Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f1411221-5325-3bae-aa14-7bd49c2cf05d.roa
File:                     f1411221-5325-3bae-aa14-7bd49c2cf05d.roa (raw, json)
Hash identifier:          IiMB/IB8f2iE/ki3XtKL9VmJSvpQzlHPXuzzVFUflZ0=
Subject key identifier:   D2:5F:3C:72:16:5E:36:B2:F3:D4:DA:82:0D:B7:63:49:22:7D:D5:45
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A036A630332E000E4824E9180
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f1411221-5325-3bae-aa14-7bd49c2cf05d.roa
Signing time:             Thu 29 May 2025 11:02:33 +0000
ROA not before:           Thu 29 May 2025 11:02:33 +0000
ROA not after:            Wed 27 Aug 2025 11:02:33 +0000
asID:                     54339
IP address blocks:        104.164.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:6a:63:03:32:e0:00:e4:82:4e:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 29 11:02:33 2025 GMT
            Not After : Aug 27 11:02:33 2025 GMT
        Subject: CN=6be8de16-9ae8-4697-9b1c-92690acdeac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f9:0e:2c:df:5b:2a:36:60:2c:06:41:73:b0:
                    46:47:b7:06:9a:56:95:8a:54:e2:69:37:af:c3:7a:
                    b6:9e:c6:08:65:37:fe:82:f2:e2:c5:8c:59:7c:a3:
                    09:c4:df:90:a8:28:4f:c8:ca:da:0d:c9:a7:fd:44:
                    37:30:af:d8:b5:3a:c2:5c:51:c1:ac:1f:97:40:a5:
                    8c:eb:c6:c7:80:d9:8c:7e:a6:83:93:29:2d:35:b5:
                    ad:f3:c7:40:27:2f:c3:d7:1f:7a:45:66:55:b7:1f:
                    fc:fa:1c:45:4c:61:ab:0f:c5:44:17:31:ea:5a:cc:
                    81:19:3e:7e:ec:37:6b:d4:6d:a0:34:ad:26:e7:f7:
                    33:12:c5:21:05:3a:b9:58:89:42:ca:52:ad:46:2b:
                    a2:f0:12:b2:99:f1:e0:d0:57:e2:fd:e9:7b:4a:09:
                    5e:fc:52:8a:28:46:ff:45:22:22:25:3b:24:a5:61:
                    dd:9b:35:f6:a7:a0:30:20:7c:a0:bd:49:a9:01:4c:
                    5a:09:07:69:77:a2:ad:3d:fa:7b:52:b2:0f:bf:50:
                    db:76:bc:1c:db:09:05:71:15:e1:6b:a3:2b:fb:97:
                    0c:df:ab:47:fa:a2:22:d3:12:01:75:b0:f4:5c:a9:
                    20:a2:a8:bd:8e:4e:41:8b:2a:71:e1:0a:f7:e2:2c:
                    5b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5F:3C:72:16:5E:36:B2:F3:D4:DA:82:0D:B7:63:49:22:7D:D5:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f1411221-5325-3bae-aa14-7bd49c2cf05d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:de:73:f9:da:e9:63:39:02:d7:79:48:4e:33:80:7d:00:ee:
         2f:f2:e1:43:2a:2b:f4:f1:36:13:9d:3a:30:5f:f5:e3:6f:73:
         d2:f2:96:c9:bf:b1:81:7f:88:52:03:b8:cd:65:9b:92:6c:61:
         32:e9:84:69:9c:cf:12:1a:ba:97:6f:e5:d0:60:43:71:87:f3:
         2d:a5:03:aa:a4:f3:29:bd:28:71:b9:89:83:4e:a5:f6:4c:4b:
         d3:50:5d:92:7b:fe:0e:0f:63:1a:86:cd:22:f9:8f:80:2e:0d:
         d4:33:fe:35:1c:c6:3b:13:d8:26:b1:93:26:dd:68:44:c7:d2:
         04:a4:1b:24:6f:6c:72:1f:37:df:ec:24:61:72:c9:d4:b3:fc:
         82:5e:44:8f:c4:03:12:9b:0f:a4:97:e2:70:f2:be:f3:b1:85:
         5c:ec:94:81:17:a3:2c:09:ed:b0:28:fd:a7:d7:bd:7c:15:18:
         46:54:0d:16:b2:ae:ba:af:b6:ce:f7:c3:02:c4:65:9e:65:41:
         ee:62:07:f8:5d:a0:eb:97:e4:0a:98:9c:7a:39:8b:75:58:2d:
         c1:70:93:75:6e:b6:ad:bd:1b:4a:c1:c4:3d:10:58:cf:2a:93:
         eb:00:d8:85:ca:ed:ad:c9:b2:2f:04:39:43:5f:fe:fb:fb:9a:
         98:73:ca:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:54:23 2025 by rpki-client