Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/11e8d12e-99be-3ca9-9f5d-648782b712c0.roa
File:                     11e8d12e-99be-3ca9-9f5d-648782b712c0.roa (raw, json)
Hash identifier:          1U6nG2p/bwsz/3Ht08M8dNokMMda8hsvQJYI43zUGs8=
Subject key identifier:   D0:34:BA:68:24:2D:2B:CC:1C:1B:F3:48:2D:0E:DB:6C:D5:4D:98:DC
Certificate issuer:       /CN=146a096d-134a-4c52-9243-da3981810107
Certificate serial:       010D0C9F4328584A38230B67815D1C72EC352A88
Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/11e8d12e-99be-3ca9-9f5d-648782b712c0.roa
Signing time:             Tue 17 Jun 2025 08:16:38 +0000
ROA not before:           Tue 17 Jun 2025 08:16:38 +0000
ROA not after:            Mon 15 Sep 2025 08:16:38 +0000
asID:                     26658
IP address blocks:        104.243.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:23:0b:67:81:5d:1c:72:ec:35:2a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146a096d-134a-4c52-9243-da3981810107
        Validity
            Not Before: Jun 17 08:16:38 2025 GMT
            Not After : Sep 15 08:16:38 2025 GMT
        Subject: CN=80fe6af8-7134-4c0a-bc3f-da3c867addbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a3:08:fb:35:cc:cf:cf:53:9f:20:58:ec:79:
                    be:0d:86:2f:18:17:83:04:2a:90:4f:68:e5:c3:fb:
                    65:5b:61:00:65:81:59:17:ca:c1:bd:b6:dc:c7:68:
                    0f:28:d5:81:50:1f:60:de:2d:6b:05:e4:ba:83:e1:
                    c5:49:3c:07:64:8e:83:e9:da:bb:b4:fc:f6:a1:5b:
                    80:d9:7f:38:9b:ec:1a:17:1d:c0:fa:de:d0:c8:ec:
                    b5:d3:e1:a3:c9:14:43:d8:08:87:5b:d8:bd:10:16:
                    a5:38:0a:fb:e5:ef:28:bf:7c:88:f6:d1:5e:7f:15:
                    60:ba:bc:ba:b1:7d:51:cf:15:36:b8:d8:70:24:5f:
                    bc:29:fe:81:b3:d8:27:5d:b6:60:7b:58:9d:26:a4:
                    3e:ec:41:25:76:72:6f:20:9b:46:19:92:5d:7e:4d:
                    c4:bd:f4:4c:26:61:0e:be:ae:cb:74:c8:bb:63:2c:
                    56:c6:c9:6a:72:3d:10:99:7e:96:9f:4b:37:25:9f:
                    53:e2:23:84:ae:4c:75:38:e3:dd:79:f4:57:ce:c0:
                    c5:8c:87:63:ee:28:16:34:a6:53:41:06:bc:26:ce:
                    0d:cd:07:5b:6c:e1:aa:80:0b:32:43:06:e0:22:ee:
                    d2:a1:7c:9b:c8:c6:5e:21:30:b6:e7:cd:aa:f5:f5:
                    5d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:34:BA:68:24:2D:2B:CC:1C:1B:F3:48:2D:0E:DB:6C:D5:4D:98:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/11e8d12e-99be-3ca9-9f5d-648782b712c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl

            X509v3 Authority Key Identifier:
                keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:3f:5a:b2:2b:73:3f:67:b1:f5:6f:4c:bc:fc:60:57:63:aa:
         4c:6d:17:a0:c7:b3:d6:fd:9f:6d:99:c3:f5:58:a9:bb:d5:fa:
         83:a5:cc:e4:e6:db:07:03:96:82:3e:b9:22:48:6c:b6:6d:d4:
         eb:33:1b:87:7a:3a:62:dc:45:97:1f:2d:76:0e:11:93:b1:29:
         f9:94:f6:82:a9:ad:b9:3c:9e:f2:37:67:53:41:dd:d2:b0:1d:
         79:84:76:41:79:a3:43:a3:a1:b2:98:9b:2e:7c:0c:c2:a5:3e:
         63:5a:a7:72:19:2e:ee:e1:04:81:17:8a:b5:cf:a8:04:56:91:
         91:38:f9:a1:ea:59:22:e0:fa:40:8a:23:da:ee:2c:94:32:58:
         d1:d7:41:2b:9b:8e:4a:e9:ec:1e:7b:65:a2:26:95:fd:df:fe:
         17:83:f9:37:20:58:99:c5:3c:82:82:9b:59:9f:88:9a:86:c4:
         66:fb:15:a8:81:25:9f:5f:4c:4d:71:72:e4:66:9d:00:36:a4:
         50:89:46:49:7c:66:e3:b9:83:b7:db:99:17:e3:21:1e:ac:e8:
         53:97:37:e0:42:18:cf:6e:d5:58:43:15:67:8b:6c:3c:11:e2:
         01:45:96:b1:d8:e1:b7:cd:8d:61:ae:9c:ff:60:43:82:18:15:
         42:20:3d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 20:57:52 2025 by rpki-client