Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5db51668-9089-39bb-9b70-8b6c8315802c.roa
File:                     5db51668-9089-39bb-9b70-8b6c8315802c.roa (raw, json)
Hash identifier:          5FGlzDUERjYFgKurxP0GiD+8Dp5/P3y3y6K1kLnEWqU=
Subject key identifier:   90:E3:BC:FD:48:2D:D4:4C:3F:7F:BF:63:D8:2B:EB:19:F8:CD:2F:85
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AB2217532913041F7A67F7780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5db51668-9089-39bb-9b70-8b6c8315802c.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     18779
IP address blocks:        104.252.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:75:32:91:30:41:f7:a6:7f:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=797210ea-90e8-4844-9575-85170ee2d0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:ef:95:a5:59:71:f3:93:50:1f:7c:fb:f0:
                    c9:71:2f:b5:2d:5f:82:f2:1f:4a:5f:71:c0:1e:bb:
                    7c:2c:b6:8d:33:f7:52:42:dd:a4:b0:53:f8:b4:1f:
                    95:c9:56:b9:8a:bf:e0:b3:b1:55:8b:c0:af:8d:77:
                    2f:e5:cf:8d:3c:fc:a4:61:fe:2c:9b:47:4c:0a:3e:
                    1f:2a:77:91:23:73:cd:fc:d0:0b:62:d6:35:80:d5:
                    2d:53:19:22:d5:12:e3:7f:49:5c:d7:56:91:6e:c1:
                    c7:0a:71:69:98:17:94:98:6c:ae:44:b6:fc:5d:2f:
                    3c:d3:62:c9:11:ec:e5:0b:05:f6:eb:48:4a:74:de:
                    83:44:7c:70:14:5d:7a:d8:a4:81:41:2e:fd:c9:b4:
                    61:81:dc:7c:66:e1:14:eb:72:69:49:18:6c:9b:3a:
                    b9:68:71:f4:b8:2a:71:5c:99:4b:0f:ef:e3:1f:b9:
                    8d:90:80:fd:53:8d:f1:dd:9b:c5:b2:09:fe:95:13:
                    17:f8:72:2e:a0:a8:ac:6f:47:e0:2e:27:c2:04:67:
                    26:75:d0:1d:d3:08:e4:6b:fc:ea:90:34:af:f2:a8:
                    89:87:94:7b:4b:e6:79:13:95:16:ba:a5:f7:43:be:
                    a1:86:dd:6f:4c:28:cd:3f:83:fe:c5:49:10:ee:dd:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E3:BC:FD:48:2D:D4:4C:3F:7F:BF:63:D8:2B:EB:19:F8:CD:2F:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5db51668-9089-39bb-9b70-8b6c8315802c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:32:4b:a7:0b:aa:55:6f:ab:c3:61:19:8c:92:78:da:70:a9:
         2e:54:35:6c:2e:64:85:1c:da:d4:5d:d0:f3:3d:30:85:e4:31:
         d9:a1:57:7f:62:55:75:21:81:42:7d:ef:69:4c:d1:1d:c6:24:
         ab:7e:f0:50:2c:bd:c6:c7:85:68:7a:ae:db:86:38:0f:ca:03:
         6c:f8:62:78:6f:2b:88:49:c9:14:a9:f4:8a:4c:ec:89:ab:9b:
         b8:2a:54:29:ac:d8:43:2c:d0:a3:2e:c7:33:05:9a:d1:36:bb:
         49:7c:b8:70:ca:ed:36:ac:ce:f4:1a:3b:70:dc:6d:6a:5a:f6:
         fc:48:68:6c:39:a6:19:3a:60:af:7b:73:01:3b:e9:b1:6f:5f:
         73:78:9a:08:13:35:e3:a1:b4:0f:bb:dd:de:f2:2e:f7:d5:fc:
         39:ba:47:3e:e2:2a:67:01:41:40:a0:a1:fc:f3:88:75:8b:88:
         46:f1:02:d8:36:d7:f5:0b:e1:9f:69:44:bb:c2:5c:ce:99:c8:
         f2:6e:ce:53:fa:d9:bd:f9:00:7f:a9:9f:85:40:70:ce:f5:ae:
         2a:37:58:d8:48:53:3e:2e:dd:bd:3c:a0:05:60:f3:59:48:e6:
         65:52:a2:da:e6:3f:50:6d:bd:98:8f:8a:7d:6f:bf:a1:68:52:
         23:31:04:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:31:29 2025 by rpki-client