Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/06f1cab2-d620-3ae0-85e4-5f47593703d8.roa
File:                     06f1cab2-d620-3ae0-85e4-5f47593703d8.roa (raw, json)
Hash identifier:          AOLjkHrhZxEwk8F+5Sl0y4dowtemFU1UqtMTXTnZxD0=
Subject key identifier:   A1:6D:1D:43:95:77:07:8E:CC:6F:F9:D9:0E:0C:F7:7F:CA:6B:CF:C0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A89A60D63932894B51C056E40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/06f1cab2-d620-3ae0-85e4-5f47593703d8.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     396356
IP address blocks:        104.164.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:0d:63:93:28:94:b5:1c:05:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=174a1665-92d3-44c5-8808-6c85eb8f66ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c6:b9:95:9d:90:c0:ae:63:58:e2:a8:06:1a:
                    cc:06:d7:af:e7:8e:44:4a:68:0a:ad:ec:7d:57:87:
                    0e:2f:11:b6:69:c2:37:76:9a:4f:b2:50:36:e3:fe:
                    26:4f:db:b4:c4:af:94:74:6a:87:73:64:a0:1d:60:
                    dc:49:4b:19:b6:4e:40:56:8e:83:de:04:98:54:48:
                    99:57:7a:f6:0f:8b:75:1f:2e:d4:f4:24:1e:b2:dc:
                    5e:84:e4:43:10:d9:d8:19:87:e0:cd:1c:5c:4d:b0:
                    0d:e3:e0:df:d4:f7:1c:a1:10:44:8e:13:9c:c5:de:
                    f7:3f:54:2a:8d:37:6b:16:21:5e:03:15:a5:91:ab:
                    02:37:48:8c:44:cc:3a:1a:15:76:10:57:bc:95:42:
                    d9:f2:e4:e5:e1:37:a8:0f:54:74:b6:d7:05:01:5c:
                    d6:8e:84:70:70:9a:f5:bd:ed:2d:c9:a9:8d:34:eb:
                    bd:63:1e:0c:79:f3:5a:98:7a:94:de:fc:37:af:a6:
                    12:2a:73:dc:33:15:a5:4e:7a:b1:44:b1:19:21:82:
                    cc:1f:56:f7:30:0b:65:1a:58:95:6a:ed:30:80:60:
                    af:07:b2:7d:ee:8d:26:fd:e2:7f:fd:f2:e0:65:e4:
                    e4:a4:3e:1e:51:6a:9b:2c:10:50:4b:b3:a4:55:e6:
                    c5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6D:1D:43:95:77:07:8E:CC:6F:F9:D9:0E:0C:F7:7F:CA:6B:CF:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/06f1cab2-d620-3ae0-85e4-5f47593703d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:aa:43:d8:55:e4:64:83:a3:3f:13:b3:de:5e:24:e1:1f:64:
         47:78:41:fd:5f:df:57:05:d9:01:f7:26:62:da:95:45:a0:ad:
         6b:51:3a:2a:4a:0c:ea:de:17:b8:f0:4a:3a:6b:6a:36:b9:ea:
         fa:44:11:30:18:bf:3e:50:0d:4d:e3:8e:9c:2b:06:24:3b:13:
         a4:d4:38:32:49:05:f9:c6:a5:a8:28:98:b0:70:c3:f7:1d:2b:
         95:83:f2:c5:bb:be:d0:b3:5e:b2:fb:49:b8:4e:ea:06:16:45:
         48:16:f1:22:b8:82:67:46:83:34:83:a1:44:5a:eb:3f:77:a4:
         68:6b:fb:99:31:83:57:c7:5b:96:cd:69:df:8e:72:33:76:5f:
         d5:fa:c6:23:ed:22:e5:99:eb:ab:db:5f:7c:1b:5d:3a:fa:60:
         6c:f0:72:a5:7b:0c:23:00:96:2d:31:31:3d:cd:98:da:b9:8c:
         d8:c6:74:d3:37:ed:f8:77:51:57:8d:96:9c:fe:9e:9b:ee:34:
         c3:e0:db:57:36:8b:fe:29:36:b2:89:cd:ee:66:f6:0c:d7:4d:
         cd:2c:05:67:e5:4e:3a:66:a4:c1:ad:91:63:fb:18:3c:b8:46:
         59:f0:ee:8f:7c:ed:59:7d:c8:7b:d6:e4:c3:52:dd:a1:be:27:
         eb:fc:35:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:32:13 2025 by rpki-client