Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5d5ee7b-1fbc-3efa-aa22-fa908828cf44.roa
File:                     c5d5ee7b-1fbc-3efa-aa22-fa908828cf44.roa (raw, json)
Hash identifier:          fHKl8eXdl2k2u6RaBH62LkHj0I6AymLXhRoShzIwkoE=
Subject key identifier:   60:9F:67:3F:15:F1:E8:A3:99:4B:25:30:AF:EC:77:EF:5F:DF:2C:6A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F28211CAC3CFF3C3A60BBF00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5d5ee7b-1fbc-3efa-aa22-fa908828cf44.roa
Signing time:             Fri 23 May 2025 09:41:31 +0000
ROA not before:           Fri 23 May 2025 09:41:31 +0000
ROA not after:            Thu 21 Aug 2025 09:41:31 +0000
asID:                     214238
IP address blocks:        104.165.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:82:11:ca:c3:cf:f3:c3:a6:0b:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 23 09:41:31 2025 GMT
            Not After : Aug 21 09:41:31 2025 GMT
        Subject: CN=004212c2-24d7-4064-a3c2-6f7cd38980f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f7:5c:01:73:ec:6a:da:9f:01:ae:14:d3:e9:
                    bf:2c:72:6a:a0:0b:1d:29:e2:37:a6:1b:4d:de:38:
                    c4:79:25:10:ce:35:33:1e:6f:82:e3:3f:2a:97:e8:
                    29:d9:69:9a:da:40:e0:91:94:16:42:83:d7:c8:89:
                    fc:20:39:6e:75:a7:92:ad:02:59:2e:52:c8:3b:23:
                    9c:7e:78:25:0d:8b:6a:06:6f:b7:58:8a:aa:45:47:
                    13:67:88:02:04:90:d7:de:c2:7b:ce:5f:fe:c0:a5:
                    d5:c9:c8:c2:6e:fd:b9:6a:b3:f6:3e:40:bc:de:33:
                    44:4f:96:56:a3:48:9e:a8:96:b9:5d:de:e6:90:c8:
                    bb:c9:25:00:f5:c3:b6:d0:7d:e6:ea:e8:e2:80:42:
                    2a:0f:43:a1:b4:5f:67:91:28:e5:e3:f6:9e:d3:59:
                    a3:fe:39:23:36:2c:1f:b7:60:80:e4:57:55:60:c7:
                    a0:e5:8e:bc:bb:2d:74:c8:d2:5c:2e:56:3a:91:7f:
                    24:f2:4f:c4:12:ad:b1:3d:53:07:dc:1b:f0:34:9e:
                    77:8c:4e:96:e9:49:98:32:0e:15:fc:c2:34:44:98:
                    76:f2:63:95:68:e7:ca:6d:c2:58:1e:de:d3:bf:96:
                    ec:ea:20:2a:13:b7:0c:e6:2e:54:7e:19:d8:2f:ef:
                    9e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9F:67:3F:15:F1:E8:A3:99:4B:25:30:AF:EC:77:EF:5F:DF:2C:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5d5ee7b-1fbc-3efa-aa22-fa908828cf44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:0f:07:78:71:5d:ba:8a:20:41:05:5f:7e:a8:cd:b8:80:18:
         eb:cd:b3:8a:13:d9:6e:8c:12:fa:1f:71:1a:02:7c:78:3a:e0:
         d3:87:39:fb:9a:d9:ff:26:31:36:82:ab:48:34:af:e7:0e:cf:
         3b:f6:16:35:93:cd:ac:83:47:8b:aa:44:cd:a0:cc:9c:9b:51:
         94:fd:48:f0:47:4b:64:93:b9:75:48:8b:89:7d:31:3d:59:01:
         cd:d9:78:9c:d0:5d:58:ac:63:2d:ae:2f:75:a0:86:4b:b7:b2:
         65:1f:61:16:fd:5f:86:11:48:47:bd:92:40:15:d6:6d:0f:49:
         0d:5e:53:a2:65:1c:c7:f7:cd:80:a6:b1:a3:83:eb:55:62:d9:
         a9:ff:05:07:4b:6e:be:64:a9:29:df:81:58:ba:88:49:f9:75:
         41:2c:4b:3c:dc:a2:71:11:ad:fc:28:f8:d3:b7:77:aa:7b:0c:
         6d:fa:98:35:fc:84:85:62:f2:b8:81:00:b1:34:32:7c:75:2a:
         51:fe:bd:c5:dd:8d:41:59:ec:e0:9b:2b:8f:ad:e9:7f:58:fb:
         10:2f:e6:ad:6f:3c:60:48:7b:ca:3d:64:89:af:b5:d0:dc:13:
         39:47:6f:3b:b2:a0:0e:5b:42:f5:2c:d4:eb:ea:0e:c7:d5:37:
         18:b3:0c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:03:33 2025 by rpki-client