Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d96fc86-014e-3cc4-8ada-6cffaa3fb880.roa
File:                     9d96fc86-014e-3cc4-8ada-6cffaa3fb880.roa (raw, json)
Hash identifier:          uZaI+jY3TTEfgvKBIiBE/uombqctrRERfo6WW7IQPYM=
Subject key identifier:   A7:EE:51:ED:3F:7B:9D:BD:4C:52:5C:F8:AB:A5:D0:A1:22:43:B8:AF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AB65106042BE0A5142FD52180
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d96fc86-014e-3cc4-8ada-6cffaa3fb880.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     262287
IP address blocks:        104.165.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:51:06:04:2b:e0:a5:14:2f:d5:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=97d1d947-22ea-4b6d-a75c-9a77ebb9245c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d0:d4:71:ec:65:06:5d:93:9b:94:a6:bd:88:
                    c4:a4:9f:0b:1c:99:8a:5b:fc:bb:15:f2:2d:54:14:
                    8b:1d:22:37:dd:04:60:76:52:d4:de:f2:c6:bf:34:
                    76:a3:82:1e:28:8d:ca:a7:54:89:f2:04:70:ce:47:
                    5f:ec:02:8f:ef:04:b7:09:ed:69:ae:57:b4:39:e2:
                    77:19:bf:ac:13:12:14:8e:0c:70:26:be:46:78:f1:
                    5c:9a:33:99:15:ec:9b:a7:16:18:98:6d:eb:42:38:
                    b9:d4:a4:45:e3:9b:3e:39:55:56:3e:b6:0b:c8:11:
                    d4:2c:3b:4e:b3:09:70:e8:5b:fc:c0:4d:cf:77:8c:
                    79:81:36:19:3f:eb:3b:de:7a:ad:05:7d:ad:1c:ab:
                    b4:58:79:93:fb:e2:64:de:4f:0c:a3:b1:79:30:6a:
                    b3:b1:c6:79:ec:8b:bc:af:51:36:f0:d0:e0:8f:4a:
                    65:f3:44:7c:b7:21:3a:37:73:74:5d:0a:5b:67:7c:
                    5c:ca:c0:0d:f9:dc:b4:e7:04:db:13:cd:1b:2d:cf:
                    d6:80:de:d2:aa:7f:e6:c2:31:79:38:00:42:0f:b7:
                    5e:04:21:71:fa:09:ce:9a:6c:ea:88:f8:bc:34:f2:
                    4f:45:80:5e:2b:6c:9a:c9:78:1c:19:79:e3:04:bf:
                    03:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EE:51:ED:3F:7B:9D:BD:4C:52:5C:F8:AB:A5:D0:A1:22:43:B8:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d96fc86-014e-3cc4-8ada-6cffaa3fb880.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:59:27:8b:62:28:c0:52:df:81:e5:e4:8c:ca:51:3b:de:e1:
         9f:66:a9:de:f9:83:6c:87:e4:98:f5:60:b1:67:5b:42:fb:54:
         a6:ab:3c:5b:18:4c:c5:a8:07:28:18:b3:2a:88:48:74:0f:2e:
         85:a0:86:bb:c4:b5:86:79:a8:b9:37:73:a9:cb:32:d7:d9:0d:
         74:37:61:5a:e5:93:ed:a8:b8:d4:b4:7a:5c:2f:6b:02:bb:b2:
         5e:16:23:2c:de:17:9a:30:a0:21:93:df:cc:c7:8a:e9:02:ad:
         46:fe:ff:6b:72:3b:f1:e4:f8:ea:49:bb:7a:d8:0c:22:05:cc:
         42:c8:99:4d:f3:1f:ad:00:25:74:e7:f6:70:85:7b:77:a7:75:
         f4:e9:73:ec:a2:6d:8a:3d:d4:22:4a:21:d9:f1:a2:dd:0a:a9:
         d4:e2:5f:a8:84:b2:99:86:1c:c1:5c:c0:6f:7e:cd:58:94:96:
         93:5c:d0:59:cc:e8:7d:5b:82:49:e0:29:55:38:30:72:f4:5e:
         40:fd:c0:b1:26:21:00:a1:e7:88:e1:7e:f2:fc:91:78:d7:27:
         85:1f:94:c4:09:ac:4e:3d:cd:da:1b:2e:c5:ca:be:cf:f6:48:
         a4:a0:2b:0b:bc:d0:a8:fb:44:b5:c8:ae:80:2c:11:cc:33:54:
         58:44:6a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:08:55 2025 by rpki-client