Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4e5671e4-bf6b-3b7f-9b3b-5b578ed0443b.roa
File:                     4e5671e4-bf6b-3b7f-9b3b-5b578ed0443b.roa (raw, json)
Hash identifier:          Yjhr+byxivULyl+dRbrsg+MB9yaLLVTOMVgKcmKMIOg=
Subject key identifier:   F3:0D:01:1B:69:D2:E4:82:AE:3D:8C:17:DA:C7:2D:C4:44:09:4D:2D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B57A2BB187203D6F477E9E80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4e5671e4-bf6b-3b7f-9b3b-5b578ed0443b.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     400536
IP address blocks:        172.252.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:2b:b1:87:20:3d:6f:47:7e:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=a8b5a5fe-ae29-4b24-96d6-19f89e3c25af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:97:e3:29:c0:2c:91:c5:e5:f0:55:20:16:d6:
                    ae:eb:d2:3b:bb:1e:09:1f:83:b5:bb:fd:89:92:72:
                    7f:62:7b:a3:ea:af:9a:2a:ca:a1:72:d2:a4:65:be:
                    22:31:90:32:55:77:f0:3a:38:e6:e2:9f:f7:65:18:
                    e4:6f:90:94:46:10:49:8a:28:48:56:0d:da:4c:91:
                    da:19:5c:90:3b:20:70:2a:77:85:82:8c:c1:e0:b9:
                    c4:34:94:e1:cc:6e:3d:fa:99:2f:23:85:9c:98:91:
                    b8:f2:82:19:1c:a6:2d:fc:ca:35:c2:da:19:50:bb:
                    dc:57:2a:dc:f5:e0:73:1e:c6:92:f8:84:1c:8d:04:
                    fe:28:d2:fe:9e:9c:cc:3d:6f:32:d8:89:53:f5:5c:
                    46:69:11:d7:25:7c:4a:64:08:40:86:e4:68:9c:39:
                    df:14:00:e1:3f:b7:1e:2b:84:e5:e9:60:25:55:e9:
                    c0:33:51:a3:5a:98:89:ba:d8:29:db:cb:50:9e:84:
                    a2:ee:ce:ed:a6:e6:03:93:92:30:66:1a:ac:65:ef:
                    0d:6f:3a:2a:61:64:59:0d:0c:d9:a9:52:bf:6b:24:
                    90:61:07:fd:37:99:20:61:1c:3c:5c:a4:92:e4:a9:
                    ab:08:69:77:c0:fa:2f:cc:aa:67:e7:2a:3f:39:3c:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0D:01:1B:69:D2:E4:82:AE:3D:8C:17:DA:C7:2D:C4:44:09:4D:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4e5671e4-bf6b-3b7f-9b3b-5b578ed0443b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.252.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:7b:47:c2:f4:5b:ff:16:a3:9b:75:01:fb:3d:1d:db:a6:be:
         6c:2d:77:05:8d:3d:7b:e5:a8:e4:48:0e:d5:b4:a9:4c:c7:9b:
         6c:54:4f:1e:6b:11:6a:0e:c4:c2:60:2f:d8:8b:45:95:0b:9b:
         6c:19:88:e8:8e:ec:02:a6:0d:22:aa:08:19:4a:fb:ac:9e:62:
         19:a8:00:62:c2:5b:78:df:db:7d:ca:8b:4b:52:22:55:48:93:
         aa:eb:ff:f7:4c:98:4a:3a:c8:49:14:48:66:48:32:4a:da:c7:
         37:a1:a8:ea:ba:09:12:a8:96:0f:cc:42:b6:ca:42:4b:2b:f4:
         24:a5:63:80:fb:98:b1:d2:6a:28:7c:8c:22:bc:14:63:5c:aa:
         4f:e9:04:d8:2e:97:18:d2:be:29:c9:05:3e:e1:26:97:c5:ae:
         b9:85:a5:30:b4:a9:bd:cf:c2:8a:03:e5:25:06:5c:d6:b8:92:
         5e:b4:78:4c:f6:19:1f:a9:a1:0f:67:cc:67:96:c3:23:aa:e5:
         10:43:80:ef:ef:55:bb:2d:a4:6d:69:84:00:03:eb:5e:6f:69:
         4b:4e:bd:45:4e:01:22:2e:4a:18:c6:14:38:8e:1c:24:fb:ac:
         89:85:85:eb:16:d2:5a:db:18:f6:4d:fa:b8:01:e3:c6:d0:4f:
         e0:68:26:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1eiuxhyA9b0d+noAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk
YThiNWE1ZmUtYWUyOS00YjI0LTk2ZDYtMTlmODllM2MyNWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpfjKcAskcXl8FUgFtau69I7ux4JH4O1u/2J
knJ/Ynuj6q+aKsqhctKkZb4iMZAyVXfwOjjm4p/3ZRjkb5CURhBJiihIVg3aTJHa
GVyQOyBwKneFgozB4LnENJThzG49+pkvI4WcmJG48oIZHKYt/Mo1wtoZULvcVyrc
9eBzHsaS+IQcjQT+KNL+npzMPW8y2IlT9VxGaRHXJXxKZAhAhuRonDnfFADhP7ce
K4Tl6WAlVenAM1GjWpiJutgp28tQnoSi7s7tpuYDk5IwZhqsZe8NbzoqYWRZDQzZ
qVK/aySQYQf9N5kgYRw8XKSS5KmrCGl3wPovzKpn5yo/OTwLdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMNARtp0uSCrj2MF9rHLcRECU0tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGU1NjcxZTQtYmY2Yi0z
YjdmLTliM2ItNWI1NzhlZDA0NDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPzxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGd7R8L0W/8Wo5t1Afs9HdumvmwtdwWNPXvlqORIDtW0qUzHm2xUTx5r
EWoOxMJgL9iLRZULm2wZiOiO7AKmDSKqCBlK+6yeYhmoAGLCW3jf233Ki0tSIlVI
k6rr//dMmEo6yEkUSGZIMkraxzehqOq6CRKolg/MQrbKQksr9CSlY4D7mLHSaih8
jCK8FGNcqk/pBNgulxjSvinJBT7hJpfFrrmFpTC0qb3PwooD5SUGXNa4kl60eEz2
GR+poQ9nzGeWwyOq5RBDgO/vVbstpG1phAAD615vaUtOvUVOASIuShjGFDiOHCT7
rImFhesW0lrbGPZN+rgB48bQT+BoJlA=
-----END CERTIFICATE-----
Generated at Sat May 10 09:48:35 2025 by rpki-client