Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7a88064f-7306-3332-80a4-a089cad04d65.roa
File:                     7a88064f-7306-3332-80a4-a089cad04d65.roa (raw, json)
Hash identifier:          RVWi5CT7al7GMzU+/MXA90e5nNrwdow2FjYro/Bgymo=
Subject key identifier:   76:11:20:E2:78:48:6A:E4:9D:32:4C:36:7A:69:23:51:4B:27:B5:56
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B52A731A71AB0281B17EAFA00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7a88064f-7306-3332-80a4-a089cad04d65.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     5511
IP address blocks:        104.253.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:31:a7:1a:b0:28:1b:17:ea:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=33b6a483-c2e0-4417-a57d-8a7400e65a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:40:a7:2a:2e:f4:02:32:9a:28:78:3e:fe:7f:
                    01:ea:9f:c3:b8:ec:b8:be:50:3d:1e:c9:ca:db:06:
                    cf:ac:d5:a8:15:ec:25:48:2f:2f:0b:30:12:97:f8:
                    e0:e2:01:fd:ef:cf:89:f8:df:2e:76:c0:91:8f:08:
                    7c:a6:60:43:2e:4e:5b:d7:97:0a:79:b7:3a:90:e6:
                    2a:b7:52:39:3b:9c:77:33:70:ec:87:75:f6:07:86:
                    34:3e:26:12:62:2b:76:3a:b7:81:85:91:97:65:1a:
                    c6:6e:4c:de:20:7f:5f:5a:81:4b:ce:f3:ba:84:6e:
                    a6:c8:05:85:d2:f2:e7:f3:dc:a0:4a:a6:d0:39:3f:
                    97:ba:fd:64:c3:a0:61:51:41:4d:54:92:46:e1:82:
                    ea:f0:d0:e1:75:db:69:dd:2f:cb:3d:b7:93:4e:47:
                    ad:ee:7d:b5:74:d7:65:1f:66:65:9c:f0:76:91:b0:
                    66:e0:15:6b:14:8a:c0:75:3e:27:70:d7:20:27:67:
                    24:21:01:52:f9:6a:aa:ee:d3:d1:7d:2f:f9:6c:79:
                    05:26:64:e4:00:22:b2:cb:77:1a:12:54:0d:88:15:
                    46:1b:78:67:e1:88:b9:a6:26:70:06:18:a8:8b:cd:
                    bf:11:8c:a0:90:f6:f4:2c:33:2e:08:a0:2b:2b:a4:
                    18:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:11:20:E2:78:48:6A:E4:9D:32:4C:36:7A:69:23:51:4B:27:B5:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7a88064f-7306-3332-80a4-a089cad04d65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:f4:b6:60:ac:76:a1:08:a1:3a:af:c7:f3:4b:99:f2:94:88:
         91:c9:2d:ac:55:5b:bd:d6:10:54:f5:e3:89:b2:cd:66:56:4e:
         56:0b:c1:51:0a:7a:ec:8d:b8:05:f7:9a:c7:55:70:98:13:4c:
         dd:c9:91:00:d2:fc:85:7d:f6:8a:83:e4:8a:70:a5:f8:d0:49:
         9b:87:13:5c:3f:cb:04:9e:b0:d3:f7:d9:b3:f0:9f:b2:ac:f0:
         4e:2b:e8:e2:48:0d:9b:e7:ed:79:01:ec:86:63:f0:2b:c1:d0:
         86:db:f9:b8:e9:03:95:2b:2e:ed:f1:70:70:52:a3:e5:4e:13:
         26:38:ea:b1:36:90:32:7a:43:90:0b:dc:3b:1c:16:ad:37:0d:
         1c:4f:45:d9:70:8b:67:6f:d9:a7:90:fe:da:52:28:cc:bd:b1:
         2b:78:76:e2:d1:4a:24:b4:cc:96:53:d5:25:6e:42:41:e0:2a:
         6c:3b:8c:90:1f:dd:42:b7:7b:27:02:fd:17:c6:0c:f6:e1:b5:
         86:0b:98:f8:7d:0d:28:f9:a3:97:ed:42:ca:6e:66:1f:8b:a4:
         bf:d7:bf:b3:54:bd:8f:39:dc:a6:8a:3a:77:7f:9a:a8:14:0f:
         2e:22:de:31:8c:54:a9:06:9a:dc:0c:39:e0:d8:42:71:74:ab:
         18:22:5a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:15:00 2025 by rpki-client