Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1cf002f3-1b4d-3af7-bc47-c0dbccd7f64d.roa
File:                     1cf002f3-1b4d-3af7-bc47-c0dbccd7f64d.roa (raw, json)
Hash identifier:          Ze7dhe4VE9DbdkRIfx4xlPmRafVdb5NYq0VXqdkjl4A=
Subject key identifier:   03:F0:B9:52:90:4B:56:D0:B4:F3:8F:B4:78:EF:A6:30:6B:96:7A:E3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A2EEABE8B1E86C4AA60EDD000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1cf002f3-1b4d-3af7-bc47-c0dbccd7f64d.roa
Signing time:             Sat 14 Jun 2025 01:00:49 +0000
ROA not before:           Sat 14 Jun 2025 01:00:49 +0000
ROA not after:            Fri 12 Sep 2025 01:00:49 +0000
asID:                     400536
IP address blocks:        104.164.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2e:ea:be:8b:1e:86:c4:aa:60:ed:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 14 01:00:49 2025 GMT
            Not After : Sep 12 01:00:49 2025 GMT
        Subject: CN=cf63437a-66bd-46f6-805f-302ce66e166d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d1:ec:95:b7:79:17:92:f8:8d:4f:f0:5c:5f:
                    39:e1:6c:96:b9:4b:06:6c:42:a9:82:80:a7:9e:09:
                    4b:09:c0:f1:c7:63:0b:77:65:5d:40:07:a9:12:18:
                    bb:72:5b:e6:db:be:9d:e7:f4:94:9f:d2:c7:a2:3d:
                    cc:4a:a1:f2:8a:a6:59:c9:61:5a:ec:0d:0f:a3:40:
                    85:96:8c:1f:bd:1f:fb:67:e6:f8:7f:5d:56:40:53:
                    8a:3d:ef:5b:ce:cd:aa:d6:f5:ca:2d:62:82:6e:79:
                    ee:1b:53:16:a0:da:4d:6e:3b:9e:8c:7d:95:52:09:
                    74:e4:62:bc:17:ec:a9:9d:39:16:6a:20:5a:8a:ff:
                    11:d9:10:0a:c6:09:2e:0d:0a:9f:e1:d0:db:a2:9a:
                    5a:72:7f:c7:e5:d2:67:9a:18:ae:67:1e:43:59:fa:
                    99:03:f3:d7:c4:36:08:00:1c:03:0a:af:ce:78:d2:
                    88:00:cf:62:ae:03:16:ef:ea:7c:2f:74:87:33:bb:
                    3e:90:49:8b:2d:c3:48:d6:90:f8:88:ca:f0:4e:8a:
                    aa:f4:a0:a9:8b:40:ca:b5:3f:f1:91:d7:f2:91:ee:
                    f0:1b:19:af:e7:73:5b:32:fe:a0:8f:59:76:51:1e:
                    4f:41:af:50:8b:de:98:fc:a5:36:f6:86:41:86:89:
                    ad:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F0:B9:52:90:4B:56:D0:B4:F3:8F:B4:78:EF:A6:30:6B:96:7A:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1cf002f3-1b4d-3af7-bc47-c0dbccd7f64d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:02:0b:30:4e:48:8b:9e:17:63:6c:9c:c8:05:f3:b2:69:a3:
         ec:60:53:18:5a:2e:ff:52:e2:8b:8e:0a:6e:99:40:a7:3a:67:
         75:e1:23:9e:02:f3:37:0d:19:65:ef:d7:1b:61:52:70:83:65:
         ea:eb:53:b4:0b:67:da:7c:73:57:b7:d0:96:c9:ad:7f:76:ab:
         4d:5f:4d:90:51:9e:df:3e:15:de:ff:29:0b:2e:a0:99:f5:4a:
         e6:cc:22:6a:ca:ab:21:8e:06:2f:ec:ed:e5:7c:d3:fe:20:b6:
         3c:99:0f:ed:4c:13:a6:c5:e5:c3:ad:35:aa:e7:e7:2e:90:9c:
         af:df:47:1f:3e:5f:c8:ae:ac:cd:26:cb:ff:e9:ba:92:79:95:
         b7:93:fa:25:47:c4:cc:8f:5e:c1:e8:10:c2:87:cc:f8:51:f6:
         46:3c:f4:fa:27:c3:9d:65:3a:e2:12:59:d9:e7:92:58:1b:59:
         c8:0b:83:29:27:b0:0b:d6:b4:e5:b3:1d:54:c7:35:3b:61:fe:
         00:24:74:1d:74:73:f5:fd:29:c8:b4:26:e2:80:ce:69:92:30:
         4a:9e:a2:5b:4f:61:a0:0a:76:f1:5e:53:63:20:0d:1b:7e:60:
         dd:19:fd:44:19:d6:d4:02:4f:a0:01:c4:ce:de:d6:e2:25:17:
         b9:73:f7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:46:27 2025 by rpki-client