Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a7e935ea-21be-30ff-adf5-259f61235bce.roa
File:                     a7e935ea-21be-30ff-adf5-259f61235bce.roa (raw, json)
Hash identifier:          dGEZtlu0BsHfm3lbMeG3oYKYtHPkNoGshlga/f/Ur5E=
Subject key identifier:   77:A5:E9:06:AA:1A:56:79:76:4D:11:09:B5:0A:35:8B:39:6E:9B:A8
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A0D6A9107AA4B78FD15F9ABE8
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a7e935ea-21be-30ff-adf5-259f61235bce.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     40676
IP address blocks:        104.253.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:91:07:aa:4b:78:fd:15:f9:ab:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=43f93f2f-d58f-4251-be75-e82b0a117e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8c:a7:56:29:d8:fd:2d:49:eb:fd:22:e3:1e:
                    0c:d1:9a:27:82:04:57:0b:7c:21:db:87:47:61:b0:
                    a5:c1:44:0d:fc:4b:00:87:be:b5:dc:64:59:fe:c3:
                    b5:07:c7:17:a6:cf:0c:3b:6a:a9:6c:4e:3d:53:d2:
                    cf:31:fd:8c:14:3b:1f:d3:46:23:64:f1:30:ea:4e:
                    88:f0:31:4a:90:8a:a3:66:45:ec:d0:73:34:5b:30:
                    6e:31:7a:5d:a1:a8:f1:b4:25:fd:94:a0:05:f2:60:
                    d7:63:91:a1:fa:0d:34:c5:f2:ae:51:2c:f6:06:7a:
                    28:94:3e:43:10:fc:b5:be:11:43:53:c9:d3:1a:a7:
                    18:2c:4b:95:5b:87:92:73:b0:65:f9:23:e1:31:71:
                    78:b4:6a:47:62:f5:de:01:56:f1:18:8d:81:84:67:
                    05:9c:2b:76:ab:b0:2f:03:65:28:d9:05:30:07:8a:
                    21:36:8b:10:30:70:6d:b5:35:03:bf:4f:e8:82:f7:
                    21:78:3c:d0:85:54:12:37:f5:ca:8d:91:b4:ff:29:
                    4a:96:59:5b:26:41:ea:64:f5:a8:e2:5c:46:c9:3f:
                    6a:ee:38:92:5e:4d:89:83:a1:77:8e:ed:d8:e7:e4:
                    08:c6:4b:24:19:fd:fe:e3:e9:4b:e6:29:69:f3:87:
                    15:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A5:E9:06:AA:1A:56:79:76:4D:11:09:B5:0A:35:8B:39:6E:9B:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a7e935ea-21be-30ff-adf5-259f61235bce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:9a:62:ef:eb:74:21:4e:53:1a:30:ba:71:41:90:98:64:97:
         6f:2f:f7:ad:dc:f0:0d:2e:3a:f8:f9:49:39:41:8e:af:de:8c:
         a3:d6:b8:cc:14:10:fe:24:a7:2c:dd:54:42:eb:05:ff:41:21:
         dc:2b:f2:a7:24:77:4f:1a:3f:eb:c2:7b:3b:be:f4:5a:25:9c:
         06:57:b0:58:b2:fd:9b:ee:c3:cb:b3:a6:1f:f8:b5:98:db:52:
         cf:b8:34:56:11:3e:2e:a4:8b:21:9e:fd:a4:40:6c:04:df:c2:
         f4:d9:61:26:1f:87:7d:ac:8f:2b:54:b1:a4:c2:20:4b:f8:ae:
         8c:95:82:83:44:c3:65:51:72:ec:d1:95:a4:20:fa:af:bf:1c:
         0d:26:e1:77:7a:41:3a:33:f2:c0:d6:ce:ba:3d:75:e8:8f:e4:
         4c:79:53:da:f6:2d:56:8f:d8:f0:84:ab:60:cf:ad:62:3a:ca:
         3c:48:7e:68:84:77:5a:3d:e0:52:6a:1b:25:0f:ad:5b:1b:dd:
         17:c1:32:85:45:05:a5:65:77:10:c3:b6:b0:5a:4f:c6:2a:80:
         51:2d:08:9b:16:a3:be:39:44:f1:a1:0a:ab:8a:8e:51:e9:cf:
         f7:a8:ac:ea:3e:9a:25:20:e1:8f:31:8b:79:96:0f:84:b5:d0:
         57:04:b8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:52:25 2025 by rpki-client