Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dc979fff-9948-34f9-bef4-db772ab218b7.roa
File:                     dc979fff-9948-34f9-bef4-db772ab218b7.roa (raw, json)
Hash identifier:          aVtKgSOpOrB2rhAyXu++D2Ea1sawJ2Ejok4QOjKn6sQ=
Subject key identifier:   9D:02:D1:77:AD:08:2E:EC:75:90:33:7A:A1:B6:26:2D:C0:B6:EB:C5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A5A3082B4F83D922B9BCEB040
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dc979fff-9948-34f9-bef4-db772ab218b7.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     64445
IP address blocks:        104.252.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:82:b4:f8:3d:92:2b:9b:ce:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=f2457585-e202-4705-a804-8932d36852b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e4:b5:d8:75:87:21:02:6a:6d:b3:cc:b8:ed:
                    b8:6d:6f:f3:a7:52:07:99:13:05:4e:f5:d1:67:d3:
                    5c:b7:5a:ba:cd:9a:f4:8f:3f:27:70:fa:10:55:89:
                    38:15:51:5f:63:8c:70:d7:8e:9b:05:78:57:b3:22:
                    9e:99:f1:87:76:f2:8b:aa:cd:e4:5b:33:eb:a8:38:
                    0b:4a:d7:b1:c7:ab:56:6d:87:1e:4a:2c:92:f6:db:
                    cd:2a:1d:e2:5b:4e:2b:e2:f1:4c:57:75:f7:df:1f:
                    3d:1d:f8:df:b6:fe:a9:41:de:c1:c1:60:b9:f8:e6:
                    81:95:a5:e5:b2:5a:6a:5a:30:35:7e:57:96:15:0b:
                    23:9b:27:ac:22:71:5e:ce:cc:82:8c:2a:28:03:6f:
                    f7:72:68:68:bf:a2:ae:9d:10:bf:27:a8:6d:f1:36:
                    3d:df:40:f9:96:94:bb:fb:a8:72:a4:58:75:13:6b:
                    66:28:f8:37:8e:74:96:8b:41:f7:2e:7a:8e:dd:f6:
                    1b:9d:f7:dc:52:b5:7b:58:50:2e:34:87:69:ab:f6:
                    15:f7:9a:f8:74:c6:1b:c4:a1:9d:d5:79:0b:84:69:
                    79:76:31:f3:74:d9:37:3a:49:7b:84:e0:f3:94:0a:
                    9d:0b:0a:bd:9f:7d:0e:d3:14:96:23:31:d2:23:2f:
                    ee:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:02:D1:77:AD:08:2E:EC:75:90:33:7A:A1:B6:26:2D:C0:B6:EB:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dc979fff-9948-34f9-bef4-db772ab218b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:5c:94:95:5e:95:cd:0b:22:67:63:26:90:8d:3f:4a:53:ed:
         c2:3c:47:8e:58:c0:26:5e:3f:6f:db:e5:40:54:c4:52:8c:ed:
         99:2c:e7:70:29:d6:9c:59:95:27:1b:88:65:c4:44:9c:87:46:
         fb:e8:51:b3:d6:18:b5:1f:7c:44:15:34:55:4f:ad:3c:e4:d6:
         25:1d:86:c7:36:b7:4b:7d:d4:a9:d6:b7:68:cf:ef:98:f4:70:
         f6:ef:27:7f:29:c9:7c:bd:d7:00:fa:41:f1:ea:6e:ca:3b:23:
         7a:46:fc:4c:72:42:78:6f:88:20:2c:fc:81:5e:6a:55:98:5f:
         0c:fa:9b:a0:11:be:a6:cd:45:37:31:32:cb:ad:57:48:a1:1e:
         70:84:d9:e7:cb:b7:33:d1:dd:12:88:93:c6:7b:9b:0e:07:45:
         4f:7a:c0:ef:24:f2:d6:97:f3:0b:66:a6:9d:cf:17:de:2f:64:
         65:de:99:79:1d:12:fe:05:fc:a8:15:cd:d2:e7:ad:a9:1b:4a:
         f6:21:6a:9f:0f:17:9a:2a:17:68:ce:be:73:3e:88:80:e9:03:
         79:b9:69:4e:93:58:c6:59:ba:9b:c3:b5:c4:a6:6b:d4:67:5e:
         a9:13:e6:d3:ce:cb:1f:68:03:ac:fa:4c:60:05:64:4b:63:3d:
         b5:8f:23:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpaMIK0+D2SK5vOsEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk
ZjI0NTc1ODUtZTIwMi00NzA1LWE4MDQtODkzMmQzNjg1MmI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuS12HWHIQJqbbPMuO24bW/zp1IHmRMFTvXR
Z9Nct1q6zZr0jz8ncPoQVYk4FVFfY4xw146bBXhXsyKemfGHdvKLqs3kWzPrqDgL
Stexx6tWbYceSiyS9tvNKh3iW04r4vFMV3X33x89Hfjftv6pQd7BwWC5+OaBlaXl
slpqWjA1fleWFQsjmyesInFezsyCjCooA2/3cmhov6KunRC/J6ht8TY930D5lpS7
+6hypFh1E2tmKPg3jnSWi0H3LnqO3fYbnffcUrV7WFAuNIdpq/YV95r4dMYbxKGd
1XkLhGl5djHzdNk3Okl7hODzlAqdCwq9n30O0xSWIzHSIy/uuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ0C0XetCC7sdZAzeqG2Ji3AtuvFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGM5NzlmZmYtOTk0OC0z
NGY5LWJlZjQtZGI3NzJhYjIxOGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPxrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADVclJVelc0LImdjJpCNP0pT7cI8R45YwCZeP2/b5UBUxFKM7Zks53Ap
1pxZlScbiGXERJyHRvvoUbPWGLUffEQVNFVPrTzk1iUdhsc2t0t91KnWt2jP75j0
cPbvJ38pyXy91wD6QfHqbso7I3pG/ExyQnhviCAs/IFealWYXwz6m6ARvqbNRTcx
MsutV0ihHnCE2efLtzPR3RKIk8Z7mw4HRU96wO8k8taX8wtmpp3PF94vZGXemXkd
Ev4F/KgVzdLnrakbSvYhap8PF5oqF2jOvnM+iIDpA3m5aU6TWMZZupvDtcSma9Rn
XqkT5tPOyx9oA6z6TGAFZEtjPbWPIyk=
-----END CERTIFICATE-----
Generated at Mon Jun 30 12:00:19 2025 by rpki-client