab:a6:83:d2:07:a8:14:6f:ac:b3:cd:17:07:
                    88:d7:c1:a1:ac:d3:8e:f3:9c:3e:3d:a9:85:f4:ab:
                    8d:d9:38:3b:0a:fe:a6:79:a6:86:ce:32:5f:43:ef:
                    cf:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F7:C1:A9:94:1B:E3:24:84:70:58:0E:52:25:1F:35:B2:81:A1:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b97d1b9-7f99-38ae-81f7-03995cf891bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:5d:b3:5f:2e:83:1b:20:77:7b:24:a9:f1:39:e8:34:6e:38:
         ca:5b:32:ac:08:92:1a:26:f1:d6:d3:05:69:14:8e:89:ac:66:
         a0:e3:f2:46:7d:c1:46:bb:0b:e3:80:a9:07:8b:37:b5:a0:61:
         b7:bb:1c:74:30:a1:ef:bd:cb:08:cb:37:28:a2:d0:39:67:01:
         b4:3f:93:fe:eb:95:cc:63:ee:aa:87:16:00:c1:d1:11:02:41:
         4e:98:ad:0f:15:25:14:44:d3:13:ff:3b:d8:c0:2c:33:07:2c:
         44:4d:a5:00:fe:1d:c1:78:48:c2:54:23:d3:35:17:2a:33:61:
         29:5e:2d:d4:5a:ea:74:1e:f4:75:be:ec:52:b5:b8:3d:10:c1:
         f7:38:cc:06:50:9a:be:77:f9:61:ea:94:93:d8:52:a2:22:c3:
         d0:c0:40:74:85:a1:84:aa:45:2b:30:7d:36:78:d6:31:0c:69:
         ca:63:25:3a:e5:30:f3:1c:57:cd:e4:2e:9a:31:e0:d1:98:fa:
         d0:9c:8c:85:74:db:57:b9:f6:f4:bd:e8:29:52:20:ad:64:63:
         c5:d5:b2:1a:20:e6:cb:d0:c9:77:a6:94:46:9d:e1:73:24:f0:
         36:1c:9f:6b:d0:ba:b8:56:15:a6:88:44:78:7e:23:b8:d5:65:
         0a:e6:85:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnPaDbtVREImg6qqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUxMDE5NTYwOFoXDTI1MDgwODE5NTYwOFowLzEtMCsGA1UEAxMk
YzZiNjc2YzktYzhjMi00MWUyLWFhNzktMzg4NTU5NTZjZTQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRgksUDSlc1fWJDWJ0kVpzEUy4TLGvg8RHqI
svr5fU1oYylngXnmLkF8HGC2SKa3VDi5Cos4TlYk1o6ArTiw0eMc7RcHKcGfwFqi
pnPUNKaVGzfEC+cQCj7QHzIMWAdolyNGcMkQxikATtKpinblokJWiTpvOZ91uOS7
fEluLI77/w3zTHuQcv+eTzDTeh2uHwcc6RYkOkrVGm/u185w//qK3BBor7z3WQWh
/ce/58ySvzBlFVblrJWytz17JLhKYbR3Iixm5lxMk7lbAPGptd5qBKumg9IHqBRv
rLPNFweI18GhrNOO85w+PamF9KuN2Tg7Cv6meaaGzjJfQ+/PoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEH3wamUG+MkhHBYDlIlHzWygaHnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2I5N2QxYjktN2Y5OS0z
OGFlLTgxZjctMDM5OTVjZjg5MWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKSqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJhds18ugxsgd3skqfE56DRuOMpbMqwIkhom8dbTBWkUjomsZqDj8kZ9
wUa7C+OAqQeLN7WgYbe7HHQwoe+9ywjLNyii0DlnAbQ/k/7rlcxj7qqHFgDB0REC
QU6YrQ8VJRRE0xP/O9jALDMHLERNpQD+HcF4SMJUI9M1FyozYSleLdRa6nQe9HW+
7FK1uD0Qwfc4zAZQmr53+WHqlJPYUqIiw9DAQHSFoYSqRSswfTZ41jEMacpjJTrl
MPMcV83kLpox4NGY+tCcjIV021e59vS96ClSIK1kY8XVshog5svQyXemlEad4XMk
8DYcn2vQurhWFaaIRHh+I7jVZQrmhc4=
-----END CERTIFICATE-----
Generated at Sun May 11 06:15:29 2025 by rpki-client