Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d6ce5294-7ac7-33a1-94eb-8ee531d76852.roa
File:                     d6ce5294-7ac7-33a1-94eb-8ee531d76852.roa (raw, json)
Hash identifier:          2Db1PTmhmSIWuL1Cqn0eeVFYBtVUjXGJvB10hp6DT6g=
Subject key identifier:   AB:37:89:27:1E:65:E9:24:EA:CF:F8:78:1B:67:B0:E3:EE:17:30:87
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B0A11710EA9B0E88AC1E1A100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d6ce5294-7ac7-33a1-94eb-8ee531d76852.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     9009
IP address blocks:        104.253.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:71:0e:a9:b0:e8:8a:c1:e1:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=2bc446a9-af7e-4744-aa97-ed4e482aa35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:57:f5:64:66:71:f5:0e:ce:5b:cf:10:5c:fd:
                    4d:24:55:6d:8e:f3:29:80:1d:c6:ca:6a:34:4b:76:
                    ab:a4:aa:ce:fe:68:b7:29:6a:3d:4f:9c:7a:9c:7f:
                    8c:1c:4e:83:4a:b1:4b:b3:23:f8:6a:83:dc:fd:06:
                    3f:42:40:dc:d1:4b:1f:e2:ff:c4:f0:14:e7:bb:3e:
                    74:25:eb:1f:76:fe:69:b4:bc:fe:21:d6:be:b6:df:
                    d0:7f:28:bf:45:f4:4c:c9:b3:06:c4:23:5f:20:4b:
                    ba:f3:2b:4b:cd:d8:a1:e4:f4:32:ce:41:60:96:82:
                    03:cf:be:9d:79:3b:78:f0:21:38:81:0e:87:cd:f9:
                    3a:10:61:0c:96:b1:a4:4e:d6:26:c0:e4:26:94:15:
                    87:75:aa:96:4a:a3:fd:76:79:26:95:2c:f9:4d:22:
                    6e:2c:35:4d:ec:36:7d:5e:de:56:ac:07:17:6a:7d:
                    fd:61:ff:55:12:60:e3:ad:cc:d7:84:d6:6c:37:7d:
                    74:d4:cc:98:c1:60:4d:c1:b1:ec:82:40:c5:10:2f:
                    02:ea:02:b6:87:53:bd:96:57:f4:f7:5f:5c:87:12:
                    84:90:d7:56:0b:ec:9a:9e:9b:52:6e:5e:ac:04:c4:
                    47:59:1d:57:14:8b:17:90:63:1f:46:34:05:d7:d4:
                    d0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:37:89:27:1E:65:E9:24:EA:CF:F8:78:1B:67:B0:E3:EE:17:30:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d6ce5294-7ac7-33a1-94eb-8ee531d76852.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:df:bc:91:33:05:9a:a2:a7:44:07:21:d2:75:20:95:cd:c9:
         79:2a:ce:01:3a:37:96:c5:74:30:59:40:b9:7a:9d:6e:cc:01:
         27:a3:b7:d9:2d:62:d9:f9:9d:9a:4f:99:df:c5:0e:cf:16:97:
         47:11:69:60:c2:23:b9:d2:47:1f:0d:b1:ae:77:43:8f:88:d9:
         dd:54:2f:74:86:0a:d2:83:c3:3f:13:69:2f:99:c4:fb:ec:9c:
         d8:68:65:07:b0:4b:31:1b:61:6f:12:3c:1d:06:8e:03:d4:4c:
         c9:fa:82:20:1a:e7:0a:b3:07:de:99:40:9b:a8:b0:68:91:79:
         c6:91:2f:92:26:f7:cc:c8:d3:71:0b:a8:32:59:46:8a:bd:54:
         18:6e:35:e8:34:1a:cb:ec:78:d6:30:0e:29:a0:8d:d8:d7:97:
         66:b6:07:e1:8c:51:c0:77:35:7e:d2:f7:67:9b:27:34:fe:46:
         96:8e:7a:56:73:29:7c:1a:be:5b:d8:fd:58:a6:33:a3:ee:ae:
         ed:d5:c4:9e:22:8e:aa:b1:b1:db:c9:dd:89:df:f9:1b:45:c7:
         21:08:aa:ca:b2:27:89:cf:bd:e5:22:c2:e7:86:10:40:e3:94:
         15:06:7d:43:5a:bc:fe:80:cb:1a:13:46:87:d0:bd:42:4a:4c:
         88:95:22:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:45:06 2025 by rpki-client