Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2142b853-23c7-3238-a3c6-16e702736e31.roa
File:                     2142b853-23c7-3238-a3c6-16e702736e31.roa (raw, json)
Hash identifier:          9vUWDsTRG0yYWSrN7ndxjluNAP7GQspIs3rGgtni6fE=
Subject key identifier:   DC:CB:5B:F7:E1:76:95:61:7B:4C:B0:6C:3E:E3:8B:F6:EA:BB:30:C2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849D164F9A9A7D27A187FBAC5A0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2142b853-23c7-3238-a3c6-16e702736e31.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     18779
IP address blocks:        104.253.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:f9:a9:a7:d2:7a:18:7f:ba:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=7692d506-85e5-4f06-a9db-33f7d08e38d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:53:f3:03:36:f7:f8:ad:48:a4:3f:f2:2f:7b:
                    2f:44:71:ef:d1:02:51:32:22:52:1b:70:d3:87:9d:
                    6b:88:3c:03:ad:e5:54:25:93:12:3b:b2:1c:5f:1c:
                    cd:ee:02:8e:02:a1:14:39:0d:7e:ef:be:2c:79:24:
                    af:df:79:b9:76:71:41:5e:e0:50:ac:fc:e6:5c:a3:
                    3c:0e:e0:7e:3e:00:04:3f:c6:5f:33:f4:80:83:35:
                    c3:e1:49:32:42:1e:ca:c6:fa:13:0e:8e:32:a0:32:
                    a2:56:fb:eb:05:35:1e:f4:42:53:62:e9:09:97:f7:
                    fc:29:20:b5:9b:96:26:7d:80:36:8b:28:dd:3d:f3:
                    20:f2:aa:eb:f0:69:a0:cc:18:97:d0:d9:3f:fe:61:
                    66:10:1b:4c:36:f3:8b:4d:bd:83:26:45:7b:8c:f0:
                    69:68:67:3a:a2:a2:2f:c5:dd:eb:a0:35:39:eb:a4:
                    1b:20:88:6c:7d:82:fb:7f:ff:74:d7:f8:5d:8f:89:
                    da:dd:71:57:93:0e:67:e3:35:46:d4:f2:13:37:c1:
                    b8:cd:44:9f:b4:e1:b5:a5:da:f6:30:7a:c8:1f:84:
                    27:a6:39:9c:5f:72:f3:13:b5:63:62:ba:c6:55:eb:
                    ce:a9:fb:d4:e6:d4:d2:41:94:09:7d:9a:f5:9f:a3:
                    25:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CB:5B:F7:E1:76:95:61:7B:4C:B0:6C:3E:E3:8B:F6:EA:BB:30:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2142b853-23c7-3238-a3c6-16e702736e31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a5:89:8d:a8:d3:50:9b:ac:ba:8f:d9:47:ad:06:b2:f8:ca:
         e2:e5:98:dc:7f:a0:90:84:dc:f8:04:27:dc:9c:5c:c0:41:14:
         4e:9a:a9:cf:79:bd:1c:c8:a6:b0:7d:ea:a6:08:99:b6:7d:47:
         00:6a:b2:0f:1c:48:d1:c8:68:91:9d:66:f2:e7:bb:3d:b6:ca:
         fc:2a:ed:77:55:ef:5c:4c:04:7a:ee:50:86:bd:54:31:49:e6:
         7c:8a:23:1b:bc:e6:bc:c2:33:99:b4:e5:2a:7c:a7:ee:75:83:
         3a:5c:d2:f4:35:a3:1d:73:3d:7d:57:cf:4e:48:27:cf:54:0f:
         bd:df:66:ec:1a:54:d3:f7:85:96:52:c6:bb:a8:db:1f:7e:28:
         3f:0c:28:9b:b3:30:63:06:b2:a4:25:ec:94:0f:f7:46:f3:0e:
         28:54:f3:90:de:3b:31:cd:a7:e1:b9:30:7e:bf:ed:da:3b:f6:
         17:96:81:8a:ab:25:33:e9:3b:5a:4f:31:53:ad:e2:a2:f6:41:
         52:5a:4a:4b:f0:5d:50:cf:bf:17:e9:48:7f:39:87:d9:75:4f:
         d6:7b:0d:75:d6:6c:ff:49:89:33:b9:ad:85:f7:2a:e4:99:7c:
         20:6a:cf:f5:39:fc:7e:b3:de:85:a5:1a:35:cc:17:cb:df:35:
         6e:a9:f3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:49:09 2025 by rpki-client