Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5be6670a-6c6e-3e01-b49c-a65355072139.roa
File:                     5be6670a-6c6e-3e01-b49c-a65355072139.roa (raw, json)
Hash identifier:          MgIEz9OKSg3uLvaZuCJ3yW0MWH4bXKLFvKncPo3pOhI=
Subject key identifier:   11:01:2D:C1:77:F9:3F:BF:BA:3F:51:26:03:69:BF:DF:0C:43:65:BB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A9F81E6C604534CDC00FAA540
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5be6670a-6c6e-3e01-b49c-a65355072139.roa
Signing time:             Thu 24 Jul 2025 08:56:02 +0000
ROA not before:           Thu 24 Jul 2025 08:56:02 +0000
ROA not after:            Wed 22 Oct 2025 08:56:02 +0000
asID:                     18779
IP address blocks:        104.164.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:81:e6:c6:04:53:4c:dc:00:fa:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 24 08:56:02 2025 GMT
            Not After : Oct 22 08:56:02 2025 GMT
        Subject: CN=ab4a9161-a210-4dd5-864b-1f837442f862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8e:fe:2c:1a:cb:7f:31:3f:9b:72:ea:2a:d6:
                    d1:9c:4b:75:7a:fb:4c:35:f6:a3:cd:a3:c8:fd:e6:
                    da:81:0a:4f:f5:0c:5e:59:5f:39:29:fd:1c:fc:90:
                    c7:3e:39:10:65:15:84:4c:c2:75:84:3a:8c:e9:93:
                    a3:5d:6e:8c:2b:9e:4c:5f:6e:8d:26:2e:bf:63:36:
                    c6:a1:e9:03:22:d0:e3:4a:7b:69:7f:c5:61:cb:36:
                    c1:10:ba:9d:26:eb:26:8d:1d:9c:ab:42:11:88:f4:
                    ac:46:ef:6c:ab:78:ea:aa:34:20:50:df:18:22:c7:
                    92:13:91:9b:5b:16:7d:84:cb:d3:98:f0:9f:7d:48:
                    f7:aa:52:9a:e8:32:b3:47:42:67:5d:84:cd:43:ce:
                    47:71:1c:df:b5:71:e5:d5:7c:db:b9:b1:22:7a:9d:
                    99:b4:43:9d:aa:cf:76:2d:9b:5c:8c:22:d4:20:56:
                    ca:21:b4:b5:db:6e:b6:a5:17:57:19:3a:ed:bc:0d:
                    a3:1a:f1:49:07:81:87:78:87:b4:a1:05:61:6f:c9:
                    6e:f4:ca:b0:9a:6b:26:dc:cc:ff:14:0d:ff:b2:ec:
                    69:2e:d4:12:7f:f5:8c:90:95:a3:e9:40:b4:2b:30:
                    09:b7:18:2a:e8:40:e5:a4:dd:9a:61:35:e0:0b:d4:
                    20:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:01:2D:C1:77:F9:3F:BF:BA:3F:51:26:03:69:BF:DF:0C:43:65:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5be6670a-6c6e-3e01-b49c-a65355072139.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:80:3d:f2:5d:c8:bc:8f:76:c0:b0:99:10:a4:b5:a7:4e:c7:
         56:67:20:22:5c:e7:b4:f5:10:f3:44:2c:55:7a:99:0d:4a:55:
         d5:bc:a6:de:ea:49:69:36:be:7e:03:e3:e0:2f:7a:fc:67:d5:
         82:a9:bf:07:aa:ed:9d:0d:a1:2a:d6:05:dd:29:e1:bf:77:4a:
         db:83:62:25:1c:66:6f:ea:ea:75:ff:47:98:a6:01:4d:83:51:
         94:1d:45:76:54:11:ad:1f:24:cf:8e:a4:fd:a7:83:1c:b5:92:
         79:a1:e2:a7:fa:81:c0:0c:6a:7f:88:61:0e:14:45:a0:dd:62:
         8a:da:5b:6a:d1:2a:ec:96:ff:8d:dd:b5:c3:c9:da:25:f3:6d:
         86:7b:dd:1d:6c:2f:6f:50:f9:20:07:05:67:39:74:8a:50:d2:
         48:24:68:d0:92:92:c3:87:48:84:df:e1:7b:23:28:ce:07:fa:
         0a:0e:fe:04:7d:19:62:d3:46:59:d4:32:5b:e3:4c:f2:5a:1c:
         b4:bd:3f:fb:d5:d9:f5:70:54:98:e7:4e:d2:e4:75:db:17:70:
         9d:b3:f9:1b:07:29:e4:63:d1:4f:9b:b8:84:52:eb:8d:e6:3d:
         e4:b0:93:d8:41:e8:84:77:95:b9:8d:4f:df:29:b3:c4:4c:2f:
         e2:d3:f6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:53 2025 by rpki-client