Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0908bfff-c0d4-3f11-9591-aa3aeddf2287.roa
File:                     0908bfff-c0d4-3f11-9591-aa3aeddf2287.roa (raw, json)
Hash identifier:          CSwagBxWn5OpXgvetjpXjQJ44ZCbKpBPVkaHgxAWFGc=
Subject key identifier:   BC:C8:4E:79:7A:99:AA:19:32:B0:E3:E4:73:92:9E:42:2A:B6:F8:62
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A84A74C4575B5BCF0661FD9C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0908bfff-c0d4-3f11-9591-aa3aeddf2287.roa
Signing time:             Mon 14 Jul 2025 18:04:33 +0000
ROA not before:           Mon 14 Jul 2025 18:04:33 +0000
ROA not after:            Sun 12 Oct 2025 18:04:33 +0000
asID:                     44559
IP address blocks:        104.164.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:a7:4c:45:75:b5:bc:f0:66:1f:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 18:04:33 2025 GMT
            Not After : Oct 12 18:04:33 2025 GMT
        Subject: CN=6fe5f406-4edf-4c1e-9348-cc952c9346e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:70:5d:b6:e1:a2:2b:c3:f8:74:5e:d0:d8:
                    09:36:37:12:92:80:eb:ca:fb:39:32:ea:78:94:f3:
                    81:29:e4:75:c6:fc:24:40:ab:1a:8e:2c:b3:a4:56:
                    12:1c:f0:0e:36:05:d1:52:86:ef:23:84:9b:9e:12:
                    12:cb:af:ba:4b:2b:cf:0a:3c:c9:e6:cb:48:46:00:
                    3f:20:dc:f2:d3:43:ea:21:27:75:4b:75:7d:ab:90:
                    8c:fa:14:9d:fd:2d:19:f3:8b:2a:0d:20:07:3d:de:
                    42:f7:8c:31:2c:de:10:3d:fa:2f:6d:b3:ac:17:dc:
                    ca:f1:db:be:e0:19:ac:bf:ab:49:27:3c:c9:3a:10:
                    75:aa:ac:47:e5:3c:7f:97:97:1f:be:a3:5d:c0:61:
                    32:20:68:4f:81:8f:b5:f0:e7:da:38:70:ba:6c:a0:
                    e7:df:8d:f3:4a:17:58:d0:76:c2:d5:27:84:f6:8d:
                    23:ca:20:80:5a:3e:78:e1:4f:6d:57:56:3c:55:1b:
                    45:a9:5a:44:98:af:95:8a:e2:97:80:2a:45:5c:17:
                    22:02:cd:91:2c:98:c8:9a:8c:dd:9f:eb:17:0f:a1:
                    55:e4:88:93:80:ab:55:f6:b9:5b:6b:0d:8e:0b:a1:
                    ff:e0:25:b1:bc:38:be:ad:66:6b:85:3b:2d:0c:23:
                    8a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C8:4E:79:7A:99:AA:19:32:B0:E3:E4:73:92:9E:42:2A:B6:F8:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0908bfff-c0d4-3f11-9591-aa3aeddf2287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:af:0a:1d:62:9f:66:a1:fc:d1:13:02:63:66:0b:c3:64:d0:
         fd:eb:db:97:58:15:5d:a9:fb:3d:57:66:10:2c:f0:c3:28:16:
         b2:3e:e7:d5:9a:ba:6a:ad:53:6b:f7:e4:84:86:45:8b:50:8e:
         8f:3d:a3:0e:99:a3:56:c0:91:49:22:a9:ff:1e:7d:dc:c3:f6:
         03:90:86:81:79:8a:01:f6:0e:93:8e:e1:ca:b5:bc:e0:27:fc:
         55:ef:b5:26:9f:55:1d:26:58:bb:28:ff:8e:f8:a0:4b:52:de:
         e4:e1:0c:7a:9d:d7:75:c6:02:b0:0a:93:e3:7e:45:4b:6e:18:
         90:40:3b:02:82:ed:30:58:96:48:76:77:a4:6e:72:fe:6a:de:
         c9:f1:4d:87:94:17:1e:0d:ec:44:85:13:49:c9:89:cb:69:27:
         de:1f:f3:96:f5:7f:e9:ec:04:a1:42:9f:06:f5:dd:73:e7:1d:
         10:40:40:b7:6d:c0:99:11:cd:c4:9c:2e:06:85:8c:62:c8:36:
         ac:01:11:eb:24:06:99:9d:5e:aa:e8:c1:e9:94:89:48:87:dc:
         bf:e6:f0:49:ea:52:66:e7:15:8f:7d:32:1a:a2:8d:7e:61:ea:
         06:3b:49:11:5c:a4:49:66:dd:8f:bb:ec:3b:51:5f:17:9e:16:
         cb:1c:6a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:55:11 2025 by rpki-client