Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/914194d3-3c82-3728-b219-50fcecb214dc.roa
File:                     914194d3-3c82-3728-b219-50fcecb214dc.roa (raw, json)
Hash identifier:          vbJsJJK/hsp2i/B7ws9KUOsqhE9rQ6cFzTMfMFRs6E8=
Subject key identifier:   F1:44:9A:B9:4A:9A:DD:47:00:6E:02:E0:46:7D:2F:50:AC:F1:27:5B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AAF560A7F39678612A4EEFE80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/914194d3-3c82-3728-b219-50fcecb214dc.roa
Signing time:             Wed 30 Jul 2025 01:00:32 +0000
ROA not before:           Wed 30 Jul 2025 01:00:32 +0000
ROA not after:            Tue 28 Oct 2025 01:00:32 +0000
asID:                     18779
IP address blocks:        104.164.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:af:56:0a:7f:39:67:86:12:a4:ee:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 30 01:00:32 2025 GMT
            Not After : Oct 28 01:00:32 2025 GMT
        Subject: CN=8c4a30ec-66df-4714-96cf-b051c80deecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:30:7d:f9:fb:b8:61:7e:eb:5d:69:5b:58:18:
                    d8:25:a9:d3:0f:66:70:42:e9:f4:70:27:bf:19:91:
                    3b:2d:ab:cb:dd:d3:55:a8:27:58:0d:1e:04:1d:e7:
                    ed:c7:8c:29:29:2a:42:b4:06:60:6b:d1:28:00:9c:
                    43:b1:6e:4b:a4:50:8b:c9:30:92:db:64:a0:e5:eb:
                    17:07:3b:28:35:64:66:bd:9b:24:18:77:11:00:30:
                    ff:4f:90:35:28:75:65:a2:8d:c0:03:ad:f8:bb:fd:
                    29:a4:5f:59:b9:79:bf:6e:59:3a:07:3b:61:0d:72:
                    ef:50:96:6f:1f:fe:bb:6d:94:06:91:c2:64:eb:8f:
                    08:be:01:38:6e:13:82:a0:64:69:c2:86:52:f1:e9:
                    a6:4d:c9:be:9d:99:14:d3:65:2b:8e:f8:20:49:0d:
                    aa:99:0d:5f:31:39:46:ff:7a:08:de:ce:7d:3e:5a:
                    84:a2:c3:1b:fd:70:a2:c6:d9:85:e0:c0:0e:de:3b:
                    a3:bb:75:58:d1:20:50:c2:6a:83:ea:8e:41:d8:66:
                    5e:6c:c9:99:a0:c1:23:19:0d:3d:ac:46:14:2b:67:
                    33:9b:ce:22:06:ad:5f:d5:35:32:c6:a5:d3:80:2d:
                    bd:b4:df:35:19:9b:82:02:98:6b:6d:82:01:7c:59:
                    f9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:44:9A:B9:4A:9A:DD:47:00:6E:02:E0:46:7D:2F:50:AC:F1:27:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/914194d3-3c82-3728-b219-50fcecb214dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:47:45:46:61:c4:6d:01:bf:5d:1d:33:d6:e8:c7:30:0a:64:
         1a:c3:d0:0c:a3:16:60:1d:66:2b:9b:44:d5:3b:b6:8a:92:98:
         76:61:d3:9c:36:49:e3:51:a4:7b:96:57:36:5b:60:c1:dd:35:
         7d:2c:a7:53:49:4b:da:e7:8d:89:88:cb:b5:cd:a5:db:56:64:
         4b:59:bf:a3:17:fd:ed:73:ad:31:ed:99:d3:ab:bb:f2:e9:c1:
         cc:31:6a:5c:fb:07:7a:e9:2c:14:59:7e:91:40:a1:b6:53:62:
         b8:cd:ec:90:04:78:22:3f:4f:fa:5b:ea:1e:d9:9b:f9:bd:66:
         c2:bd:0a:88:68:db:92:da:91:c8:65:a0:0c:71:e5:2f:e5:46:
         42:4c:84:04:5d:9b:1f:01:df:9e:c3:f5:fe:7b:0d:a3:1d:af:
         1a:9c:da:95:9e:9e:a0:06:39:a7:5e:59:76:33:16:13:25:ab:
         ef:10:33:57:e2:1e:85:df:1a:cc:42:ee:4c:90:bc:9a:0a:83:
         40:42:d3:1c:3b:b0:38:6f:d2:33:87:4f:5e:f0:c2:46:ce:aa:
         27:2a:c7:40:4b:a1:fa:e2:75:ea:75:40:bf:97:fd:42:24:c8:
         2f:9d:55:07:a1:49:92:97:a2:42:e4:57:06:e4:61:ab:03:70:
         5e:cc:0c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:02:37 2025 by rpki-client