Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b63804df-db1b-3db2-b74d-017430b1cdcf.roa
File:                     b63804df-db1b-3db2-b74d-017430b1cdcf.roa (raw, json)
Hash identifier:          fKJHz/Xg8TSD/lrFGeMSRSVL/kDfXvqOXx7qMIqvQIQ=
Subject key identifier:   45:3A:0B:EE:64:5A:B5:84:3F:C3:5E:6C:00:F4:29:24:94:45:5A:8B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F432858499AF488EDEE17A6E376254FA8
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b63804df-db1b-3db2-b74d-017430b1cdcf.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     64267
IP address blocks:        52.124.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:88:ed:ee:17:a6:e3:76:25:4f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=0f624309-3cdf-4735-9f57-3debf1111355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f6:9f:6f:bb:03:28:8b:78:61:b2:01:9a:93:
                    26:74:cd:24:58:b9:a1:33:b4:76:af:b3:28:d4:f9:
                    d9:f0:2d:e8:2c:9c:07:03:d3:88:3e:01:43:49:07:
                    96:d1:59:79:a5:d7:61:86:fc:9b:0b:12:0c:67:22:
                    dd:d0:97:11:4d:18:3b:1f:eb:6d:72:93:5a:f2:88:
                    1e:44:08:51:b4:8a:e5:18:1a:b1:19:81:67:48:8b:
                    96:e2:d4:4b:55:30:33:69:7f:cc:74:a3:d7:14:8f:
                    c4:ca:3b:9f:03:6c:74:50:32:ab:b7:a2:89:27:e6:
                    5f:22:01:72:b2:85:6d:c5:bd:b7:14:1b:a5:ba:94:
                    e3:bd:82:92:b2:62:e3:60:e2:92:3e:7c:10:48:6d:
                    ac:aa:41:6c:4e:c2:40:74:bf:94:e9:65:f0:32:f8:
                    a7:29:b4:9e:10:30:22:4e:7f:e7:a2:86:f4:9b:e9:
                    c5:1c:d4:f5:8c:32:b3:90:ca:4b:8b:7c:db:b3:d1:
                    f3:be:9d:42:e7:e6:72:ed:3c:6f:a9:83:a9:30:b0:
                    a5:2b:0e:4c:94:23:42:93:a6:b0:88:0b:a7:e0:ab:
                    6d:5b:01:ec:b5:89:44:69:39:bc:e9:5c:af:5a:dc:
                    83:e4:b5:1b:24:92:5d:9a:5e:b6:68:8b:78:65:33:
                    11:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3A:0B:EE:64:5A:B5:84:3F:C3:5E:6C:00:F4:29:24:94:45:5A:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b63804df-db1b-3db2-b74d-017430b1cdcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.124.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:24:b9:a5:6f:45:eb:3a:5c:ff:24:31:5f:55:48:3a:12:30:
         b2:7f:c7:1a:13:ee:8f:ba:e0:96:a0:fd:de:dc:bb:35:7d:6b:
         34:e7:bc:46:8f:2f:56:8f:96:fb:eb:f2:da:61:b9:55:a4:34:
         d7:57:10:81:0c:65:9f:57:e0:c4:07:ce:85:6a:c3:a1:39:5e:
         4d:db:28:b2:be:fd:f4:00:74:f2:26:c2:31:f8:eb:61:46:57:
         ce:87:1a:92:ad:66:b1:cc:4d:7d:ef:22:65:b5:ae:b9:46:18:
         c2:9f:bf:85:b1:6d:d5:c4:eb:fa:74:cf:eb:ec:66:6a:91:01:
         f0:cf:6d:55:8f:7d:8b:c7:62:68:f3:3f:4b:f4:04:60:f9:07:
         a0:f4:b5:41:c8:69:10:37:29:9d:fa:04:6f:60:37:43:22:7e:
         95:09:0a:fe:cd:36:35:9c:6d:04:f6:cc:61:e6:28:cf:7b:05:
         8e:b7:d4:58:4c:99:84:71:1d:aa:f1:04:2d:4d:6d:fb:f2:fc:
         7b:4d:68:51:af:3d:94:2f:99:36:29:fc:72:dc:12:72:47:5c:
         91:33:11:67:11:63:18:6a:57:37:5a:ea:55:ac:70:c7:98:c6:
         d5:07:1c:5c:1e:9d:e2:2e:f4:62:5f:26:58:61:6e:08:40:f6:
         74:79:e3:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9Ijt7hem43YlT6gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk
MGY2MjQzMDktM2NkZi00NzM1LTlmNTctM2RlYmYxMTExMzU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Pafb7sDKIt4YbIBmpMmdM0kWLmhM7R2r7Mo
1PnZ8C3oLJwHA9OIPgFDSQeW0Vl5pddhhvybCxIMZyLd0JcRTRg7H+ttcpNa8oge
RAhRtIrlGBqxGYFnSIuW4tRLVTAzaX/MdKPXFI/EyjufA2x0UDKrt6KJJ+ZfIgFy
soVtxb23FBulupTjvYKSsmLjYOKSPnwQSG2sqkFsTsJAdL+U6WXwMvinKbSeEDAi
Tn/noob0m+nFHNT1jDKzkMpLi3zbs9Hzvp1C5+Zy7TxvqYOpMLClKw5MlCNCk6aw
iAun4KttWwHstYlEaTm86VyvWtyD5LUbJJJdml62aIt4ZTMR9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEU6C+5kWrWEP8NebAD0KSSURVqLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYjYzODA0ZGYtZGIxYi0z
ZGIyLWI3NGQtMDE3NDMwYjFjZGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBNHwSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE4kuaVvRes6XP8kMV9VSDoSMLJ/xxoT7o+64Jag/d7cuzV9azTnvEaP
L1aPlvvr8tphuVWkNNdXEIEMZZ9X4MQHzoVqw6E5Xk3bKLK+/fQAdPImwjH462FG
V86HGpKtZrHMTX3vImW1rrlGGMKfv4WxbdXE6/p0z+vsZmqRAfDPbVWPfYvHYmjz
P0v0BGD5B6D0tUHIaRA3KZ36BG9gN0MifpUJCv7NNjWcbQT2zGHmKM97BY631FhM
mYRxHarxBC1Nbfvy/HtNaFGvPZQvmTYp/HLcEnJHXJEzEWcRYxhqVzda6lWscMeY
xtUHHFweneIu9GJfJlhhbghA9nR54+E=
-----END CERTIFICATE-----
Generated at Sat May 10 10:36:18 2025 by rpki-client