Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bdabd3e3-4d19-3949-9cfb-ddcd0273c529.roa
File:                     bdabd3e3-4d19-3949-9cfb-ddcd0273c529.roa (raw, json)
Hash identifier:          mnwXfY1OhGab3pnY7IZGNYHB0i1T/U7HUsKaR3IkvEg=
Subject key identifier:   4B:29:13:DA:26:FE:AE:B3:0F:46:73:15:7E:4F:51:93:E9:90:1D:AC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AAF5610FA064CE4EBAD855640
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bdabd3e3-4d19-3949-9cfb-ddcd0273c529.roa
Signing time:             Wed 30 Jul 2025 01:00:32 +0000
ROA not before:           Wed 30 Jul 2025 01:00:32 +0000
ROA not after:            Tue 28 Oct 2025 01:00:32 +0000
asID:                     18779
IP address blocks:        104.165.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:af:56:10:fa:06:4c:e4:eb:ad:85:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 30 01:00:32 2025 GMT
            Not After : Oct 28 01:00:32 2025 GMT
        Subject: CN=379dac4f-16ba-43d0-82ce-1d7e2148152d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:af:ce:d6:0e:64:88:b3:b7:41:18:92:a6:8f:
                    b6:da:b9:ef:31:bf:72:1a:07:ef:b6:f3:99:f0:d8:
                    5e:54:73:61:1e:25:e1:ea:83:63:0a:0f:a9:91:16:
                    44:b3:55:fe:9b:4e:42:51:cb:c3:55:c1:5b:f1:7a:
                    24:40:e2:3c:c7:18:03:cb:f3:de:fc:8c:96:bf:40:
                    16:a6:40:f9:e7:94:4c:fe:11:54:ec:f1:94:53:c3:
                    98:05:de:03:be:38:a9:2d:9b:fc:69:2f:24:80:ee:
                    52:15:86:a1:eb:a6:f2:09:fc:39:6d:de:67:41:77:
                    9d:bc:da:cc:ea:7f:e1:27:9a:2f:a5:e3:dd:17:f3:
                    0f:54:39:e8:57:ce:33:76:45:c3:56:cb:2d:8d:34:
                    41:10:61:03:08:87:9f:cb:91:86:01:07:9c:98:bd:
                    11:e8:0f:dc:0d:d2:58:b4:93:02:2d:10:3c:a6:a7:
                    e5:d5:0f:e8:21:6b:70:ad:e5:20:78:d8:fa:dc:52:
                    21:6c:b4:31:f3:7d:4f:75:91:e6:2d:f3:82:89:31:
                    d9:06:9d:85:fc:ab:de:92:58:a4:cf:04:a5:fe:e4:
                    67:f8:71:e8:25:4a:45:e2:b5:d1:d7:d9:fe:7d:79:
                    41:47:94:bf:3c:7a:14:52:ed:28:b9:25:2e:c4:24:
                    d9:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:29:13:DA:26:FE:AE:B3:0F:46:73:15:7E:4F:51:93:E9:90:1D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bdabd3e3-4d19-3949-9cfb-ddcd0273c529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:32:d1:91:cb:5b:a7:40:1c:21:e2:0b:01:d7:ef:4a:af:ad:
         c2:98:af:e1:4b:dc:a4:23:3b:b1:3e:57:14:98:65:c3:31:5c:
         cd:e5:5f:89:de:a7:dd:88:f5:7e:02:53:37:e7:58:50:5c:d4:
         1b:ec:ee:e7:f9:1f:10:36:32:96:a1:f5:6b:ac:91:a1:9e:91:
         c0:67:42:63:ed:77:a8:0a:40:1f:55:9a:7d:77:7c:d8:9f:17:
         10:b2:7e:d6:2a:c0:7f:6f:af:7d:48:3f:fa:63:ca:8a:02:51:
         b8:f9:3a:2a:ea:8e:92:60:67:f6:16:71:43:8d:b9:6d:82:5f:
         08:1a:37:26:42:29:e9:3a:ec:a1:72:1f:eb:78:48:38:4e:4a:
         9c:30:e2:88:33:60:2c:d5:30:1c:df:89:23:8d:4c:41:19:c6:
         1a:70:09:37:f8:93:40:3c:b3:d3:9e:95:97:f1:eb:ee:c8:16:
         09:7c:61:ee:c0:3a:88:48:51:5b:ed:84:11:36:2b:09:9c:0c:
         13:cc:3f:3e:4e:cf:d4:40:e7:07:8d:32:ef:1b:00:6f:11:09:
         7f:0a:26:da:b4:9d:23:9b:69:95:b2:76:61:24:5a:cf:28:9a:
         71:21:22:4d:0a:7b:ab:45:97:c2:81:a7:a4:67:11:42:66:65:
         d0:76:68:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:12:01 2025 by rpki-client