Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/585a1c45-cd6c-3f51-be55-39bc1ec1b44e.roa
File:                     585a1c45-cd6c-3f51-be55-39bc1ec1b44e.roa (raw, json)
Hash identifier:          lQF25zeWQ1NQu4UTC3wovelpDA9BFH2VIKs/JGa2/QY=
Subject key identifier:   85:86:E0:10:D2:C8:D3:31:74:A1:56:A4:D2:98:6E:CC:68:55:B7:BD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849BB0F6E16BCDA49C590B34D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/585a1c45-cd6c-3f51-be55-39bc1ec1b44e.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     20473
IP address blocks:        104.164.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:6e:16:bc:da:49:c5:90:b3:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=23af6b8e-f799-4e0e-804a-fba4ad29a9fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1c:5a:30:f9:18:c1:81:03:a4:6c:1a:d3:9a:
                    41:30:df:af:cc:2e:bb:13:8a:87:38:9e:19:9b:0f:
                    c6:3e:83:69:8a:19:3e:a6:97:98:94:d8:08:51:fc:
                    4f:83:c0:45:be:47:51:cd:cf:86:fd:3d:8f:f8:e9:
                    99:92:61:bf:9d:a3:e8:2a:c3:62:f5:f8:a2:72:d0:
                    c6:c3:b2:db:6f:4a:ed:04:e5:d4:56:b8:33:77:d4:
                    67:54:2a:a1:ed:2f:fe:56:84:9a:1f:63:15:cb:57:
                    d3:d4:dd:93:0b:84:8e:22:a3:e3:cf:74:0c:2f:15:
                    da:8a:6f:31:9f:94:59:e7:c4:f7:8a:f1:72:d4:2e:
                    34:f6:f7:ab:9c:92:22:e2:b1:d5:a2:62:e1:b2:e0:
                    a5:4a:23:5f:9f:fd:1d:6d:e5:b2:ce:b3:4a:6d:1a:
                    51:5f:34:f7:f2:65:aa:cf:a8:89:b5:2e:a6:ce:7f:
                    97:7d:2a:ac:e2:f2:68:f9:e1:a6:dd:54:e5:11:a7:
                    c7:19:91:be:79:4c:f7:f3:8b:b0:70:e2:94:22:4a:
                    80:19:ef:f6:83:01:9c:f1:35:7b:71:95:22:a6:99:
                    3c:95:23:69:b4:59:85:90:d5:88:70:51:a4:f6:f8:
                    28:9d:df:c6:73:d8:63:3d:ca:50:b7:e2:bf:e2:15:
                    0b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:86:E0:10:D2:C8:D3:31:74:A1:56:A4:D2:98:6E:CC:68:55:B7:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/585a1c45-cd6c-3f51-be55-39bc1ec1b44e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:36:61:b8:a4:b8:16:00:ca:cd:b5:ac:c1:48:7a:63:02:4c:
         3c:48:e0:cb:7e:d8:48:4f:00:49:71:31:84:c7:3d:af:f9:85:
         81:28:f8:a7:ee:29:ba:71:d6:5b:bd:1f:c9:84:3d:61:03:c8:
         91:ff:ca:07:83:dc:4d:60:88:94:72:4d:19:da:8f:b2:ff:4f:
         45:0b:e1:8a:a6:7d:58:0e:47:72:40:9f:84:08:09:58:19:83:
         38:49:a9:bc:10:1a:b8:e2:21:b6:49:f5:c9:89:c1:79:a7:41:
         b3:9a:da:a4:78:45:47:b4:73:fc:be:51:4d:55:dc:50:33:87:
         2c:b7:a4:7c:9b:0d:fd:ec:d7:15:4c:25:63:ea:34:38:5e:88:
         7e:60:8e:91:02:34:97:94:b5:fe:76:42:18:b1:d2:da:39:58:
         56:bf:39:86:9c:5e:1b:b8:8b:4b:a3:26:ce:85:11:ec:b7:2e:
         62:0e:2f:1a:b5:a2:55:66:01:7c:51:c5:26:c9:9a:18:29:f5:
         9f:54:8f:db:23:1c:33:b9:2d:5f:85:fc:45:3d:25:ff:81:c3:
         d3:6d:7f:76:f5:26:5b:25:6b:2c:e1:9f:33:16:a7:7d:35:a1:
         b1:0f:3b:c0:80:6a:2d:c7:f2:23:a7:77:a0:5a:3c:04:aa:e1:
         be:02:7f:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm7D24WvNpJxZCzTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk
MjNhZjZiOGUtZjc5OS00ZTBlLTgwNGEtZmJhNGFkMjlhOWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihxaMPkYwYEDpGwa05pBMN+vzC67E4qHOJ4Z
mw/GPoNpihk+ppeYlNgIUfxPg8BFvkdRzc+G/T2P+OmZkmG/naPoKsNi9fiictDG
w7Lbb0rtBOXUVrgzd9RnVCqh7S/+VoSaH2MVy1fT1N2TC4SOIqPjz3QMLxXaim8x
n5RZ58T3ivFy1C409vernJIi4rHVomLhsuClSiNfn/0dbeWyzrNKbRpRXzT38mWq
z6iJtS6mzn+XfSqs4vJo+eGm3VTlEafHGZG+eUz384uwcOKUIkqAGe/2gwGc8TV7
cZUippk8lSNptFmFkNWIcFGk9vgond/Gc9hjPcpQt+K/4hULAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIWG4BDSyNMxdKFWpNKYbsxoVbe9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNTg1YTFjNDUtY2Q2Yy0z
ZjUxLWJlNTUtMzliYzFlYzFiNDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKRWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADk2YbikuBYAys21rMFIemMCTDxI4Mt+2EhPAElxMYTHPa/5hYEo+Kfu
Kbpx1lu9H8mEPWEDyJH/ygeD3E1giJRyTRnaj7L/T0UL4YqmfVgOR3JAn4QICVgZ
gzhJqbwQGrjiIbZJ9cmJwXmnQbOa2qR4RUe0c/y+UU1V3FAzhyy3pHybDf3s1xVM
JWPqNDheiH5gjpECNJeUtf52Qhix0to5WFa/OYacXhu4i0ujJs6FEey3LmIOLxq1
olVmAXxRxSbJmhgp9Z9Uj9sjHDO5LV+F/EU9Jf+Bw9Ntf3b1JlslayzhnzMWp301
obEPO8CAai3H8iOnd6BaPASq4b4Cf2U=
-----END CERTIFICATE-----
Generated at Fri May 9 07:40:10 2025 by rpki-client