Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4808f904-800f-3ab1-b818-82b92d05c8ad.roa
File:                     4808f904-800f-3ab1-b818-82b92d05c8ad.roa (raw, json)
Hash identifier:          N/DLfaMfo552bDCM9gKeodWFSGnxClfEcBaimTC9ksQ=
Subject key identifier:   FE:CA:CE:88:9E:59:61:FE:C9:6F:8B:31:55:0D:E4:4C:09:C3:DF:F0
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F432858499F24AFAEFF2980F71A3E4B10
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4808f904-800f-3ab1-b818-82b92d05c8ad.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     36040
IP address blocks:        104.237.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:af:ae:ff:29:80:f7:1a:3e:4b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=38a97d51-1be6-4110-96e6-eb7c4c653946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9b:e4:6d:f7:1f:76:de:13:52:63:cb:7b:75:
                    9f:c4:71:72:ff:34:49:0e:43:57:7d:af:c2:ae:b1:
                    51:3a:0a:8c:6a:8f:df:df:65:b1:86:a8:b3:92:e9:
                    80:8e:08:82:0f:5b:39:55:08:9b:a7:ad:d6:b9:79:
                    fc:e2:21:77:a5:e1:f0:36:d9:99:36:e7:a4:1b:ea:
                    d1:e7:10:02:35:4d:65:41:aa:19:08:7e:b2:da:41:
                    c3:12:c3:e3:c1:6d:3a:7f:f9:bc:c3:60:b2:b4:d1:
                    de:b2:3c:68:e2:07:f1:71:0d:8d:37:07:22:83:c3:
                    28:3a:71:99:2b:10:c2:2a:b0:78:89:df:ac:38:ab:
                    d8:f2:19:a8:38:ee:58:ff:54:9f:95:7a:fb:f8:bb:
                    f2:cc:a8:63:3d:5b:d8:7f:dd:08:7a:ef:3b:b4:49:
                    25:53:a3:6b:4d:bb:1d:0d:38:c5:d3:b0:49:7c:3d:
                    af:1a:39:1a:b3:2d:26:e1:3c:55:8f:80:53:90:13:
                    67:64:4c:7c:b5:23:74:c3:20:6b:c8:e4:9d:be:92:
                    74:0b:41:59:a7:8d:a3:2c:46:b3:3a:c2:b5:85:0a:
                    33:1d:c9:3d:6c:57:a6:1c:04:80:1c:2d:f8:0e:49:
                    bd:87:1e:c0:81:9d:5d:be:c5:af:60:76:24:9c:b8:
                    2c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CA:CE:88:9E:59:61:FE:C9:6F:8B:31:55:0D:E4:4C:09:C3:DF:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4808f904-800f-3ab1-b818-82b92d05c8ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:0c:09:fc:78:e2:81:3a:71:c1:8c:10:71:70:df:15:1c:0c:
         ed:9b:d8:4f:a6:52:a3:95:5e:78:44:34:db:44:11:65:19:30:
         aa:ce:26:45:6f:ea:06:9c:64:ca:d3:ca:d6:f0:a9:5c:1c:82:
         57:84:41:6f:d5:12:1f:5a:ed:c5:0a:2d:8c:82:61:7a:91:e2:
         a4:40:e1:85:ff:3b:74:6e:02:f6:c7:af:00:50:e6:49:90:0e:
         fb:ea:71:e9:9c:5e:ee:58:fd:1e:b5:51:90:31:fd:53:01:1e:
         c8:b2:9f:3b:f9:60:83:5b:ed:4f:a5:fd:79:53:07:66:55:10:
         8f:2d:94:80:b0:55:1b:22:71:42:da:14:ce:a3:18:1b:59:cf:
         46:72:d7:9d:db:6a:cc:79:b3:a9:26:11:1d:e4:a4:aa:74:52:
         4f:ca:e8:01:b5:81:ee:66:7f:8a:c7:f0:d3:be:af:a3:d2:48:
         d2:24:d7:28:0e:36:b3:7a:c0:11:b7:24:2e:54:4b:e5:e9:d8:
         ba:e3:1c:36:9a:03:f9:49:7e:80:e2:d9:f1:b8:1b:5c:0b:8e:
         d5:9d:0b:ee:04:49:be:37:af:1e:6b:12:f8:ab:9c:8e:eb:e4:
         bf:c6:dd:e1:19:5f:5b:66:e8:45:82:31:9c:f9:cc:bc:ab:be:
         19:98:28:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJK+u/ymA9xo+SxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk
MzhhOTdkNTEtMWJlNi00MTEwLTk2ZTYtZWI3YzRjNjUzOTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZvkbfcfdt4TUmPLe3WfxHFy/zRJDkNXfa/C
rrFROgqMao/f32WxhqizkumAjgiCD1s5VQibp63WuXn84iF3peHwNtmZNuekG+rR
5xACNU1lQaoZCH6y2kHDEsPjwW06f/m8w2CytNHesjxo4gfxcQ2NNwcig8MoOnGZ
KxDCKrB4id+sOKvY8hmoOO5Y/1SflXr7+LvyzKhjPVvYf90Ieu87tEklU6NrTbsd
DTjF07BJfD2vGjkasy0m4TxVj4BTkBNnZEx8tSN0wyBryOSdvpJ0C0FZp42jLEaz
OsK1hQozHck9bFemHASAHC34Dkm9hx7AgZ1dvsWvYHYknLgsswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP7KzoieWWH+yW+LMVUN5EwJw9/wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvNDgwOGY5MDQtODAwZi0z
YWIxLWI4MTgtODJiOTJkMDVjOGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaO20MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkMCfx44oE6ccGMEHFw3xUcDO2b2E+mUqOVXnhENNtEEWUZMKrOJkVv
6gacZMrTytbwqVwcgleEQW/VEh9a7cUKLYyCYXqR4qRA4YX/O3RuAvbHrwBQ5kmQ
DvvqcemcXu5Y/R61UZAx/VMBHsiynzv5YINb7U+l/XlTB2ZVEI8tlICwVRsicULa
FM6jGBtZz0Zy153basx5s6kmER3kpKp0Uk/K6AG1ge5mf4rH8NO+r6PSSNIk1ygO
NrN6wBG3JC5US+Xp2LrjHDaaA/lJfoDi2fG4G1wLjtWdC+4ESb43rx5rEvirnI7r
5L/G3eEZX1tm6EWCMZz5zLyrvhmYKGs=
-----END CERTIFICATE-----
Generated at Thu May 8 16:54:26 2025 by rpki-client