Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6ff95b85-bcd4-3986-8340-9e2533a1753a.roa
File:                     6ff95b85-bcd4-3986-8340-9e2533a1753a.roa (raw, json)
Hash identifier:          kC/PQ70jz2ikmhmtPFpwrCX3GX+4Afbe9zcFIm9u5wQ=
Subject key identifier:   C7:21:F8:11:F5:5E:F9:5F:9B:11:38:28:45:8C:7C:03:63:0D:B5:3D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B0A117014C8B9EB05C92E9700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6ff95b85-bcd4-3986-8340-9e2533a1753a.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     9009
IP address blocks:        104.252.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:70:14:c8:b9:eb:05:c9:2e:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=88e2a288-f9e3-4bda-9688-1feadfd52f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bb:d3:e8:79:f0:a2:71:06:c9:40:1e:70:99:
                    de:13:90:01:d4:42:ad:4c:b3:e7:a0:16:9a:81:19:
                    e1:3d:57:a8:2d:3a:38:f2:38:f7:b8:1e:ce:8a:79:
                    ca:b9:f2:80:b0:f5:34:81:bb:08:87:74:75:97:3c:
                    9d:1b:05:82:65:b4:0a:73:35:1a:53:4e:5f:b4:c7:
                    5e:2b:a9:97:34:4c:4d:80:17:b7:f3:31:d8:21:df:
                    6e:7c:69:ff:b0:e9:70:7d:36:48:04:b4:a0:9f:97:
                    0b:ee:1b:5b:0e:d6:98:e9:30:29:94:21:13:a1:27:
                    40:d4:ca:4c:e1:9b:3a:d3:70:16:a1:2e:a4:58:37:
                    b6:18:6d:66:7b:e8:ce:9e:d3:50:cb:17:2b:d5:c4:
                    d4:4a:6f:1c:ab:31:dc:a0:36:e5:83:5f:ea:63:99:
                    e1:f8:7f:16:71:bf:73:9f:e7:3e:1e:99:c8:ab:26:
                    7e:34:31:bc:22:2e:ae:ab:2c:c2:89:0f:0c:83:40:
                    a6:46:67:19:ee:12:13:62:37:9c:58:56:bb:fb:6b:
                    58:ef:8b:b1:16:0a:9d:da:97:56:29:60:9c:f5:5e:
                    78:7a:43:45:77:36:6b:52:04:25:03:34:03:6c:1a:
                    d8:47:38:2a:ac:45:40:3b:6a:6e:40:e2:56:5d:d0:
                    98:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:21:F8:11:F5:5E:F9:5F:9B:11:38:28:45:8C:7C:03:63:0D:B5:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6ff95b85-bcd4-3986-8340-9e2533a1753a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:1c:ff:46:9e:0c:8a:60:40:25:f2:13:83:ba:83:f0:84:26:
         13:5e:5c:20:d1:54:90:b7:56:0c:5f:b3:f2:75:f7:3d:51:8c:
         32:ee:4b:83:4b:9c:ba:51:fa:8a:db:e3:a1:2c:e5:07:32:95:
         d5:0e:cc:16:64:7d:24:1d:62:5b:c1:10:25:ee:7a:67:a2:69:
         48:f4:c7:ad:d3:3c:42:45:57:94:e4:24:0c:6b:ec:2d:67:08:
         58:f0:4f:4b:cf:93:46:2f:17:c9:8f:22:85:c2:3b:94:d9:0b:
         07:a5:2b:28:2c:1f:9d:a8:a1:39:e7:db:a1:af:6f:3d:ce:c3:
         fe:33:13:9c:c2:bf:ec:cd:4d:25:0c:4a:bd:df:72:18:df:c5:
         8c:7c:1c:39:62:66:06:b7:fc:bb:1d:14:a8:70:27:9c:cf:5b:
         d4:d1:ff:d7:98:34:38:77:d6:3d:2a:e0:b6:d4:d4:85:8e:27:
         8c:2e:15:28:a8:6a:33:3d:bf:a2:48:88:96:08:ed:ee:92:e4:
         13:eb:21:75:e8:72:be:ab:26:01:32:a6:03:2b:30:e4:22:cd:
         09:d2:30:0b:83:11:50:34:06:69:f1:f7:c7:00:89:9c:18:f8:
         7a:e1:d5:2c:7a:7e:af:b8:14:1e:65:3f:88:fe:2e:89:c3:ec:
         89:80:30:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:35:49 2025 by rpki-client