Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/80d63c3a-b2b4-3920-af7b-8d27fec8e68e.roa
File:                     80d63c3a-b2b4-3920-af7b-8d27fec8e68e.roa (raw, json)
Hash identifier:          Ay2lVeANBUXkaXgJrCX8+EuTAP1OSs63YbkW9RSVo2E=
Subject key identifier:   9C:D6:F4:74:6E:3E:0E:30:C9:C1:14:F7:D2:00:8A:61:CD:43:B8:05
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B0A117070662AAC1960737400
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/80d63c3a-b2b4-3920-af7b-8d27fec8e68e.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     9009
IP address blocks:        104.253.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:70:70:66:2a:ac:19:60:73:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=9378f8fc-74e8-42ee-9761-b15b048fef6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c2:61:8c:da:d8:37:5a:ee:0f:65:5c:b1:fe:
                    16:06:31:03:55:00:f4:e9:e7:b0:1f:b8:19:02:28:
                    bf:1f:ce:75:f3:3d:f0:ff:d9:d8:9d:9e:cd:13:b9:
                    22:83:79:ab:1f:16:fb:c0:a5:b1:e3:0d:8c:34:64:
                    90:88:95:5e:ab:e4:70:1c:b5:ac:e3:af:70:e6:d2:
                    2c:fe:f5:a2:d2:29:be:dc:66:66:88:a4:93:c8:de:
                    d5:5c:36:ad:1d:b9:0b:6e:fa:c8:d5:b5:50:1b:f8:
                    68:e4:97:94:ed:b0:6b:54:7a:81:28:cb:6d:d2:3d:
                    f3:c0:0d:9b:02:22:ea:85:b1:c5:cb:d8:83:e0:57:
                    c2:dd:89:28:b2:d0:a9:25:5d:58:76:f6:d5:9b:1b:
                    d0:f4:bb:1a:61:94:4f:34:ce:ec:d7:de:ba:55:25:
                    22:e5:78:e6:0e:81:0f:04:68:4e:e3:b0:d9:f2:ac:
                    72:fa:6b:49:93:ca:80:25:b4:48:9d:c6:41:72:e6:
                    cc:a9:f3:97:e0:cf:88:9e:16:4f:88:f9:24:73:c4:
                    04:8f:58:39:59:78:72:f1:c2:9a:7f:43:6e:75:5f:
                    b8:76:fa:05:31:32:06:48:c7:97:fa:db:f3:04:f3:
                    9c:e1:c3:8f:79:1f:9b:17:d4:e7:06:ce:e1:dc:2d:
                    e2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D6:F4:74:6E:3E:0E:30:C9:C1:14:F7:D2:00:8A:61:CD:43:B8:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/80d63c3a-b2b4-3920-af7b-8d27fec8e68e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e7:4e:36:bb:78:ac:1c:69:b1:80:34:2d:ce:d2:e4:38:a3:
         0e:e4:d5:59:06:07:25:48:d5:d9:12:4c:55:82:bd:59:61:82:
         32:74:a7:84:9a:a6:76:f6:75:f3:3a:b8:86:5d:bc:bf:2c:ec:
         96:4b:b0:04:84:b1:19:92:2a:5a:ff:f8:9f:a5:2f:60:8e:96:
         de:cc:69:d7:8d:36:55:6c:6c:75:5d:59:3b:5a:38:97:91:c1:
         41:b8:78:f0:39:f8:bf:96:ed:25:82:35:41:3f:40:20:d6:43:
         f5:92:51:59:6f:08:88:db:54:8b:4c:70:6c:70:74:46:c3:c8:
         90:c0:68:1d:86:69:c5:a4:cd:cc:b5:8d:0f:b7:db:bf:9b:51:
         98:ff:d3:56:f7:21:23:b9:81:f7:f0:f7:ba:48:23:d1:a4:c2:
         cb:ba:66:41:22:ee:06:03:60:57:7e:39:0a:d6:b7:b5:07:ae:
         24:4d:e6:09:82:81:b4:fb:3d:08:06:04:6d:1f:fc:1e:07:c7:
         3b:94:9d:ad:a0:bb:85:6f:e1:49:ee:d6:d9:38:4e:d2:f8:ae:
         59:f0:68:89:d3:e5:d7:82:37:45:83:aa:fa:4f:49:00:c3:88:
         f9:be:25:76:d6:ce:2b:ca:45:44:a6:a8:1e:c5:b2:5d:c7:4e:
         71:62:8e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:25:35 2025 by rpki-client