Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7b18b287-dee7-3deb-8097-c10851fd1f31.roa
File:                     7b18b287-dee7-3deb-8097-c10851fd1f31.roa (raw, json)
Hash identifier:          1srr1aPkR6s+g/6qQA4sjooL3bBMCotR7PPqClXTkR4=
Subject key identifier:   2D:26:73:5B:45:18:6A:55:4F:E8:8D:73:08:12:E4:BC:48:09:96:0F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B149FCA2DDCBD6AE60C70E00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7b18b287-dee7-3deb-8097-c10851fd1f31.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     44559
IP address blocks:        104.252.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:fc:a2:dd:cb:d6:ae:60:c7:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=1f271bb0-e268-4858-b190-a05715bc3647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:5c:eb:26:4d:ac:4d:91:ec:05:77:1e:15:63:
                    80:da:3c:86:ab:8d:fe:8a:3d:90:0c:a9:3f:23:4f:
                    24:e5:3f:cd:cc:09:8c:47:d7:a4:ca:0a:78:8a:0f:
                    9a:7c:f1:59:bd:5e:5f:8c:e9:ae:91:29:66:fb:bf:
                    cb:eb:16:33:47:b6:81:a3:fa:5c:21:4b:51:b8:28:
                    5f:78:04:b5:61:84:25:a3:85:35:33:12:5a:91:32:
                    db:e7:ed:e5:1f:e5:28:b9:f2:16:8e:80:64:12:e2:
                    aa:78:c3:04:c1:f9:3a:f7:30:05:4e:f6:3e:61:66:
                    9e:a8:92:0c:f3:18:70:ec:fe:e6:31:c9:8e:72:6a:
                    4c:7b:a2:29:60:08:5b:08:97:c9:bf:3d:73:15:e4:
                    14:24:bc:82:89:db:86:19:d6:cf:9b:a0:ff:86:27:
                    db:6a:d5:67:41:9b:3e:a1:c6:a4:1f:46:87:5d:24:
                    84:fb:1f:11:ed:af:ef:ec:44:50:97:e2:17:d8:2e:
                    f2:de:0d:86:b4:a2:26:03:82:de:8a:25:89:29:3d:
                    41:ca:17:63:83:a0:85:da:8e:28:54:10:78:c3:77:
                    ed:06:ec:d0:0e:f1:3d:4d:5c:06:94:ae:26:ee:42:
                    e8:2e:69:d5:85:82:36:8e:76:cb:cd:4e:f0:11:67:
                    31:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:26:73:5B:45:18:6A:55:4F:E8:8D:73:08:12:E4:BC:48:09:96:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7b18b287-dee7-3deb-8097-c10851fd1f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:7d:79:49:fb:76:71:78:cd:e0:43:aa:f0:83:44:23:a2:26:
         63:f0:7e:f9:27:71:0b:45:4a:0d:57:6c:5d:72:cb:1d:dd:82:
         3d:28:75:c1:f2:11:be:8c:01:67:21:3c:fe:c7:34:61:1d:e1:
         44:ac:51:f3:30:17:d9:18:f6:a5:55:2e:a8:6e:3b:ea:cc:7e:
         9e:ff:f0:04:22:b0:4b:73:8e:57:03:24:66:62:0b:9b:8d:00:
         4e:21:67:71:3d:fb:a1:18:63:37:91:15:4c:8d:14:12:10:ec:
         20:e5:71:b3:cc:33:6f:3e:b1:51:8a:14:0b:97:8b:5a:94:fb:
         aa:d9:37:2c:56:4e:8b:33:7f:51:00:bd:18:cc:b5:90:73:3f:
         73:96:ee:71:7b:0b:0c:c0:49:14:1d:5b:cf:0d:09:0f:06:5b:
         20:dc:b6:d0:69:40:0a:a6:23:72:75:fb:6b:bb:c6:03:8b:71:
         f1:4a:54:86:6a:38:73:98:2b:13:25:60:84:46:4f:2d:f2:b7:
         12:59:0b:bf:1a:82:23:06:3f:d7:1c:4c:07:ae:b2:6c:5a:02:
         33:0e:88:04:d6:cf:2f:62:ae:0a:37:72:c6:0c:f1:a6:4d:79:
         df:13:bb:02:1d:29:e2:1c:0c:45:d0:3a:39:1e:45:55:4a:ad:
         d6:52:8e:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfyi3cvWrmDHDgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk
MWYyNzFiYjAtZTI2OC00ODU4LWIxOTAtYTA1NzE1YmMzNjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+lzrJk2sTZHsBXceFWOA2jyGq43+ij2QDKk/
I08k5T/NzAmMR9ekygp4ig+afPFZvV5fjOmukSlm+7/L6xYzR7aBo/pcIUtRuChf
eAS1YYQlo4U1MxJakTLb5+3lH+UoufIWjoBkEuKqeMMEwfk69zAFTvY+YWaeqJIM
8xhw7P7mMcmOcmpMe6IpYAhbCJfJvz1zFeQUJLyCiduGGdbPm6D/hifbatVnQZs+
ocakH0aHXSSE+x8R7a/v7ERQl+IX2C7y3g2GtKImA4LeiiWJKT1Byhdjg6CF2o4o
VBB4w3ftBuzQDvE9TVwGlK4m7kLoLmnVhYI2jnbLzU7wEWcx/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC0mc1tFGGpVT+iNcwgS5LxICZYPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvN2IxOGIyODctZGVlNy0z
ZGViLTgwOTctYzEwODUxZmQxZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPwrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC59eUn7dnF4zeBDqvCDRCOiJmPwfvkncQtFSg1XbF1yyx3dgj0odcHy
Eb6MAWchPP7HNGEd4USsUfMwF9kY9qVVLqhuO+rMfp7/8AQisEtzjlcDJGZiC5uN
AE4hZ3E9+6EYYzeRFUyNFBIQ7CDlcbPMM28+sVGKFAuXi1qU+6rZNyxWToszf1EA
vRjMtZBzP3OW7nF7CwzASRQdW88NCQ8GWyDcttBpQAqmI3J1+2u7xgOLcfFKVIZq
OHOYKxMlYIRGTy3ytxJZC78agiMGP9ccTAeusmxaAjMOiATWzy9irgo3csYM8aZN
ed8TuwIdKeIcDEXQOjkeRVVKrdZSjrk=
-----END CERTIFICATE-----
Generated at Sun May 11 13:41:41 2025 by rpki-client