Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/33f4c450-06ca-3003-a618-3a973b5fbf87.roa
File:                     33f4c450-06ca-3003-a618-3a973b5fbf87.roa (raw, json)
Hash identifier:          +oXpCaT7bev8frG1nWhTsSA9PgXbnKx9KIQ221S/pDo=
Subject key identifier:   8D:B0:11:D7:AF:C7:45:71:40:44:D7:CC:13:8D:77:4B:A3:58:01:12
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B4E774737BD1E6F755DA8C768
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/33f4c450-06ca-3003-a618-3a973b5fbf87.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     205220
IP address blocks:        104.164.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:47:37:bd:1e:6f:75:5d:a8:c7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=1b02eef6-603d-44f0-a3fb-edcbb29fb4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:71:92:da:83:f3:25:51:1e:45:3d:d1:69:39:
                    87:fd:94:49:6c:1c:c2:f8:7d:81:29:2e:81:d4:9f:
                    65:c5:25:04:c0:36:24:6a:46:ce:af:69:da:7f:ed:
                    59:bf:93:01:df:bf:9f:80:df:a7:92:56:52:26:b0:
                    19:90:d7:06:df:dd:d9:97:e9:1c:f5:e8:72:ad:fc:
                    51:0f:2a:3d:3e:6e:89:0d:83:2a:2d:e8:77:49:60:
                    94:cd:f8:0e:a8:6b:39:7a:9a:c1:74:90:b4:92:b9:
                    5f:dd:66:b8:8b:71:82:bc:fc:9c:9c:a3:ed:70:cb:
                    39:71:53:dd:6b:b2:22:6c:5c:eb:a4:f4:30:d9:e9:
                    b3:98:64:25:52:8a:dd:53:3c:de:a5:81:7f:e1:cc:
                    aa:48:f6:7d:1c:40:2f:44:6c:fb:08:22:41:d7:50:
                    66:11:81:3b:87:fd:33:e7:17:29:00:9b:18:11:97:
                    30:10:5d:b7:d0:53:39:e3:bb:6a:5c:9d:3e:1b:83:
                    74:66:71:8d:c1:18:25:e3:73:46:03:d1:3c:93:d4:
                    a5:a8:6d:bd:3a:0b:11:fd:bc:f1:17:52:c2:1a:42:
                    50:d2:8f:17:aa:70:46:44:98:74:61:6d:b8:04:d0:
                    1b:9d:34:64:74:87:1d:4c:34:09:87:0b:0c:df:99:
                    87:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B0:11:D7:AF:C7:45:71:40:44:D7:CC:13:8D:77:4B:A3:58:01:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/33f4c450-06ca-3003-a618-3a973b5fbf87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:af:cb:0c:71:89:2b:28:42:1c:ac:d6:a9:aa:c4:a3:ec:03:
         f2:2b:9c:9e:34:70:06:e7:d3:51:3e:9d:b6:31:02:0a:5c:9f:
         bd:4e:fa:0d:5d:ed:e5:8f:0e:f5:22:3c:3c:1b:0c:9f:b8:13:
         9f:08:6f:1e:21:9d:b6:c7:18:73:73:fe:9b:3b:00:db:5f:a5:
         a3:14:4f:93:3c:22:a2:d3:77:bf:9a:21:3e:57:1c:9d:9e:43:
         56:09:10:dd:a5:89:79:8d:e8:13:15:13:e1:a3:53:ff:a8:cf:
         16:03:d4:b3:61:eb:26:1e:db:0d:09:31:52:96:d0:30:de:20:
         84:73:a2:8e:14:30:96:3d:c3:33:1d:87:67:cf:01:95:bf:7f:
         54:19:eb:ec:11:fd:c6:b3:73:3b:14:9f:ca:a1:bd:80:ef:d0:
         18:d2:c6:cc:5f:03:ad:a4:2e:04:9f:e4:2d:7e:0f:8a:1a:8d:
         2c:e5:0f:46:2f:1a:ae:e9:f1:01:44:b6:f4:80:fc:1c:6f:94:
         ea:07:b5:75:7a:ed:49:89:ba:cd:b8:9d:f5:70:27:0e:e5:d6:
         0b:17:fe:58:22:9f:1b:a9:00:c4:fe:28:62:69:a9:c7:d2:32:
         fd:28:b5:c4:e2:2d:87:ca:96:29:54:e5:83:c2:7d:e0:f3:5f:
         fc:79:6a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:13:35 2025 by rpki-client