Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac70cd1e-d645-3c0f-ba33-e237c2072447.roa
File:                     ac70cd1e-d645-3c0f-ba33-e237c2072447.roa (raw, json)
Hash identifier:          1+3D4ylc+TXlSnVuLb8MrOrh52RKGy0/jLES9SRozQg=
Subject key identifier:   94:E5:C8:B8:26:AE:F5:98:EB:F1:A2:4D:5F:03:50:9D:28:1F:F3:C1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A84906C0D8005A7B7FBC425CD
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac70cd1e-d645-3c0f-ba33-e237c2072447.roa
Signing time:             Mon 14 Jul 2025 17:18:27 +0000
ROA not before:           Mon 14 Jul 2025 17:18:27 +0000
ROA not after:            Sun 12 Oct 2025 17:18:27 +0000
asID:                     44559
IP address blocks:        104.252.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:90:6c:0d:80:05:a7:b7:fb:c4:25:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 14 17:18:27 2025 GMT
            Not After : Oct 12 17:18:27 2025 GMT
        Subject: CN=7bc8112b-95f9-4e73-aec5-ec4137f0e5aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bb:1f:79:96:3f:c6:e0:73:64:8d:75:4a:38:
                    c0:5c:0f:30:ae:e0:64:0a:9f:24:3c:b9:9a:aa:33:
                    0e:45:25:4f:f9:08:31:40:4d:c3:c9:04:4d:1f:6e:
                    24:45:97:09:73:a1:fb:7d:d9:78:82:5a:1f:2d:e9:
                    ae:6e:9a:1e:a1:c6:d0:4a:61:ea:9d:50:f2:92:67:
                    cd:fb:59:40:78:0d:ae:8a:55:6d:39:3a:4f:a1:1a:
                    58:e4:39:a8:66:7a:70:01:ee:1e:bc:aa:bc:8a:74:
                    6d:25:ec:6f:bc:d5:86:e2:07:34:1d:80:c0:ea:78:
                    98:33:48:26:f3:59:6f:a9:dc:8a:17:70:40:f2:7b:
                    03:31:14:a5:7f:ee:50:fc:10:23:8c:56:dc:c4:04:
                    a7:18:0d:02:2d:de:04:23:6e:de:26:ac:6d:03:e5:
                    cb:40:a9:dc:69:be:2f:86:ab:b5:c3:30:9b:36:1a:
                    14:20:b2:25:3e:d4:26:ea:3e:c8:98:e5:fd:85:de:
                    6b:84:e8:54:84:55:d1:89:79:f3:a2:5b:ad:0d:22:
                    ef:56:73:3e:df:c4:8d:f4:ee:f6:f8:bf:9f:9b:f1:
                    a6:76:ac:a9:2d:6f:26:18:66:7c:87:1c:80:cd:79:
                    69:e3:c3:ac:51:1d:1a:3c:2e:91:70:be:bf:ac:ef:
                    99:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E5:C8:B8:26:AE:F5:98:EB:F1:A2:4D:5F:03:50:9D:28:1F:F3:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ac70cd1e-d645-3c0f-ba33-e237c2072447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:a0:46:99:a8:03:40:73:40:7c:f2:c3:11:01:47:18:9b:2a:
         f7:0d:dd:e8:e1:01:b8:7d:fb:18:a5:20:44:cf:db:43:67:63:
         32:d9:1c:df:f7:f5:f6:17:ee:08:32:18:8b:e6:74:e3:51:30:
         66:af:36:40:f4:a4:07:90:8a:d5:e1:f4:b3:1d:5f:fd:b3:fe:
         10:9a:ee:37:b9:b0:0e:e5:9a:dd:9c:be:80:81:ef:7c:bd:82:
         17:e8:bd:6a:93:41:38:7c:c0:3e:e8:b8:76:db:ea:ec:ca:9d:
         de:1c:11:5d:ed:3c:6c:e7:46:b2:04:61:96:03:ab:04:a8:23:
         bc:97:ad:47:f0:22:fb:dd:a5:19:75:0e:c6:b9:2d:08:9f:52:
         95:73:a4:b7:90:75:d1:81:23:db:eb:1a:9d:66:e9:f6:d6:a5:
         9e:8b:01:9c:6a:21:c8:f2:4b:16:d6:24:66:bd:39:20:6e:0e:
         87:15:02:08:2c:11:26:b9:49:8b:40:86:3a:c3:da:3b:6f:d3:
         2c:25:d8:1b:13:e6:1b:41:f9:05:5e:d3:78:e2:09:e4:b3:24:
         21:2c:24:00:a5:e4:a1:da:33:ff:17:cc:ae:33:74:cc:b7:d0:
         7d:24:d8:d2:f5:4e:da:f9:6b:68:e4:b8:78:ff:85:27:65:55:
         9d:cf:99:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:40:52 2025 by rpki-client