Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6456a8a3-b2c4-3a0e-8f11-5eb4990dfa1b.roa
File:                     6456a8a3-b2c4-3a0e-8f11-5eb4990dfa1b.roa (raw, json)
Hash identifier:          Ih6GGJO3VD5pU9QpeMaBgRjWoIUT+wYXDgMX6hBNkO0=
Subject key identifier:   3F:DA:14:6F:DA:58:B9:9E:4E:46:28:07:BA:50:03:EA:18:FA:D4:E7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE7500EE7952862D8ED6E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6456a8a3-b2c4-3a0e-8f11-5eb4990dfa1b.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        104.253.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:75:00:ee:79:52:86:2d:8e:d6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=69d6b2e7-1db2-4adb-bb33-f2d3f4d542cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:63:da:4b:96:9f:e7:7b:66:5e:ae:88:b8:38:
                    38:f3:ce:76:92:4a:ab:02:a2:e9:52:7c:40:1a:30:
                    da:c6:d4:d3:02:f3:12:4c:e7:e4:06:06:c9:6b:67:
                    e5:38:83:1c:74:6a:aa:77:bb:d9:44:d6:4a:16:41:
                    9a:2f:6c:56:98:c9:95:ee:12:f2:b0:cc:db:49:d0:
                    00:b4:49:36:32:87:da:60:45:97:4a:7f:45:30:45:
                    31:9c:b7:62:d9:c2:ee:2f:b7:4b:7e:2c:0f:93:81:
                    0c:b0:76:c9:d6:ad:c4:f1:7e:93:f1:3b:b6:0e:ee:
                    99:e5:52:ab:1a:1a:02:0c:74:42:ec:6e:c0:dc:77:
                    50:c8:d8:f8:16:1b:d0:f8:27:24:20:25:78:7b:08:
                    6f:83:5a:df:44:64:a5:03:0c:83:29:a9:95:f5:fb:
                    07:f4:8e:e1:e8:30:a0:26:79:40:5a:d2:3f:e0:cd:
                    82:c7:22:28:8b:4d:34:28:4a:1c:54:37:f1:47:51:
                    8e:5d:41:0e:12:aa:78:45:4b:2f:95:2c:e7:dd:c8:
                    01:c1:2f:82:53:35:34:ba:c1:f2:9a:71:b5:4c:24:
                    ed:13:4d:33:d5:d5:75:71:f1:c1:a6:8e:21:73:92:
                    e9:45:a4:3f:b1:d0:f0:f3:29:26:0d:51:64:73:da:
                    29:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DA:14:6F:DA:58:B9:9E:4E:46:28:07:BA:50:03:EA:18:FA:D4:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6456a8a3-b2c4-3a0e-8f11-5eb4990dfa1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:6a:df:de:df:7e:d4:f9:3a:79:01:9d:45:89:1a:35:cc:58:
         4b:53:53:14:d1:3b:87:35:8b:3a:b2:68:e4:2b:05:09:ed:aa:
         5b:ea:ad:01:45:04:18:89:28:3b:60:d2:df:89:a0:5f:42:34:
         9e:f1:0d:7e:dd:d4:ad:00:61:c2:cc:33:49:19:da:04:48:43:
         a6:90:4d:d4:2d:b5:be:7f:30:bc:4d:a8:ee:c1:92:e4:2a:e1:
         00:36:fc:e8:15:e7:03:af:e4:8b:06:10:c3:6d:48:29:83:a5:
         f3:bf:ad:28:21:2c:be:4b:0f:5b:fa:13:f1:7d:b0:f5:9b:0b:
         85:1d:3d:67:12:e5:03:e5:70:2e:66:45:1b:c4:1e:e4:dd:d9:
         a8:07:72:c4:ff:c5:9a:73:b6:c3:31:c4:a2:a3:6e:13:a5:35:
         da:5c:ea:21:5b:eb:2c:d4:d8:f5:c9:dd:35:d9:4f:09:97:1e:
         57:36:f2:71:4a:ab:56:9c:8b:2c:06:fd:dd:7c:8c:16:66:53:
         72:4a:c7:3a:1c:5a:6f:a5:8c:8f:87:55:bb:14:20:66:17:19:
         8f:b7:e2:38:c5:ef:30:7b:e4:1a:f4:fc:2d:06:41:71:85:75:
         39:b4:91:ee:39:19:91:99:c3:18:cc:67:af:41:b5:34:1e:64:
         04:93:9f:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkznUA7nlShi2O1uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
NjlkNmIyZTctMWRiMi00YWRiLWJiMzMtZjJkM2Y0ZDU0MmNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGPaS5af53tmXq6IuDg48852kkqrAqLpUnxA
GjDaxtTTAvMSTOfkBgbJa2flOIMcdGqqd7vZRNZKFkGaL2xWmMmV7hLysMzbSdAA
tEk2MofaYEWXSn9FMEUxnLdi2cLuL7dLfiwPk4EMsHbJ1q3E8X6T8Tu2Du6Z5VKr
GhoCDHRC7G7A3HdQyNj4FhvQ+CckICV4ewhvg1rfRGSlAwyDKamV9fsH9I7h6DCg
JnlAWtI/4M2CxyIoi000KEocVDfxR1GOXUEOEqp4RUsvlSzn3cgBwS+CUzU0usHy
mnG1TCTtE00z1dV1cfHBpo4hc5LpRaQ/sdDw8ykmDVFkc9opIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/aFG/aWLmeTkYoB7pQA+oY+tTnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNjQ1NmE4YTMtYjJjNC0z
YTBlLThmMTEtNWViNDk5MGRmYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP06MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAENq397fftT5OnkBnUWJGjXMWEtTUxTRO4c1izqyaOQrBQntqlvqrQFF
BBiJKDtg0t+JoF9CNJ7xDX7d1K0AYcLMM0kZ2gRIQ6aQTdQttb5/MLxNqO7BkuQq
4QA2/OgV5wOv5IsGEMNtSCmDpfO/rSghLL5LD1v6E/F9sPWbC4UdPWcS5QPlcC5m
RRvEHuTd2agHcsT/xZpztsMxxKKjbhOlNdpc6iFb6yzU2PXJ3TXZTwmXHlc28nFK
q1aciywG/d18jBZmU3JKxzocWm+ljI+HVbsUIGYXGY+34jjF7zB75Br0/C0GQXGF
dTm0ke45GZGZwxjMZ69BtTQeZASTn+c=
-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:10 2025 by rpki-client