Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5439de0b-1f57-3a5e-ba39-f5890d22faed.roa
File:                     5439de0b-1f57-3a5e-ba39-f5890d22faed.roa (raw, json)
Hash identifier:          8nUX5woCH9xOq7M1ThcuRctCOxBf3HrQiQRB6YePdPo=
Subject key identifier:   0E:35:0F:B7:A7:50:69:6D:68:F6:D6:A2:81:DC:6F:A9:D6:51:27:A9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A94D0ED63F93507B5C21F68E8
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5439de0b-1f57-3a5e-ba39-f5890d22faed.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     399989
IP address blocks:        104.252.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:ed:63:f9:35:07:b5:c2:1f:68:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=2bbc1ca1-75d1-44ab-8ede-a945491da046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5c:5f:5e:5e:e2:41:c4:8b:e6:73:03:3b:17:
                    76:eb:89:5c:08:68:9d:96:4a:e1:ca:27:d8:b6:33:
                    62:c1:ea:43:5a:e6:15:3d:c0:89:ab:06:46:a1:2a:
                    3a:0f:6f:30:5e:28:6f:cd:17:6b:7b:9d:db:a0:1c:
                    03:77:df:69:d1:af:6f:34:e8:c0:a0:27:c0:aa:e8:
                    68:aa:47:bf:10:97:b4:09:6b:b9:d0:09:8f:ba:3e:
                    19:78:a1:86:11:7d:0e:ca:cd:e6:d3:0d:63:e8:65:
                    b6:06:cc:da:20:da:53:7d:4d:07:e9:5c:29:5a:76:
                    cc:64:c2:70:9b:96:d8:4a:4d:f1:e4:5c:13:a1:ea:
                    0b:91:10:b4:d7:af:d2:97:a0:15:33:5d:68:c3:4a:
                    07:27:59:16:2d:0a:5f:a7:e2:54:31:b7:00:02:87:
                    a2:5a:d3:aa:17:85:00:81:51:fa:45:c4:9c:02:2f:
                    a1:88:d5:7f:57:e0:3c:bc:50:a0:3c:7f:4c:b9:13:
                    fe:0a:7e:bb:87:a9:67:5d:95:fa:e2:d6:c6:4e:b1:
                    6f:23:10:f4:bc:80:c7:39:d7:ab:b7:02:11:d7:aa:
                    60:b1:ab:6d:7d:9c:18:97:f6:6e:0f:2b:5b:ee:db:
                    97:a4:fb:18:f1:b6:9f:a9:2a:3b:18:af:ed:58:2c:
                    c5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:35:0F:B7:A7:50:69:6D:68:F6:D6:A2:81:DC:6F:A9:D6:51:27:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5439de0b-1f57-3a5e-ba39-f5890d22faed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:de:c8:2e:2f:2b:68:2f:f0:76:67:39:82:84:15:d4:79:9a:
         44:ad:01:ed:16:f2:f5:d6:95:59:bd:29:a3:2e:4e:ee:b6:e3:
         16:ba:e1:f6:72:98:e8:3b:c1:00:72:f3:00:58:aa:d8:60:b3:
         9a:20:79:ee:3b:1e:cb:ad:3b:19:e7:57:f0:dc:3a:79:3a:7c:
         87:79:d9:36:aa:97:24:43:ae:de:0b:c7:e2:51:85:e8:f6:23:
         f5:79:64:ee:1c:b0:64:88:3f:a6:55:23:70:43:35:ad:b5:09:
         8c:c8:90:72:67:7e:93:75:3a:4b:74:79:bf:eb:0b:df:b9:7b:
         81:fd:41:d8:c8:52:50:03:89:e8:c0:08:b5:24:50:50:a0:37:
         66:7f:c4:9c:87:6d:e1:3d:19:b7:c0:58:bd:0b:b8:54:6f:34:
         b8:0d:d9:65:e6:27:f0:2d:e5:85:d2:bf:c8:ec:8f:2a:0b:aa:
         5b:2f:33:b5:83:3c:9a:d1:8e:ff:61:48:49:b5:5e:10:12:11:
         1f:27:cc:e8:6f:ee:52:e5:95:3b:6d:d0:fb:8c:41:2d:6e:12:
         55:f3:74:ad:f7:93:7b:24:02:2b:6d:4a:b3:bd:89:65:80:8e:
         6e:01:0c:0d:2c:61:7b:5e:dc:89:56:ba:91:11:d1:17:40:f4:
         f0:56:df:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:09:28 2025 by rpki-client