Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3196fc54-997a-3685-b0f3-72b9596bd9b5.roa
File:                     3196fc54-997a-3685-b0f3-72b9596bd9b5.roa (raw, json)
Hash identifier:          O0GKHzzLR0Jwo1LuOb9H5jFXoSfnpaFJrF4nZ0JzoE8=
Subject key identifier:   C3:83:EE:3E:6B:AC:C0:25:32:0E:05:4F:38:17:0F:F0:CC:B1:B9:71
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AAF560977BCD312C83B010140
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3196fc54-997a-3685-b0f3-72b9596bd9b5.roa
Signing time:             Wed 30 Jul 2025 01:00:32 +0000
ROA not before:           Wed 30 Jul 2025 01:00:32 +0000
ROA not after:            Tue 28 Oct 2025 01:00:32 +0000
asID:                     18779
IP address blocks:        104.164.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:af:56:09:77:bc:d3:12:c8:3b:01:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 30 01:00:32 2025 GMT
            Not After : Oct 28 01:00:32 2025 GMT
        Subject: CN=57803981-4583-4ab8-b516-79bf3abf7d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:69:ab:8c:e2:11:ac:ab:90:e2:52:14:c6:d5:
                    21:d7:52:b0:56:02:f1:a5:14:fb:17:f8:c5:30:3d:
                    ef:26:06:31:45:fb:f2:a3:41:ce:e2:e9:97:dd:da:
                    6d:8f:d4:89:43:be:8e:56:21:45:ba:29:71:8d:ca:
                    fa:28:fc:cb:cb:f8:67:b5:35:06:f7:74:6f:5b:d0:
                    2f:0f:c2:c9:07:4e:c1:29:9f:f4:54:20:38:fa:10:
                    7e:e8:76:8d:9d:3e:55:df:89:d5:19:5c:49:9a:3e:
                    f9:69:43:41:19:57:70:b6:45:b9:9b:21:df:c6:ef:
                    c8:89:e8:72:e7:49:1b:44:ff:90:a6:5b:32:85:6a:
                    32:67:bc:32:dc:c8:0b:40:03:aa:6b:7d:e1:35:a6:
                    c9:d8:8d:1d:4a:83:08:53:83:f0:78:ff:be:1c:78:
                    76:b2:24:e8:bd:0c:a8:50:d5:a0:df:87:9e:46:b3:
                    44:2e:8c:e4:3a:68:c8:68:c5:b3:52:63:f1:d7:bd:
                    3e:13:71:01:a7:c7:89:9e:36:34:1f:8b:22:fc:e5:
                    a2:e4:a5:c6:0f:29:c3:4e:37:d4:fc:df:4a:48:ed:
                    ff:53:a0:25:f0:db:23:4c:5d:ca:7a:77:0a:ab:50:
                    e6:ac:bf:4a:41:3f:73:a6:cb:a9:e7:6f:3b:02:3f:
                    36:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:83:EE:3E:6B:AC:C0:25:32:0E:05:4F:38:17:0F:F0:CC:B1:B9:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3196fc54-997a-3685-b0f3-72b9596bd9b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:44:ab:9d:d8:1b:85:b8:3d:79:5e:97:3c:60:7f:ef:a0:83:
         c1:c2:43:5a:5f:28:83:86:f2:11:7c:17:83:92:c9:a8:40:69:
         a3:09:3b:d0:62:53:e0:62:44:e0:1b:05:1b:aa:dd:c8:94:b2:
         0b:b4:e2:cc:33:60:81:16:b9:68:36:d0:2c:a0:dc:19:b9:eb:
         44:ae:b8:b3:23:17:0d:23:57:d4:c0:53:04:08:01:4f:d0:9d:
         3c:3d:cb:d5:2c:40:30:51:d3:bc:14:23:bd:36:7c:b0:e6:07:
         b0:5e:15:ef:60:63:af:be:66:28:60:62:e0:e9:2d:15:11:f6:
         fa:2d:5f:fb:d2:ef:8a:0f:4e:4c:52:2a:b1:1b:e6:53:8f:cc:
         0e:d5:3f:09:f9:ba:d2:72:c2:d4:ce:ae:a6:f8:1d:80:71:7e:
         f9:a9:c6:1c:f0:ac:73:60:cf:1f:52:ed:5c:2c:53:28:31:11:
         fc:0b:7a:57:89:0b:99:dc:a7:19:d3:42:3a:0d:2b:ce:83:be:
         95:f9:61:39:d7:4c:00:42:f9:16:89:8c:39:ff:bd:df:71:c5:
         83:1f:15:3b:16:d1:a3:0b:60:72:14:b5:f7:6c:c4:5f:58:18:
         e2:98:77:21:5c:62:e7:8b:cb:04:c3:be:07:1f:f1:aa:37:82:
         4a:ee:31:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:26:21 2025 by rpki-client