Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5747b9c1-3b9c-3340-a489-5e82a5f64de3.roa
File:                     5747b9c1-3b9c-3340-a489-5e82a5f64de3.roa (raw, json)
Hash identifier:          SgQEwCR2492djft9TwVP54rAmoKg2GZhe6uo0UapO7M=
Subject key identifier:   B2:2C:AC:6A:F0:2A:15:82:50:28:1F:6F:4E:37:24:C0:CD:A7:74:1A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A84A5E28424F69259D53EF960
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5747b9c1-3b9c-3340-a489-5e82a5f64de3.roa
Signing time:             Mon 14 Jul 2025 18:01:42 +0000
ROA not before:           Mon 14 Jul 2025 18:01:42 +0000
ROA not after:            Sun 12 Oct 2025 18:01:42 +0000
asID:                     44559
IP address blocks:        104.164.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:a5:e2:84:24:f6:92:59:d5:3e:f9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 18:01:42 2025 GMT
            Not After : Oct 12 18:01:42 2025 GMT
        Subject: CN=ebcb914b-9c94-4d29-b785-4c645c343d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b1:20:c0:6d:0a:61:2d:ac:7c:5e:14:fa:26:
                    42:15:55:56:79:8b:a8:a6:cb:33:e2:d1:00:ee:82:
                    f6:67:10:a0:a5:81:ce:2c:e1:f1:e1:b8:79:f7:1f:
                    5b:17:67:5c:f4:a7:7a:ac:8e:e0:a9:c6:69:c0:da:
                    fb:7a:8d:81:f7:98:35:ab:38:1f:22:28:63:aa:72:
                    cc:cc:3b:94:9a:1f:48:1a:9c:a7:b6:5f:91:bf:a1:
                    8e:df:9b:f4:97:94:b5:d6:7d:a5:01:5f:19:7f:34:
                    64:28:3e:6a:46:fd:2f:00:a4:6e:d6:45:e2:07:46:
                    6f:f3:81:2e:96:20:a5:08:f0:bd:58:63:00:61:0c:
                    09:01:ee:14:ff:6c:b2:2d:71:65:85:7c:20:db:e1:
                    6c:0d:b3:14:0a:1d:0a:fa:b2:29:22:86:55:9e:90:
                    84:3f:b8:93:53:8d:82:33:b6:fe:c4:c5:90:be:3c:
                    3d:04:0b:72:d4:bd:ae:44:3c:60:dc:d8:50:43:de:
                    c9:03:e0:0a:d9:98:4b:1a:eb:12:2e:83:6e:93:0a:
                    02:f3:d5:ef:5e:66:4b:e9:ee:e0:d8:ee:0b:21:24:
                    20:51:19:b7:5d:15:8c:8a:94:5a:63:ef:42:1e:cd:
                    df:89:96:03:e2:5b:3b:a4:be:6b:f7:d9:ae:39:1c:
                    07:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2C:AC:6A:F0:2A:15:82:50:28:1F:6F:4E:37:24:C0:CD:A7:74:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5747b9c1-3b9c-3340-a489-5e82a5f64de3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:b8:67:4c:72:f4:82:5f:58:22:8d:51:11:57:20:f0:49:35:
         b1:46:33:80:58:0f:03:fe:34:f1:a4:6f:ca:ae:11:f7:7c:41:
         ef:9b:1c:78:3c:93:51:f7:4a:a7:85:bc:09:2e:5c:8d:24:ad:
         45:fe:52:38:49:6f:9f:2d:16:72:50:0f:02:c2:9b:ef:27:a5:
         c0:3a:3b:4b:c4:e0:bf:ae:fe:f9:6d:31:3e:f2:8e:80:37:1e:
         e3:4d:fa:76:91:a7:a3:23:9b:1e:ab:e1:86:30:cc:e7:ce:a9:
         fa:30:0e:de:24:8a:13:e6:03:a5:a5:4e:85:c4:97:57:2d:a8:
         f8:c1:4f:ae:14:81:3d:66:e9:e2:9b:81:ce:a7:ea:f7:d1:e2:
         fc:f0:75:38:84:da:5e:34:bd:66:a4:0f:1a:61:d3:7d:62:18:
         f6:78:b8:0e:00:35:87:2a:94:e5:e4:59:32:80:4a:90:24:e1:
         b6:a1:fa:a6:ab:ac:7d:fc:24:35:05:8e:9a:aa:10:49:07:60:
         1e:a6:f6:c3:d5:dd:8b:39:94:04:03:4f:72:d0:f2:dc:21:3d:
         94:6e:b8:00:8a:ac:3a:f0:df:08:64:5f:de:f2:8a:37:8d:07:
         2b:59:c4:53:4b:58:1e:32:03:9d:5b:f3:8f:df:20:09:46:a3:
         10:d5:ff:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:12:28 2025 by rpki-client