Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8ee72358-8683-3a24-9642-7282b54f19e3.roa
File:                     8ee72358-8683-3a24-9642-7282b54f19e3.roa (raw, json)
Hash identifier:          K8zVnZ6Qe8TuW4Q8ox91B0VKCroCzGBCjV29mW9/3hE=
Subject key identifier:   7A:2A:E2:CA:2C:6A:C1:98:20:56:23:83:BA:05:DD:A4:03:57:F4:05
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AAF561380C4A3771555F0D680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8ee72358-8683-3a24-9642-7282b54f19e3.roa
Signing time:             Wed 30 Jul 2025 01:00:32 +0000
ROA not before:           Wed 30 Jul 2025 01:00:32 +0000
ROA not after:            Tue 28 Oct 2025 01:00:32 +0000
asID:                     18779
IP address blocks:        104.165.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:af:56:13:80:c4:a3:77:15:55:f0:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 30 01:00:32 2025 GMT
            Not After : Oct 28 01:00:32 2025 GMT
        Subject: CN=b1acadd4-2cbd-4d51-b3fe-5f4999d7f76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:94:77:01:47:e1:9b:da:ff:32:3e:b6:04:82:
                    9b:e9:dd:48:a9:9c:57:36:a9:f3:15:15:7f:c1:02:
                    1c:fa:ef:9f:26:2f:d5:5b:8b:9a:87:87:a8:3d:6f:
                    b7:92:a0:c4:ec:eb:cb:cc:44:af:07:59:a2:be:c1:
                    5d:f6:c8:c5:03:77:13:a6:a0:9d:73:d3:c3:be:58:
                    7b:38:38:66:1c:0a:06:36:d8:5e:73:f5:0f:43:0b:
                    e2:a8:d7:1a:61:58:c7:06:53:01:62:db:a7:2b:f8:
                    b4:b5:71:63:19:97:fb:7f:61:36:e7:25:d0:bb:41:
                    03:85:89:e3:d8:6a:72:bc:2b:b8:d5:e2:2e:7f:c5:
                    2d:c2:6e:a0:98:71:2b:f1:3e:1d:1c:46:1d:b6:d4:
                    9c:21:ab:aa:01:b3:17:49:16:45:12:92:ef:06:c8:
                    d1:ca:1f:6c:a8:97:ef:eb:f3:1a:65:c5:10:39:df:
                    c2:ee:34:65:f1:e4:71:61:f1:e3:99:7e:b0:21:1a:
                    09:58:08:a1:ce:73:c9:8b:3a:9a:0a:14:2d:fc:16:
                    e5:a7:1d:e4:d9:7d:72:e5:86:12:45:4c:c6:7a:43:
                    91:5f:64:f9:b8:2b:47:15:d2:94:df:a8:90:a8:14:
                    94:ea:70:71:26:82:aa:37:e2:28:eb:24:fd:dd:8d:
                    86:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2A:E2:CA:2C:6A:C1:98:20:56:23:83:BA:05:DD:A4:03:57:F4:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8ee72358-8683-3a24-9642-7282b54f19e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:5f:f8:df:03:f0:bd:59:90:77:0b:1b:a5:1c:0a:4e:fd:06:
         f9:55:cd:ab:64:99:42:fe:6c:0c:52:76:bc:55:84:d3:8f:47:
         c1:45:68:c7:7a:2f:36:26:36:42:0a:0a:d7:57:19:c4:d8:13:
         bf:bc:b5:e5:fe:79:ba:6d:23:74:ab:2f:f8:6a:2e:72:27:06:
         6a:26:bd:28:fd:35:c3:df:ce:24:5f:a3:12:1d:63:50:15:10:
         3c:0c:a5:54:8a:dd:57:bb:57:99:f0:25:bf:6b:63:e3:92:5a:
         16:66:dd:c6:45:f5:a5:be:71:ae:40:46:4c:d9:04:d1:72:46:
         56:2f:6f:b8:a7:9a:98:84:e8:90:85:a7:55:e9:4f:a7:1e:f1:
         a3:7f:8c:a7:7e:1c:0d:73:66:71:de:52:a3:1f:60:9b:2f:35:
         0a:f0:1c:1e:85:88:2c:53:2b:78:99:c8:60:8b:fe:22:b5:59:
         18:e4:d8:3c:25:ee:17:a0:8e:f3:18:21:7d:eb:53:e2:88:3c:
         4a:db:bf:ee:ac:b2:e7:64:66:39:3f:52:25:fc:b8:db:e2:c8:
         c5:cd:35:88:56:51:0f:cb:b4:a2:93:d5:c5:65:eb:d5:e4:49:
         c5:2e:5b:72:82:e7:ed:c6:7b:45:5f:29:a1:c3:fb:b9:1b:00:
         54:23:0c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:32:05 2025 by rpki-client