Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fc42e0d7-a238-36ff-99be-821c00f3f521.roa
File:                     fc42e0d7-a238-36ff-99be-821c00f3f521.roa (raw, json)
Hash identifier:          O95zyHSHLt1IdtBmnE6I3f0S549bDmbaCy72lNb/lh4=
Subject key identifier:   30:4A:C8:53:CC:F8:36:87:5A:49:7A:70:CD:5C:AB:BB:1F:2F:44:98
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A10354FD5F8971323A86296C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fc42e0d7-a238-36ff-99be-821c00f3f521.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     9009
IP address blocks:        104.253.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:4f:d5:f8:97:13:23:a8:62:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=8aedfe60-1ecb-44f2-94dc-4da66ef92195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:eb:9a:ee:8f:7e:1a:0a:9a:f3:8e:eb:11:4a:
                    bc:5d:35:7b:15:46:55:eb:bb:18:18:ab:35:e8:ad:
                    5c:eb:3f:7d:7f:74:b6:0f:9e:db:bb:8d:42:ed:94:
                    5c:8c:7f:1a:e0:f2:be:58:77:1c:16:b6:67:cd:0d:
                    1c:c0:b0:c4:43:56:0b:a2:2b:a7:05:12:68:1b:08:
                    2f:7a:e8:55:ff:8d:73:ac:82:35:bb:49:dd:5b:95:
                    ce:e3:1f:ac:db:ca:6c:64:cf:ab:37:48:f8:5b:f4:
                    aa:63:cc:a4:1e:d3:e5:99:94:ac:5a:af:9a:73:9d:
                    7c:8f:4d:05:11:e7:27:55:6b:39:d8:f5:49:38:ee:
                    67:89:75:17:b8:1a:7d:c3:6d:00:26:9e:5f:54:d8:
                    f3:70:bd:f7:a3:32:cf:3e:fc:11:98:29:ad:bc:97:
                    22:7d:3b:69:d5:03:68:2d:0a:64:24:ef:74:0b:80:
                    46:e8:dd:9c:aa:0c:23:0f:b0:88:ba:58:0c:fe:f0:
                    f4:e2:e1:2c:55:53:8b:ef:c8:cc:0a:b3:e3:a4:e2:
                    a6:c3:3d:a2:ad:0c:28:ec:9c:a9:cf:80:6b:32:1a:
                    0b:ec:a9:c5:21:4c:53:bd:cc:ca:e2:aa:fe:24:d9:
                    79:7b:cd:57:b8:6e:c5:94:43:12:ff:6c:14:5f:94:
                    79:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4A:C8:53:CC:F8:36:87:5A:49:7A:70:CD:5C:AB:BB:1F:2F:44:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/fc42e0d7-a238-36ff-99be-821c00f3f521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:30:25:14:1b:df:fe:fd:f3:01:63:ba:a6:ba:79:ec:38:b4:
         5f:dd:e2:91:ea:13:58:63:33:e8:e4:06:e8:cd:5a:ba:b1:2e:
         c9:2e:ef:73:2e:54:a5:9e:d9:0f:ea:39:48:7d:75:c2:f2:88:
         3f:e4:0a:c9:f6:b8:19:a8:c6:d1:db:1e:aa:90:86:8e:05:fe:
         7d:b0:16:3f:f9:33:f0:b9:9f:ae:39:bf:fa:e2:da:f8:52:d1:
         8b:81:6c:d1:8e:56:3c:f1:cb:2d:cb:35:2f:ca:57:7d:12:10:
         d0:c2:97:cb:fa:f0:48:9a:b6:86:48:ed:ab:be:09:8d:97:68:
         84:9d:83:45:a2:7f:d2:5c:73:74:19:50:5a:e8:0d:e9:2b:c2:
         23:87:22:5d:cc:9c:3d:ba:1b:2f:e8:48:45:bc:be:a9:96:73:
         ec:f7:0c:d5:c6:fb:29:47:a3:bd:03:a9:ae:b0:51:f8:e8:19:
         82:0a:0f:84:b0:7f:04:97:b6:89:9d:fa:51:26:97:a4:d3:6c:
         4d:0a:83:cd:33:af:a0:cd:b7:39:eb:cd:eb:7b:84:33:12:c7:
         8a:59:17:4b:b9:5d:ee:02:db:ab:f1:02:99:89:ad:ae:54:46:
         fb:94:75:0e:93:17:42:6b:8d:7e:e4:c4:c0:91:7c:08:44:60:
         64:94:08:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 10:16:19 2025 by rpki-client