Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/72040203-2b11-3e49-9bf7-6eeb1cb96b68.roa
File:                     72040203-2b11-3e49-9bf7-6eeb1cb96b68.roa (raw, json)
Hash identifier:          aJXNlCoJhg1oTOZTViakJYu21aXvXLvC16IkO2L8A8M=
Subject key identifier:   24:5A:2C:9C:9A:33:DB:3E:2B:BF:6F:EC:C5:A2:87:5F:5A:7F:32:CC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A655B33E277149F338A002B80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/72040203-2b11-3e49-9bf7-6eeb1cb96b68.roa
Signing time:             Thu 03 Jul 2025 13:01:04 +0000
ROA not before:           Thu 03 Jul 2025 13:01:04 +0000
ROA not after:            Wed 01 Oct 2025 13:01:04 +0000
asID:                     7018
IP address blocks:        104.164.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:65:5b:33:e2:77:14:9f:33:8a:00:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  3 13:01:04 2025 GMT
            Not After : Oct  1 13:01:04 2025 GMT
        Subject: CN=bbf3e9d0-a7e3-47c5-8a09-51db172f1168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4d:1d:5a:41:3b:b3:34:7e:cd:a5:ec:bc:ea:
                    7c:20:06:f4:29:51:2c:90:cc:ae:38:58:11:fe:1a:
                    10:2c:39:55:d1:40:da:a0:3a:1b:a2:17:28:5a:68:
                    c1:9c:12:7f:37:6a:4c:48:0b:24:e3:a9:6c:dc:2d:
                    e3:fc:22:cc:e5:48:8c:78:d8:61:63:a9:3f:cb:ef:
                    ed:94:7f:fc:c3:aa:fc:a4:56:89:cd:8d:b9:78:1a:
                    b9:b3:43:10:ed:0e:b6:cf:68:f8:ec:46:3e:f0:f9:
                    ee:19:93:56:a6:f3:17:05:db:a5:24:6d:f7:c0:ee:
                    31:7d:c7:c7:38:5b:22:60:7a:e6:6f:5d:6a:2d:d7:
                    a6:70:1f:83:94:a2:b9:3f:88:3b:86:ab:31:b0:a2:
                    ba:f3:44:37:e6:a4:7a:0a:c7:42:82:e1:bc:f9:d8:
                    1c:4d:7a:77:d2:ff:05:9c:c1:e9:42:6c:10:ca:90:
                    49:ff:82:53:2f:9e:1b:28:0c:30:bf:30:da:f7:c3:
                    60:22:5e:f2:52:cd:2a:de:ee:64:91:7e:cb:97:80:
                    f4:ca:ad:e7:c7:73:1d:85:0d:b9:23:9c:d6:2a:e9:
                    b6:f2:24:b5:70:8a:40:02:f4:9c:dc:98:55:cf:b9:
                    ac:28:1b:d5:f2:58:bf:9e:a5:96:d1:98:4e:d5:73:
                    f5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5A:2C:9C:9A:33:DB:3E:2B:BF:6F:EC:C5:A2:87:5F:5A:7F:32:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/72040203-2b11-3e49-9bf7-6eeb1cb96b68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:35:0b:63:f6:ea:e8:b2:37:d9:cb:31:15:52:53:29:9c:e2:
         fd:2a:2b:93:b3:89:44:71:a4:0b:b2:87:16:53:74:90:4b:24:
         80:e6:26:aa:b5:75:16:3c:46:98:45:52:f8:94:28:67:fc:e7:
         5a:b1:d8:66:27:bf:0c:22:fd:ce:ed:85:36:db:4a:b4:1c:2c:
         81:25:c2:fa:de:bf:0c:66:e6:e5:cd:72:18:11:f5:21:49:79:
         d5:69:61:8a:e8:b9:e2:86:28:d6:c4:26:a4:36:94:14:f7:57:
         54:f4:7e:c6:db:fb:1e:60:a1:c7:42:6c:d6:65:42:69:aa:82:
         58:0f:09:ca:6e:de:31:3f:dc:39:8e:76:62:c2:26:02:80:85:
         3a:a9:67:f6:59:2b:a4:6e:72:af:ba:5d:31:fd:50:e9:65:9e:
         3d:12:34:7f:e6:59:35:06:6d:18:c5:6c:23:78:55:16:53:c0:
         22:ba:52:25:9a:fe:d6:66:55:41:ec:3b:93:74:f2:72:16:b3:
         68:a0:99:f2:7c:19:94:a2:24:2c:8c:b1:dc:80:07:6d:5b:d9:
         1b:29:18:a5:46:2a:b4:6f:75:62:42:b3:d3:5b:c8:3c:0c:a3:
         8c:0e:95:3e:86:78:c6:49:c4:48:8d:e9:45:8c:25:34:31:c0:
         24:25:1a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 23:20:41 2025 by rpki-client