Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4fb100f-3c84-3561-bbe6-29be679eb7f0.roa
File:                     b4fb100f-3c84-3561-bbe6-29be679eb7f0.roa (raw, json)
Hash identifier:          lyczA6s+fQszCTPzWDtXn4z1oW4IzWVlm/inGezyqBk=
Subject key identifier:   44:A5:47:42:88:D8:35:53:BE:4A:B7:BA:7E:40:4D:74:66:E8:3B:E0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A8C70D8FCB860F01BC5FE8D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4fb100f-3c84-3561-bbe6-29be679eb7f0.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        104.253.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:d8:fc:b8:60:f0:1b:c5:fe:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=2bb288d8-df3b-4ce3-b876-a9f3b90f9d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:f8:16:2e:d8:4a:7e:41:2a:7d:a4:3b:3a:
                    3b:d8:87:cf:71:0f:17:c1:c8:17:ef:f2:b8:96:ef:
                    c3:d3:be:5a:c0:9e:e0:ff:5e:5c:7b:5b:18:77:04:
                    2b:c3:43:d6:53:91:a3:25:46:22:8e:76:71:10:00:
                    6b:fe:07:c5:b7:9f:23:ad:19:11:77:0e:6d:93:67:
                    4e:d2:dc:42:19:be:4a:fe:96:7b:98:72:7e:fd:8f:
                    44:24:9b:94:e6:31:23:ec:dd:ba:57:d7:76:99:8e:
                    80:5d:81:34:a5:67:14:b0:4c:d1:3b:4b:d1:80:9b:
                    6f:b4:cf:cb:6e:6d:24:f3:92:3d:28:27:5c:16:7a:
                    68:d9:de:4d:1d:c4:e7:29:7d:48:1d:9c:32:8a:83:
                    48:99:02:cc:96:e2:da:a0:fd:f0:36:53:e7:23:50:
                    f7:ae:8a:97:a7:25:88:91:e2:55:3f:0f:50:83:2d:
                    4a:58:9c:ce:2a:cc:c4:60:76:5f:75:d2:01:da:77:
                    ef:70:60:0f:7e:b2:bd:02:b7:58:20:70:db:8e:06:
                    81:ac:06:f5:33:12:6c:65:78:ed:9e:bd:83:cb:12:
                    4d:12:c5:b1:2b:06:37:c3:ba:93:9b:93:dd:67:c4:
                    d3:e4:14:e9:0e:1e:b7:7a:f5:19:a4:40:b7:53:05:
                    5d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A5:47:42:88:D8:35:53:BE:4A:B7:BA:7E:40:4D:74:66:E8:3B:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b4fb100f-3c84-3561-bbe6-29be679eb7f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:71:64:51:f5:77:72:a4:4e:c2:32:7a:ba:a5:32:f7:fc:9b:
         bd:bf:1c:a5:a3:c7:a9:46:ac:59:70:54:a5:0c:a5:86:4d:31:
         66:fd:1d:01:79:c4:75:ce:0a:88:3e:9a:cd:3e:0d:6c:17:b4:
         59:f5:ff:c6:81:59:0a:03:e8:2e:c8:7a:0f:48:fd:ff:7f:a8:
         1d:aa:07:f2:18:48:13:0e:bd:1d:be:12:1c:12:67:17:80:49:
         8b:f3:43:73:8f:ca:6e:d1:f7:2b:c9:ba:f3:19:55:b3:3f:6f:
         42:7c:06:54:82:7b:a5:9f:ca:19:6f:a4:bd:84:5a:11:22:c9:
         70:68:16:87:00:2c:7b:77:b0:60:15:18:10:b1:78:fe:7b:8c:
         62:89:1a:14:cc:70:5b:ab:b5:21:a5:6c:fc:1c:cc:6c:19:c5:
         bc:f9:bc:7f:07:6f:51:5d:85:02:ad:4a:3e:15:a6:37:a4:38:
         cb:53:cf:19:5e:20:ef:07:ce:30:3f:56:5b:0d:4b:7f:74:2e:
         69:a9:ab:91:ec:c7:8b:44:30:01:b1:57:dc:55:db:28:fe:54:
         fa:26:91:92:0b:f2:80:19:23:ce:8c:af:0c:3c:a8:19:d3:aa:
         4a:4d:c9:de:80:46:73:e0:d9:0c:24:8d:cd:f8:26:d3:99:5c:
         fe:29:5d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:32:17 2025 by rpki-client