Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0714657e-0842-3d9b-9892-c3a99ca3eda7.roa
File:                     0714657e-0842-3d9b-9892-c3a99ca3eda7.roa (raw, json)
Hash identifier:          9xUSJJ1QUAYNAMNZMmxspKmMtabIZ/p3mqzPqeMMFRg=
Subject key identifier:   DB:1A:5C:F1:B4:05:15:5C:32:00:62:E5:C4:AE:E5:70:D3:F7:76:A0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A94D0E1D7F170974867120680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0714657e-0842-3d9b-9892-c3a99ca3eda7.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     209242
IP address blocks:        104.164.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:e1:d7:f1:70:97:48:67:12:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=d4c0f198-2895-4a4b-ad0b-096d5a21be80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:28:63:96:38:c0:e9:e3:4c:7a:18:93:b8:bd:
                    a8:a9:d7:b4:1b:8d:25:0d:ef:47:ff:fe:50:e5:75:
                    81:4a:dd:6b:72:bf:63:5f:cb:e9:95:9e:ab:93:87:
                    11:8c:a9:21:13:3b:3f:16:db:20:92:6f:f7:c3:0e:
                    d7:fe:cd:f2:8f:ec:4c:b8:21:c9:37:f5:6e:79:3e:
                    1c:0a:71:5b:10:52:82:f5:fb:78:e8:9d:77:8c:81:
                    81:0d:8e:25:25:db:d9:21:e3:46:4b:9a:0c:12:3c:
                    fb:a7:28:2d:bf:5a:37:a3:be:13:21:a2:7f:19:d1:
                    35:91:65:b5:a5:2f:63:6d:c4:d9:d5:1c:b7:55:42:
                    36:d4:a6:34:49:fe:cc:f4:8c:f0:ae:4a:48:9d:2c:
                    26:f1:39:ff:d9:cc:00:12:60:d0:1a:d6:dd:ae:bd:
                    16:26:d8:5b:c6:6a:75:77:d8:80:fa:6c:45:62:97:
                    b8:38:21:37:54:13:46:b4:72:6e:2c:d7:de:51:40:
                    e9:10:df:17:e5:c7:71:1a:18:0b:d8:a8:4d:e7:fb:
                    d9:d0:12:1f:3c:b4:53:87:72:f2:3c:2f:58:a5:82:
                    b8:7b:b9:00:2e:65:a8:06:d1:36:18:9c:c9:e4:c9:
                    0f:07:8f:41:33:0f:92:24:07:b3:90:e5:43:0f:bb:
                    39:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1A:5C:F1:B4:05:15:5C:32:00:62:E5:C4:AE:E5:70:D3:F7:76:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0714657e-0842-3d9b-9892-c3a99ca3eda7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c7:6d:24:b6:9f:6e:d2:e5:77:1a:35:24:2e:e8:1a:3d:31:
         0b:34:a3:94:67:e0:30:69:b5:3a:1d:17:00:d4:44:85:a5:a9:
         81:20:01:1b:09:fd:91:7e:c4:87:91:fe:44:1e:91:74:de:bc:
         4d:72:7a:e3:7c:6e:63:be:2f:56:14:94:15:b3:91:b6:eb:2f:
         03:ae:72:81:da:0c:a7:08:09:6c:8f:a0:51:90:54:1f:b7:91:
         74:34:65:e8:5a:92:aa:10:55:59:0c:80:ec:cc:00:ab:eb:2b:
         e1:ce:0f:ac:50:b0:60:36:e2:e0:f1:12:64:c5:ed:ad:e6:4b:
         4c:aa:58:4f:ae:a1:38:a7:8c:38:0a:b1:3a:41:c0:e1:20:fc:
         e1:77:d1:5b:05:7f:09:08:64:c1:17:8b:ce:7c:75:5c:ed:60:
         df:0c:b7:ba:75:47:83:9f:9a:b2:a0:ef:af:02:62:03:ca:1a:
         32:65:ea:4f:7c:4d:89:f8:b6:e4:b0:a4:19:b9:20:89:4f:e7:
         f9:10:8c:35:8b:0a:9e:8c:81:85:70:31:ef:3f:9d:61:17:0d:
         3c:08:a9:13:dc:39:06:3d:6a:f0:67:20:b2:4e:b2:47:66:b2:
         19:a0:0f:48:26:06:3d:e5:64:43:74:56:76:bf:27:32:e3:cd:
         64:67:00:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 02:08:07 2025 by rpki-client