Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cd3a9cf8-fee6-3c4a-a2a1-ff685fc9c68e.roa
File:                     cd3a9cf8-fee6-3c4a-a2a1-ff685fc9c68e.roa (raw, json)
Hash identifier:          3KdhnW7PUncyxVfW5+XxCEWg0rce4FermSxCrcKMcEE=
Subject key identifier:   C7:14:47:5D:80:3A:27:FE:20:4F:31:8E:21:C8:35:4C:7A:34:79:6F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AAB3EAFE36B02FF8A2316B2C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cd3a9cf8-fee6-3c4a-a2a1-ff685fc9c68e.roa
Signing time:             Mon 28 Jul 2025 13:50:18 +0000
ROA not before:           Mon 28 Jul 2025 13:50:18 +0000
ROA not after:            Sun 26 Oct 2025 13:50:18 +0000
asID:                     50056
IP address blocks:        104.252.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:3e:af:e3:6b:02:ff:8a:23:16:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 28 13:50:18 2025 GMT
            Not After : Oct 26 13:50:18 2025 GMT
        Subject: CN=9970eb03-ddd7-4ac0-a446-802f0f8ec5c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:63:42:12:2f:b9:c8:f6:4e:52:94:49:9f:c5:
                    5e:65:d9:f1:d7:ff:e7:e2:f7:fa:4b:e6:7e:09:ef:
                    6a:d3:8b:b6:78:91:7c:29:14:49:ed:51:38:b1:6a:
                    de:d3:ee:11:c1:8c:53:db:d9:a3:31:7f:5b:2c:8a:
                    60:4a:b5:d8:23:00:ba:47:4a:a8:30:19:cb:5c:d3:
                    2b:01:72:32:d4:a4:b5:d3:18:64:5c:3b:56:2c:20:
                    dd:61:5c:df:7e:1c:1b:94:17:d6:48:0c:1e:38:fb:
                    df:f5:4f:39:67:f6:24:67:9f:96:37:45:37:70:69:
                    6b:4a:00:8c:71:c3:cb:48:75:21:2d:4d:af:30:94:
                    d7:e2:63:05:95:aa:b5:b3:88:1a:0f:39:d5:be:97:
                    2f:bb:9f:63:8c:6d:80:4b:a8:ed:90:c0:b5:f6:06:
                    be:ad:7c:b9:17:f4:97:98:ce:f9:33:36:a0:86:1d:
                    2a:5d:6a:65:27:2a:2e:5c:bb:22:e5:3a:fb:61:39:
                    1f:0e:49:78:5e:cc:20:02:6c:d7:10:01:51:76:f2:
                    3b:64:c5:51:84:b5:28:ff:a2:89:2d:cb:e3:8d:e1:
                    7f:1d:12:11:5a:3b:f5:e0:46:98:e5:a0:33:b0:e2:
                    bc:dc:4d:9a:fe:e6:e9:a4:59:d6:38:d1:c7:85:e0:
                    c4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:14:47:5D:80:3A:27:FE:20:4F:31:8E:21:C8:35:4C:7A:34:79:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cd3a9cf8-fee6-3c4a-a2a1-ff685fc9c68e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:c4:7d:28:7f:fe:2a:78:a8:7a:b7:e8:41:3e:41:ff:22:46:
         31:e7:4b:3c:b0:0d:49:86:20:fc:a5:7e:f7:4b:40:c8:27:6e:
         5b:1d:74:c7:6f:1b:73:6e:8a:2f:3f:d2:38:1b:96:9a:7b:9c:
         72:bf:41:09:9f:fa:aa:b8:2e:ed:d9:cf:90:f0:49:0d:cd:81:
         8e:3d:40:6d:db:0b:06:c7:51:d9:92:ef:6b:1c:00:66:74:5d:
         28:2e:27:fe:67:3d:10:97:f5:2d:e5:20:96:f2:ee:95:c2:e7:
         88:39:a6:02:29:e7:72:67:b0:18:4a:00:fd:f6:72:19:09:3a:
         be:a6:e7:fc:10:12:52:1c:8a:21:09:92:fc:58:5b:4f:b9:25:
         1f:90:d5:bb:b2:fd:d3:a1:e3:8b:3f:6e:9c:ae:07:9b:fe:c1:
         ec:d5:be:12:c3:83:19:84:cd:04:55:d5:d0:14:5b:8c:5a:68:
         eb:5e:73:35:50:38:d2:c9:91:56:8c:cc:b6:33:b9:73:01:85:
         2d:c5:38:c7:d5:43:8a:a5:bb:14:36:4f:a0:af:1e:76:48:da:
         9e:b2:f6:23:37:f8:92:37:36:dc:99:27:ec:c6:aa:1e:ca:28:
         5d:ff:4a:79:35:24:6c:66:1a:e5:89:97:63:b2:69:f6:db:1c:
         62:b1:8d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:59 2025 by rpki-client