Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f1fa85b-e2cf-3305-97fa-97e80ae1a03d.roa
File:                     8f1fa85b-e2cf-3305-97fa-97e80ae1a03d.roa (raw, json)
Hash identifier:          j/D9O809yzbb7BD57HT9J80hYyR7pya1cHfh6KnbLM8=
Subject key identifier:   DC:8A:94:AB:5B:FA:9D:A8:A9:E3:D6:16:3F:C3:13:F1:76:61:5E:96
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AB2217889F7F3CAE809B20280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f1fa85b-e2cf-3305-97fa-97e80ae1a03d.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     18779
IP address blocks:        104.252.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:21:78:89:f7:f3:ca:e8:09:b2:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=2d497566-06eb-448e-8e66-f3898a54d309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:96:bf:8b:e3:b7:43:87:7c:92:db:65:41:ef:
                    21:21:25:c5:a2:69:96:47:64:ef:45:e1:f8:07:3b:
                    1c:5d:d4:6f:08:38:2b:68:c8:08:24:03:73:88:c7:
                    49:c1:83:6a:3f:6d:ed:d2:30:13:96:8c:d1:ce:2c:
                    0c:a1:29:9c:5c:d0:5f:09:53:c2:ff:79:99:f5:e4:
                    de:47:7f:12:d0:bd:4f:b2:3a:fe:2f:f1:3a:b1:fc:
                    aa:eb:d9:f7:28:e3:fb:4c:fb:f0:2f:03:21:b2:c4:
                    37:77:ac:b2:a7:30:44:b8:f9:da:64:25:cd:67:59:
                    95:22:d2:13:7f:6a:e4:8d:87:ef:1e:a2:b2:e4:d3:
                    82:29:83:ac:d2:77:ab:ca:3f:5a:f1:46:02:db:df:
                    fa:be:a2:70:f8:5a:c5:04:a6:9c:2a:ff:6e:32:63:
                    aa:12:fa:ca:ef:24:4f:d6:a0:9c:52:b8:18:b9:40:
                    f9:0d:a1:bd:7a:17:31:72:24:0a:33:06:c6:f2:af:
                    a1:94:f2:08:59:f4:15:eb:93:02:ea:66:04:bd:fc:
                    8a:a2:05:b4:be:90:96:30:5c:43:72:87:5a:4b:fd:
                    a3:99:e7:f4:e6:71:0e:47:ce:66:b8:1d:ba:3a:07:
                    c3:64:1d:4c:e5:09:fe:9a:5d:9b:a3:7b:15:12:a1:
                    20:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8A:94:AB:5B:FA:9D:A8:A9:E3:D6:16:3F:C3:13:F1:76:61:5E:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8f1fa85b-e2cf-3305-97fa-97e80ae1a03d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:2b:aa:c1:db:c1:9a:a5:c9:f7:ba:89:be:16:71:56:ce:8f:
         b3:5a:3b:b2:44:0a:77:dc:27:3a:a0:d2:b3:49:74:41:23:bc:
         6f:42:7b:90:9d:76:f7:be:fd:0c:28:55:3b:f4:de:f1:49:a2:
         19:30:31:38:b8:c6:77:73:21:d1:91:e4:8f:3e:1a:e8:5d:f4:
         cb:7a:e3:77:45:2d:25:4a:6d:ab:19:c7:03:d9:19:57:78:b3:
         a1:5f:2e:75:60:b5:94:ad:9a:d0:b4:ad:3d:4a:c5:ad:f1:87:
         60:cb:91:ac:83:46:08:52:f9:98:c1:5d:15:81:1e:5f:a5:5f:
         bd:c6:42:89:1c:03:32:90:02:64:44:df:e8:8d:55:b2:9d:f6:
         5f:f2:ca:3c:1e:04:e0:78:da:5d:c3:e9:6a:1f:82:89:17:05:
         6b:9f:17:55:88:ed:e2:56:cc:8d:54:70:6e:f4:1a:44:7f:98:
         cf:fc:ad:60:01:58:d8:e6:c3:44:44:a6:21:f2:9e:1f:dc:4d:
         5f:eb:bc:d4:ce:38:70:c2:3d:45:ec:0f:7e:f6:e1:b9:89:55:
         ea:2f:68:ab:e7:e8:2d:ca:f7:0a:d3:87:fc:ad:dc:e1:bc:45:
         d5:95:fb:37:ab:47:c4:3c:ec:d9:14:30:fa:5f:1d:77:60:fc:
         15:ce:43:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:33:30 2025 by rpki-client