Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2307b8a3-b34b-380b-8e2e-7b0e049266ee.roa
File:                     2307b8a3-b34b-380b-8e2e-7b0e049266ee.roa (raw, json)
Hash identifier:          9F0JV4sjH+EIyNm2KQ9qOCFjXCoLC5KoFO2PynTR5iE=
Subject key identifier:   56:E7:36:BB:9F:A2:EA:27:43:83:F0:41:8D:EC:C7:91:EB:67:69:20
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584986046C5E42CC797309B2DDC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2307b8a3-b34b-380b-8e2e-7b0e049266ee.roa
Signing time:             Mon 14 Apr 2025 13:00:59 +0000
ROA not before:           Mon 14 Apr 2025 13:00:59 +0000
ROA not after:            Sun 13 Jul 2025 13:00:59 +0000
asID:                     996
IP address blocks:        104.164.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:04:6c:5e:42:cc:79:73:09:b2:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 14 13:00:59 2025 GMT
            Not After : Jul 13 13:00:59 2025 GMT
        Subject: CN=1ac973bd-5d22-472a-94b8-d1447482cb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9b:a1:14:90:9e:88:85:b0:0d:c1:d4:df:93:
                    67:1a:b5:20:89:ba:20:9a:3f:89:19:4c:88:f7:7d:
                    15:0c:b1:67:12:8b:44:61:88:9a:ad:b0:68:80:d8:
                    af:da:dd:a8:d2:7e:38:1f:88:ad:db:0d:16:4b:6b:
                    08:e7:48:17:0e:c5:5a:ad:a6:90:73:1b:ce:82:75:
                    20:7a:5d:5d:c1:2b:c5:20:22:9d:fb:c8:cd:53:24:
                    a6:19:db:5b:1b:28:a1:fa:db:ac:ab:c9:4f:d2:88:
                    d2:a6:59:fe:19:ba:7f:64:5a:14:e9:77:a6:a4:2e:
                    ba:3e:df:b9:ae:02:9e:59:d4:57:03:13:56:7a:28:
                    55:6d:32:4a:61:e1:7f:93:14:3f:54:7d:a6:0a:45:
                    46:fe:df:a7:13:9f:8b:c3:36:bd:ec:22:00:43:79:
                    9e:e3:05:f2:40:e9:04:e8:56:ac:28:4c:cf:6d:be:
                    40:c4:78:1f:ef:e2:66:eb:81:b6:85:8a:79:8e:7a:
                    7e:f2:be:b5:28:f2:2c:f0:a2:5d:90:93:09:40:03:
                    e1:c8:7e:d7:b2:00:73:52:1d:fe:2c:b4:b3:1c:7d:
                    83:61:d0:d2:8b:20:5b:e9:40:32:67:a7:1a:f2:7b:
                    e7:bd:4b:63:32:b1:43:ce:99:17:ed:77:65:bf:3d:
                    01:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E7:36:BB:9F:A2:EA:27:43:83:F0:41:8D:EC:C7:91:EB:67:69:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2307b8a3-b34b-380b-8e2e-7b0e049266ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:85:d0:8b:ae:b7:f8:b6:04:95:65:04:fe:8c:2f:21:44:1a:
         d3:20:d8:44:f2:c8:df:6d:50:19:40:a7:bd:b8:c1:cd:e7:fd:
         f6:df:8c:70:7a:4a:c9:9a:de:69:64:56:91:ae:11:4a:db:0c:
         f7:a5:7d:65:1b:f6:8d:70:c8:61:5a:d8:ce:ce:32:fe:ca:3b:
         04:6d:a6:97:72:06:24:06:83:9d:02:8d:b3:ac:ef:e0:9d:55:
         6d:d7:79:58:f3:1d:35:34:fe:3b:79:d2:13:82:78:9b:c8:84:
         23:43:e7:42:3e:ce:6f:05:f5:6b:e6:3a:4c:03:23:23:22:f5:
         9a:57:98:54:42:13:77:9c:a2:ff:37:45:4f:46:dd:7c:c8:72:
         69:b4:3f:d0:1c:4a:db:0d:9f:19:ef:c9:6d:e7:ab:89:eb:65:
         9e:b3:f3:db:c9:d0:fc:25:b3:85:33:eb:8e:9f:0b:03:e7:7f:
         91:81:40:33:7e:50:20:62:c2:e3:7b:bd:05:8b:c1:7b:16:f1:
         72:95:0c:09:58:04:7f:b6:f8:d1:24:f4:6c:f9:72:ee:6e:5b:
         c6:b6:20:46:19:5b:53:55:8a:10:c4:cd:be:da:ec:1a:ab:fb:
         b9:d1:bf:48:df:20:01:c6:02:a6:4f:5b:96:df:c7:bd:f3:33:
         ca:4a:1d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:37:46 2025 by rpki-client