Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/ac107706-b8aa-33ab-be17-de1da671b7a6.roa
File:                     ac107706-b8aa-33ab-be17-de1da671b7a6.roa (raw, json)
Hash identifier:          xLeE8o2TrIBTxuUGDVvGWSU0tQHa6J6T5T42GoLmFqM=
Subject key identifier:   02:7C:52:44:1D:94:CB:35:D0:62:01:E9:D3:68:F3:3F:20:51:60:D0
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F43285849E22521619BBB859CE761DB80
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/ac107706-b8aa-33ab-be17-de1da671b7a6.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     14618
IP address blocks:        104.218.201.0/24 maxlen: 24
                          104.218.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:21:61:9b:bb:85:9c:e7:61:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=ae424043-0415-46b1-b234-7473d1652c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:d6:e4:f9:ac:d9:0c:9b:59:7a:67:bc:df:
                    29:9a:ca:91:7a:fc:28:c4:9b:b9:09:27:15:dc:ed:
                    86:28:7d:e7:bd:7d:f3:f7:7d:1b:b9:62:67:54:c0:
                    b4:b6:1a:18:3e:75:32:80:9f:98:8e:02:24:11:b6:
                    7a:b8:89:42:cc:54:06:58:71:92:d1:22:77:9a:6b:
                    bd:f5:e5:5f:56:36:db:4c:3a:bc:cb:c7:f7:50:7f:
                    47:27:22:54:e1:5e:93:a5:98:63:1f:e2:59:4e:91:
                    86:c7:a4:7c:35:cd:1d:c0:7f:d9:fa:98:87:fb:7b:
                    dc:68:80:dc:78:12:52:3b:c9:86:0b:e4:73:93:f9:
                    f3:a7:71:28:75:16:49:3b:2d:60:d2:24:d6:0e:db:
                    c3:69:c0:dc:cf:0f:35:0b:1e:c9:00:1f:85:d5:50:
                    47:78:25:cb:61:da:4e:9f:6c:f1:2f:fe:55:34:36:
                    6e:c3:65:63:11:9c:16:10:dc:9b:43:7b:52:f6:8e:
                    a2:0a:66:cc:c8:fa:01:89:ff:a9:4b:05:35:98:ba:
                    b3:06:9b:ab:8b:4a:55:13:9e:ac:a5:5c:70:24:cb:
                    7c:34:ea:e5:3b:2b:eb:11:66:27:c1:a8:d7:30:85:
                    c8:03:4d:43:4d:ce:93:10:81:4a:bd:33:d1:96:56:
                    95:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7C:52:44:1D:94:CB:35:D0:62:01:E9:D3:68:F3:3F:20:51:60:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/ac107706-b8aa-33ab-be17-de1da671b7a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.201.0-104.218.202.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a6:ee:05:92:f4:e9:9e:c3:58:ee:57:c5:a7:79:cd:68:fb:
         43:d7:40:da:27:c3:15:20:4d:f6:b9:5a:1f:18:d4:b7:45:46:
         a6:2b:c5:96:dc:64:a3:21:01:fe:fb:02:d7:de:f1:99:e9:15:
         0b:50:9b:17:7d:15:e3:ca:97:8d:3f:2f:a6:33:c2:b6:99:50:
         2b:76:b3:be:0b:50:b1:5a:fd:51:fa:dc:6e:0a:09:9c:11:16:
         1d:cb:72:86:80:d1:34:90:14:44:75:f3:25:6f:62:0e:aa:b5:
         aa:64:b0:3e:0a:0d:d5:89:b6:40:69:96:98:f2:d7:b2:25:93:
         4b:13:17:fd:52:53:05:6d:e6:87:ef:fe:22:93:8f:44:b5:90:
         27:a6:67:72:ca:2e:07:68:1d:58:61:70:4e:c5:a4:73:18:3f:
         d5:ee:54:7c:67:33:ae:61:7e:be:a9:22:ed:ae:eb:fd:39:84:
         36:db:30:18:fa:e4:dc:d8:c3:8b:23:3a:b4:b0:3d:4c:ec:1d:
         a6:d2:2d:a9:5a:0d:4b:fe:95:52:7c:24:cc:c2:ac:6f:ac:e5:
         65:1a:f2:40:a1:23:68:39:97:b6:27:69:a2:a5:19:01:43:3e:
         5b:ed:9b:c2:61:fd:6b:7d:07:e0:05:1c:81:ad:e5:ee:22:2b:
         38:41:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:34:27 2025 by rpki-client