Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d50a928-b94a-32d3-9c06-5421cd4b9b32.roa
File:                     9d50a928-b94a-32d3-9c06-5421cd4b9b32.roa (raw, json)
Hash identifier:          jUNWgP2LJtosXxowpGcL2wZ/BltaM8ex8/FcdVGxrdw=
Subject key identifier:   84:52:7F:26:E4:80:D7:97:FB:9F:5A:F9:82:E8:2F:CB:DC:8C:95:82
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AAF56091DC4F61E76624DB600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d50a928-b94a-32d3-9c06-5421cd4b9b32.roa
Signing time:             Wed 30 Jul 2025 01:00:32 +0000
ROA not before:           Wed 30 Jul 2025 01:00:32 +0000
ROA not after:            Tue 28 Oct 2025 01:00:32 +0000
asID:                     18779
IP address blocks:        104.164.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:af:56:09:1d:c4:f6:1e:76:62:4d:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 30 01:00:32 2025 GMT
            Not After : Oct 28 01:00:32 2025 GMT
        Subject: CN=daecfe39-7b8f-485d-8dbc-96e9526abc8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5a:9c:20:b3:03:f2:2b:de:e0:f8:2e:8e:f0:
                    16:a6:3d:09:03:1c:28:4c:ac:ad:f6:0d:35:ba:8c:
                    d7:83:d8:c0:c4:8f:ad:dd:ba:47:3b:11:da:2a:1b:
                    37:11:56:cc:53:04:78:40:cb:a8:4c:79:c1:28:d7:
                    8c:71:f2:9e:aa:f6:12:65:6b:54:25:e8:36:97:db:
                    74:af:4b:1e:4c:36:9a:c7:b5:47:a6:2a:f3:ef:56:
                    0b:4d:68:9e:5e:bc:63:b8:f0:1e:6e:23:e1:8b:15:
                    45:a0:bb:21:a9:dd:51:b1:db:8b:24:06:d9:6d:50:
                    21:30:98:bc:31:57:28:be:92:74:97:4c:d2:f5:d5:
                    68:eb:06:4b:6b:3b:ae:02:3c:33:87:22:8c:2d:95:
                    5e:fb:cb:2b:df:b1:0e:12:98:39:c4:a7:56:0d:ab:
                    dc:b9:cd:21:41:e0:a6:2b:51:4a:f0:91:fa:2a:18:
                    d1:20:65:ec:b4:ae:1e:88:84:bd:c9:84:13:e6:e1:
                    6b:0a:cf:72:fd:b9:36:98:5e:d2:d5:f9:50:6f:f0:
                    47:d3:54:0b:a2:7d:9e:da:c7:5d:e7:2c:d2:94:bb:
                    b7:44:c3:7c:ad:8e:1a:fc:51:8f:89:87:86:4a:67:
                    45:cc:24:62:ab:03:e4:1a:e4:cf:2d:39:bb:7b:f3:
                    d5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:52:7F:26:E4:80:D7:97:FB:9F:5A:F9:82:E8:2F:CB:DC:8C:95:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d50a928-b94a-32d3-9c06-5421cd4b9b32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:78:37:da:45:fd:99:8c:4e:27:e2:a8:da:33:29:5f:98:93:
         97:9d:e4:57:e5:46:5f:49:86:5b:8d:76:89:97:3e:33:68:b1:
         7a:07:ce:9f:15:58:73:09:99:b7:d6:a7:c1:df:55:5c:a6:be:
         0b:54:9b:0d:49:78:36:e5:e8:4a:a2:bf:cb:cf:87:56:38:27:
         3a:7a:88:8c:dc:56:29:7f:50:a9:9b:73:1f:77:1b:83:b1:8e:
         ac:ae:6e:c5:b8:3a:46:c0:6b:5a:c6:5a:51:91:01:fc:48:e9:
         ee:2f:4c:e5:d6:11:c3:3d:04:47:a6:8f:31:d8:b4:e7:91:97:
         ff:97:8c:b3:24:fd:db:84:ec:06:c6:79:c7:b2:16:51:e3:d6:
         10:28:c0:a6:1b:b0:d5:a4:73:d2:49:43:b4:1c:17:89:4f:25:
         3c:85:3e:d2:c7:ed:b0:81:8b:f1:08:7c:c1:96:7a:fe:57:03:
         07:6e:6d:ca:69:9a:e5:07:1b:de:a6:96:35:e3:22:ae:db:2a:
         fe:ed:46:0d:51:bf:b9:af:a1:8c:d6:7d:ba:06:17:69:14:f5:
         c4:70:dc:3f:35:b8:08:fb:3e:fb:39:6d:a7:ba:50:05:ce:6c:
         e6:a6:fc:7f:49:33:c9:2c:09:90:ba:ff:9b:66:2e:1d:81:e7:
         c9:44:91:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:27:20 2025 by rpki-client