Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6456a8a3-b2c4-3a0e-8f11-5eb4990dfa1b.roa
File:                     6456a8a3-b2c4-3a0e-8f11-5eb4990dfa1b.roa (raw, json)
Hash identifier:          mYW9XAQTu149IIqimO16aXq9MNbfHQmzUyyIv2rlJHQ=
Subject key identifier:   1B:61:AB:BD:88:9C:B0:6E:D3:BB:28:87:76:F1:29:5B:B0:43:DE:23
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A851B720CD70207EC7A6A0800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6456a8a3-b2c4-3a0e-8f11-5eb4990dfa1b.roa
Signing time:             Mon 14 Jul 2025 21:58:34 +0000
ROA not before:           Mon 14 Jul 2025 21:58:34 +0000
ROA not after:            Sun 12 Oct 2025 21:58:34 +0000
asID:                     44559
IP address blocks:        104.253.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:1b:72:0c:d7:02:07:ec:7a:6a:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 21:58:34 2025 GMT
            Not After : Oct 12 21:58:34 2025 GMT
        Subject: CN=bdd6f90a-70a9-4be6-8650-c69fc28f62ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f1:4a:0d:89:98:c3:5e:82:d3:9b:55:be:03:
                    e2:b6:18:20:5d:81:38:5e:72:53:75:6d:33:f9:63:
                    fe:bf:4f:9e:c2:d4:2d:3d:b2:cc:84:fc:f8:05:1f:
                    37:6a:b5:9a:a5:8a:e9:e6:77:82:d1:dd:55:6f:14:
                    0b:4c:2b:1d:8e:31:80:d2:1e:b0:6e:fe:00:0b:61:
                    6e:4e:82:8c:ee:24:f0:88:3b:05:b2:38:34:9c:b3:
                    9b:ab:ec:46:0a:e1:42:d7:c0:ab:13:c6:b7:71:93:
                    d2:67:4c:6b:b0:56:49:2f:48:7c:2d:2c:33:33:5f:
                    46:61:ea:ae:46:ae:3a:c0:48:2c:b2:d7:34:d6:0e:
                    79:bc:f9:64:49:8b:f7:dc:47:67:7d:5d:76:51:6a:
                    21:3c:92:42:4d:5d:09:14:56:68:e7:ca:53:b9:79:
                    43:2d:0e:e4:c6:b0:86:eb:cc:96:4c:81:32:f9:42:
                    02:85:1b:10:0a:72:68:3b:96:92:0f:67:2f:cf:8d:
                    49:63:bd:70:59:c3:14:53:41:ed:91:af:d0:9c:e1:
                    5c:c3:00:25:5b:ba:07:1e:11:03:f6:6d:d0:c2:78:
                    78:ba:ad:b1:f1:a8:6f:62:d0:c9:14:82:23:89:11:
                    60:c2:00:c3:a9:65:9b:60:b0:60:33:17:99:61:36:
                    c1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:61:AB:BD:88:9C:B0:6E:D3:BB:28:87:76:F1:29:5B:B0:43:DE:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6456a8a3-b2c4-3a0e-8f11-5eb4990dfa1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:4d:c5:6c:df:05:c8:49:55:15:72:85:12:47:8e:6f:69:ea:
         ea:11:92:29:d8:d6:5e:06:68:e1:de:35:f5:33:51:b1:27:da:
         b5:4e:11:eb:10:4a:8a:37:a7:35:0f:f1:10:8b:78:e4:b9:45:
         93:a1:81:56:25:ea:b3:62:02:a6:96:e1:04:76:a5:1d:8c:ce:
         f3:e4:44:15:c7:fe:9e:ce:12:e6:02:b7:72:1d:67:5d:88:cf:
         1b:06:b3:44:2c:43:8d:e6:df:75:08:cb:42:a5:23:6b:4f:bb:
         be:c9:fa:21:a3:46:6d:3c:8c:fb:db:5d:c4:1b:c9:5a:55:68:
         41:99:4b:89:77:18:56:42:d1:58:6d:a2:87:6e:17:9f:ff:c5:
         94:31:a6:f5:11:ca:78:3b:e2:2b:0e:9a:12:0c:f3:ce:aa:6e:
         d1:f7:9b:9b:5f:13:10:c9:a0:22:02:fd:74:82:74:7a:ab:7c:
         22:3b:59:74:2c:56:af:6e:e7:6c:fc:ab:4e:0c:dc:b4:ed:a0:
         d6:b2:b6:74:a3:db:3a:72:ab:3d:37:12:2b:8e:42:88:73:37:
         1d:f4:26:4f:85:06:8b:7f:75:c5:a2:9d:93:26:cf:83:6d:a0:
         7e:7f:b9:c4:7d:c4:f3:4a:9b:ff:15:30:19:d2:24:41:2d:86:
         49:f7:2f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:55:06 2025 by rpki-client