Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a6c7f1d6-360f-3fde-810b-c900cd2a3ebf.roa
File:                     a6c7f1d6-360f-3fde-810b-c900cd2a3ebf.roa (raw, json)
Hash identifier:          AIeT+D8mIUDuA9iRDVpyxXqFkss3XYpUZUwA/fspl1I=
Subject key identifier:   72:88:EA:46:AE:E5:03:44:DE:EF:98:95:FF:34:FB:D2:1B:A8:06:09
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849D164F7AED336E498CF796580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a6c7f1d6-360f-3fde-810b-c900cd2a3ebf.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     18779
IP address blocks:        104.253.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:64:f7:ae:d3:36:e4:98:cf:79:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=5c3b4bf2-ec1b-441c-865a-f5b74ce0ab8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1a:f0:67:a6:37:8a:9a:ce:3e:b9:6b:29:13:
                    3f:38:7a:d3:c1:99:8a:74:9c:5c:7b:71:99:a8:ec:
                    e1:cd:71:86:0b:f4:2a:40:7f:58:4f:0e:1b:08:14:
                    17:d8:9c:9e:32:d6:2f:96:bc:9f:06:f9:4f:52:17:
                    22:e5:a7:9e:fe:d4:28:98:ba:2a:96:6a:3f:74:58:
                    fe:c9:61:5a:4e:7e:93:e6:59:51:11:43:9e:56:6a:
                    19:66:02:3f:ec:d5:83:32:bc:48:46:24:0a:e2:3d:
                    c9:0c:ee:c5:c0:a5:71:48:98:3c:95:15:fa:4c:cf:
                    b2:b1:dd:7f:82:b0:57:94:1f:c0:04:89:a9:ff:37:
                    76:64:3f:54:96:56:58:3d:99:bc:d3:6b:82:65:47:
                    0d:17:be:d1:c4:64:2f:d2:21:85:ab:a7:37:d4:2c:
                    e7:e9:ed:3a:ca:32:14:2b:f7:9f:7c:e3:05:80:f6:
                    35:54:76:96:b6:69:05:87:7e:60:19:25:6a:5b:95:
                    6f:d5:ab:6e:6e:d3:a2:0a:f5:d5:a8:17:b5:fd:60:
                    b1:7f:f8:19:89:5a:e0:28:66:90:b6:8d:89:1c:27:
                    17:13:13:88:19:ed:0a:14:9e:c1:7c:b3:45:95:e1:
                    45:93:dc:bd:b2:f6:d8:15:dd:1a:43:88:bf:f9:34:
                    55:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:88:EA:46:AE:E5:03:44:DE:EF:98:95:FF:34:FB:D2:1B:A8:06:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a6c7f1d6-360f-3fde-810b-c900cd2a3ebf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a5:6c:e0:49:09:63:29:d5:7a:cd:d5:5f:b5:5b:35:64:99:
         b7:2a:91:0d:63:68:55:45:65:c4:d6:06:da:3f:24:fb:02:af:
         9e:1f:4f:ca:2d:89:49:de:60:f0:94:c7:73:74:97:e1:74:01:
         df:c8:ae:5d:a8:35:b5:fe:6d:02:04:5f:ab:24:2f:68:5a:de:
         dd:17:68:45:e8:e6:38:79:a0:22:bc:ad:a3:1c:6c:ff:99:dd:
         20:46:59:38:b6:74:1f:8f:83:6f:7d:a9:3c:20:b7:3f:f7:0b:
         b3:82:40:aa:f6:61:16:29:a0:67:8d:dd:70:dd:d3:d6:36:d8:
         a0:b9:5b:05:82:99:23:21:3c:2f:dc:da:ff:50:39:4d:46:f2:
         32:23:c5:17:b0:60:d7:a9:ca:1b:84:87:fb:c5:e8:8e:0b:6d:
         e6:14:77:51:16:cc:a6:61:e9:95:89:00:3a:99:cd:d4:19:16:
         c1:fd:07:5e:ee:c1:0c:9c:b6:2f:05:d2:92:64:28:a6:01:a8:
         d8:f9:b6:53:d9:ce:4e:55:ca:1a:3a:1d:91:11:d3:07:a5:fa:
         61:c7:6b:f0:c7:7f:f6:26:41:58:95:52:0a:1c:8f:4a:e0:44:
         06:c5:f2:ac:36:dc:c5:32:f2:94:90:86:1e:7c:0d:5f:16:9d:
         3c:a0:ae:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:42:37 2025 by rpki-client