Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0d002fd5-c38e-379d-9361-76a2db4e4de8.roa
File:                     0d002fd5-c38e-379d-9361-76a2db4e4de8.roa (raw, json)
Hash identifier:          Bn75yLaE/iNVp7E1OykarShEE3a6LtiVKrcjBzB9AiE=
Subject key identifier:   40:B5:98:3B:25:B5:2F:BB:76:CB:55:49:45:94:69:5E:7C:AC:4D:62
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A94D0DFD8B768D3602DC4D3C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0d002fd5-c38e-379d-9361-76a2db4e4de8.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     201106
IP address blocks:        104.253.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:df:d8:b7:68:d3:60:2d:c4:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=ea67cf29-2519-456f-bb4a-e270ccf94e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fb:a6:65:3a:e8:4d:2f:15:83:95:1b:a8:f0:
                    66:0d:3e:c6:8f:0e:aa:41:96:f3:6d:52:64:8c:1d:
                    80:ca:2d:ad:c5:ab:ec:cc:4e:53:c8:1a:03:27:45:
                    61:6f:66:eb:67:66:c5:d1:17:48:4e:77:13:ec:72:
                    2d:b9:4e:35:c3:a3:0f:d2:fd:0b:03:b2:cf:c5:5f:
                    63:27:79:ca:60:c5:05:08:79:12:5a:16:da:8e:05:
                    0b:4f:db:b3:a1:63:bf:1f:50:b6:3d:e1:43:1f:9b:
                    1e:0e:8c:00:ec:63:7a:cd:8c:6b:2c:00:54:e3:6e:
                    87:82:7c:5a:5d:9c:f9:79:e7:c1:83:25:09:4d:b7:
                    0d:59:a3:55:e0:e0:52:87:42:9f:7e:86:84:db:93:
                    ad:56:7d:b3:7b:c8:b3:eb:e6:c0:2e:29:2a:4b:5d:
                    8e:25:3e:f2:46:2c:96:42:e5:59:e6:76:ec:00:17:
                    15:d9:d4:93:73:2c:e6:9f:72:60:72:9a:5b:4a:b6:
                    09:f9:df:3c:99:5e:a8:5c:50:c9:39:b8:14:6f:25:
                    3f:08:f9:8e:58:6b:56:a0:2c:89:9a:9c:70:ec:f1:
                    99:74:54:00:37:6b:5a:ac:29:29:ef:40:85:9e:61:
                    7b:0d:fa:d7:a8:76:e4:fb:c0:99:87:8f:e9:4d:1e:
                    15:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B5:98:3B:25:B5:2F:BB:76:CB:55:49:45:94:69:5E:7C:AC:4D:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0d002fd5-c38e-379d-9361-76a2db4e4de8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:12:0c:42:ca:fc:fd:a5:a5:de:ed:e2:32:a9:ac:38:ad:72:
         52:c2:0d:e1:5d:62:84:8f:08:1e:c4:8f:17:8d:28:43:9a:49:
         97:3f:25:df:da:d1:48:fa:20:85:bd:9f:c7:5e:af:65:39:ec:
         49:45:7f:dc:57:b0:b0:94:97:e2:62:f2:5d:fd:f0:77:06:f8:
         31:6c:27:0a:e6:ce:74:9f:43:e7:77:95:00:93:66:c0:91:11:
         48:6e:d9:ec:02:a3:d7:77:8f:62:9e:11:06:bb:ec:85:da:df:
         98:00:2a:93:a2:75:e9:31:db:6e:22:c1:f2:05:78:56:7e:8b:
         3e:57:4f:bf:16:4c:9b:29:6b:9b:df:8b:33:92:6c:89:2f:66:
         4a:77:f5:09:8e:d7:f5:49:2e:01:07:b1:66:05:07:81:97:9f:
         9b:4b:32:9d:8a:7c:bc:a0:31:bd:52:2a:38:d7:e5:4d:06:a4:
         de:f2:bc:57:db:47:49:9f:8b:b3:30:c5:51:ca:9d:48:94:6f:
         8c:54:a6:a8:88:78:d4:a3:4c:c9:67:65:33:84:e2:64:0c:e8:
         45:85:a6:a3:a4:10:0f:28:03:06:f9:a2:17:f7:29:b5:1e:69:
         f6:42:ae:e4:79:a5:1d:5c:be:3a:45:ce:52:47:b4:0e:c8:42:
         59:60:da:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:19:34 2025 by rpki-client