Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2ba66495-1e17-379f-9a90-2cc8dbf7141a.roa
File:                     2ba66495-1e17-379f-9a90-2cc8dbf7141a.roa (raw, json)
Hash identifier:          Kp9aPnEiQ7e4pZS201vnnyazCtdA2R6pQiZf6Pbtp/g=
Subject key identifier:   2F:72:48:30:87:30:BB:2D:13:08:68:53:AA:DC:33:B6:7F:81:8B:9D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8C70D8046CEFA4A427CDC0C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2ba66495-1e17-379f-9a90-2cc8dbf7141a.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     11404
IP address blocks:        104.165.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:d8:04:6c:ef:a4:a4:27:cd:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=ee7869a7-d4f1-4bc3-86a7-715f93cd81c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:04:44:20:01:b9:c9:5b:c4:1e:6d:39:4c:01:
                    45:db:25:10:31:01:8e:97:72:ce:44:b9:6c:bb:ac:
                    de:d8:4e:ac:99:da:09:cf:a5:c4:f6:90:c3:19:6e:
                    2b:8a:aa:0c:03:b4:26:0a:60:4b:36:c5:78:05:c0:
                    17:2a:98:73:7c:f0:26:b2:99:08:44:3c:b6:47:13:
                    74:a1:ce:43:c9:81:f2:e2:7c:66:b9:d7:b7:14:ab:
                    8f:44:e5:e2:de:f2:44:d7:f4:49:f0:11:ba:06:3d:
                    67:8f:4e:3c:0d:3d:b0:d6:43:2d:dd:51:39:50:db:
                    13:07:dc:17:9e:ac:7a:d2:ca:d4:d2:46:6e:99:b1:
                    3b:45:b7:f7:5d:fb:d0:62:49:6e:98:ef:85:a4:de:
                    67:11:a0:60:6a:22:4e:f2:c8:7d:68:cd:fa:cc:f7:
                    38:36:5d:f1:84:e0:5d:f0:8f:51:45:c0:bb:88:10:
                    4e:41:a4:08:bc:eb:95:b8:b1:89:c9:15:68:a7:66:
                    af:34:84:ed:80:bd:51:9a:25:e8:45:34:c6:0e:24:
                    c1:bd:82:d6:ef:9f:28:f2:55:63:bd:2d:7a:56:6f:
                    5b:99:d9:62:af:2e:37:e4:e7:c1:d6:72:4b:4b:fc:
                    d5:8b:07:e1:9d:66:6d:ee:ce:33:94:d6:a8:d1:dd:
                    c2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:72:48:30:87:30:BB:2D:13:08:68:53:AA:DC:33:B6:7F:81:8B:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2ba66495-1e17-379f-9a90-2cc8dbf7141a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e1:cb:cb:d5:6f:a0:6a:13:74:47:20:65:40:b3:f8:72:63:
         6d:8d:fc:bb:10:6f:d3:a7:f2:84:8e:12:f8:74:ee:0c:81:12:
         3b:37:83:8c:df:66:56:8c:e7:7b:f0:4c:94:6e:d6:53:e6:42:
         47:79:29:80:67:3a:cf:9b:06:aa:90:27:dd:a9:67:a4:05:b0:
         fa:f1:c0:fd:10:c2:38:14:3d:97:88:4b:2f:0e:71:5e:8e:55:
         52:4c:1b:8b:44:75:e1:b6:75:03:e7:ba:6f:75:a3:f7:50:74:
         4d:8f:8d:b1:01:4a:23:91:44:9d:59:d2:ee:96:e8:23:19:f7:
         bb:bc:eb:8c:5e:bd:51:1d:b6:8d:cc:98:46:4d:b1:58:38:70:
         8b:1a:fd:4d:f8:a9:ca:81:64:e2:a0:83:84:0a:5b:47:72:73:
         ca:17:dd:fe:37:d8:fd:81:a9:56:e5:82:bc:6b:af:8e:6d:0e:
         18:85:59:c9:a8:5f:6f:9a:7c:c5:3f:59:93:cc:e7:61:eb:b4:
         bd:ca:45:78:af:f0:14:85:b3:25:95:28:fb:6b:8b:4d:5c:47:
         c0:73:6c:87:6d:da:48:7e:97:2f:4a:14:c9:6c:b6:52:6c:61:
         e3:f7:09:ae:be:ba:8a:6c:c6:52:9c:38:a6:19:c9:f5:5e:16:
         ed:ba:fd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 16:07:45 2025 by rpki-client