Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/55cb5491-0dce-34f5-a106-7c81626443c9.roa
File:                     55cb5491-0dce-34f5-a106-7c81626443c9.roa (raw, json)
Hash identifier:          +kXsi4fsdCqCy6NKNQ9cWZugZds8rQV8COsjnVIq028=
Subject key identifier:   07:84:EA:76:AC:4D:0B:7E:C5:73:B7:33:2D:4B:FB:E2:6B:B8:71:AE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A560057B35D8396DCDFF71AC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/55cb5491-0dce-34f5-a106-7c81626443c9.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     59711
IP address blocks:        104.252.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:57:b3:5d:83:96:dc:df:f7:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=60d47a59-1826-4352-b4a2-49d17ec716ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:56:8e:73:06:ce:c1:f5:3f:9c:64:05:ac:aa:
                    f0:2f:7e:0c:30:35:dd:ec:d8:a0:9f:40:c1:75:a7:
                    46:99:3c:86:82:51:1c:66:6a:35:8e:f4:a2:94:6b:
                    2e:37:47:77:ce:51:e2:6c:c0:b9:e4:93:ed:cb:0f:
                    8d:22:ec:93:20:7c:66:ec:25:65:4b:66:c1:62:26:
                    99:25:1a:15:bd:7b:f8:20:90:95:b7:42:8f:ff:8d:
                    82:46:cb:0b:a5:97:9c:4d:7a:d0:e6:fd:b1:f4:a7:
                    0c:7c:e4:77:d6:be:d5:73:7e:be:3f:bd:f1:00:2d:
                    98:e2:6b:32:99:92:90:1e:c3:1e:42:67:13:48:10:
                    97:d2:a1:b4:be:98:05:ce:59:00:09:4e:30:6f:4a:
                    51:58:31:50:00:74:35:97:8d:c0:01:0d:de:66:b8:
                    87:fa:67:1a:97:0d:a9:29:a9:1d:3d:e2:e6:aa:9c:
                    68:07:12:e2:33:59:66:7a:31:c4:85:e0:dc:11:96:
                    69:b5:65:4b:8c:d0:61:56:e5:d0:23:91:38:df:de:
                    7b:eb:3f:6e:14:fd:17:42:75:3c:c3:ae:fd:d4:e6:
                    81:60:6b:e4:95:23:77:fb:4c:7f:fa:c9:aa:1f:56:
                    31:9f:8c:63:57:b3:dd:84:14:44:66:2a:8e:1a:39:
                    3d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:84:EA:76:AC:4D:0B:7E:C5:73:B7:33:2D:4B:FB:E2:6B:B8:71:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/55cb5491-0dce-34f5-a106-7c81626443c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:c4:90:56:59:68:f1:f1:0b:4a:0b:b4:95:91:52:72:77:62:
         25:41:56:89:a9:9e:0f:a7:25:5f:01:06:ae:01:76:b7:3f:3a:
         5b:9c:4b:e3:f9:81:f6:f9:e5:a6:b1:ea:e4:05:6c:b8:7b:41:
         53:1c:e1:66:8c:6a:09:87:40:98:96:cd:e9:ab:0f:82:0d:6f:
         7b:34:be:54:cb:1d:96:19:02:25:ba:08:31:9c:d6:55:27:9f:
         70:b5:ab:6a:0a:85:5b:19:35:4d:74:98:b8:75:48:20:06:dc:
         a6:17:8d:75:6a:75:3e:0a:bb:96:26:7b:21:1f:f8:3a:50:06:
         74:78:84:26:6e:80:e3:96:87:bc:3c:93:a0:ba:95:bc:ee:4a:
         fb:ce:6d:22:83:29:50:ed:dd:cf:18:98:84:f9:f6:d4:92:92:
         87:76:0a:d6:13:b9:4b:5e:4d:6d:3e:68:ff:2b:93:15:54:3c:
         69:b6:90:05:c1:88:31:b9:5e:a4:21:63:95:45:84:09:65:41:
         0d:7c:28:71:2b:66:17:3d:6e:6f:4b:21:b3:e7:ca:ed:36:82:
         1f:1c:21:7e:37:c6:bd:76:2a:6e:37:27:96:bd:e2:8c:2d:a6:
         92:a2:b4:0c:d5:69:8a:4c:4d:ce:93:66:53:e8:bd:55:96:af:
         e4:21:32:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 23:26:02 2025 by rpki-client