Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ce95af9f-c538-323d-9b50-6b11ab5de036.roa
File:                     ce95af9f-c538-323d-9b50-6b11ab5de036.roa (raw, json)
Hash identifier:          A7cs1jT+BsixQ2l+Dh7jUNVTiOH8KLjIoOhv1BUCW8E=
Subject key identifier:   0D:EE:BE:86:E7:53:9B:4B:A9:78:18:C3:5F:61:F4:49:0A:BE:BC:77
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849A42E9D7B48303B35EFD8F580
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ce95af9f-c538-323d-9b50-6b11ab5de036.roa
Signing time:             Fri 25 Apr 2025 08:20:19 +0000
ROA not before:           Fri 25 Apr 2025 08:20:19 +0000
ROA not after:            Thu 24 Jul 2025 08:20:19 +0000
asID:                     213990
IP address blocks:        104.164.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:2e:9d:7b:48:30:3b:35:ef:d8:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 25 08:20:19 2025 GMT
            Not After : Jul 24 08:20:19 2025 GMT
        Subject: CN=6c8bf332-47f0-4cfa-bd4d-5e185108da78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5d:b6:bf:c8:37:dc:3c:e4:22:0a:26:ed:3e:
                    8a:16:75:0b:aa:2a:0a:6d:81:2c:e1:94:8a:06:a5:
                    fc:16:21:63:a6:f5:09:85:54:92:34:9f:1f:a6:c8:
                    66:44:fb:07:c5:43:55:21:c3:8f:a5:32:80:ea:e3:
                    98:7d:6e:8d:b6:b3:20:a6:5f:85:a5:78:db:a4:83:
                    97:1b:fe:11:7e:af:66:51:f1:b1:4f:7b:ae:7b:64:
                    b5:70:b6:8b:f8:a9:69:ca:ee:9c:0c:c6:2d:98:b8:
                    64:2d:b2:75:48:43:f2:5a:09:20:ec:c9:fb:e5:49:
                    c1:6a:61:81:e6:bc:eb:dc:ac:de:35:89:53:c8:f9:
                    01:f3:ac:11:4b:3e:23:08:2d:71:ee:9d:49:5e:3f:
                    ac:d0:0a:bb:29:05:af:f6:8f:44:04:93:4b:8a:66:
                    74:68:fc:54:27:7f:05:60:21:96:57:7f:bd:48:57:
                    65:7b:95:8f:04:83:f1:e4:d4:5f:4a:e3:a9:6b:6a:
                    e3:d1:c2:03:57:0e:19:d6:8d:1d:20:7e:bc:f9:d8:
                    4c:a6:56:7e:28:d0:1c:58:2c:dd:b2:95:eb:28:a9:
                    62:5d:a4:35:e0:87:76:b7:cd:43:dc:41:6b:54:ca:
                    de:f4:d4:90:4f:5e:d0:a6:7b:69:57:80:69:6a:30:
                    fd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EE:BE:86:E7:53:9B:4B:A9:78:18:C3:5F:61:F4:49:0A:BE:BC:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ce95af9f-c538-323d-9b50-6b11ab5de036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e3:7a:54:f8:02:7b:0e:f6:15:db:3b:04:e0:a8:24:33:98:
         91:65:b7:b5:d7:59:4e:4c:08:87:49:99:ba:f4:6a:d4:f4:c3:
         59:09:3e:a4:bd:5e:5f:58:75:30:03:bf:3a:21:99:9c:6a:f1:
         c2:ea:93:5c:cc:27:47:b8:a5:d9:db:c8:d8:cb:07:41:c9:fd:
         29:d1:c6:ae:ec:98:69:07:de:b7:f0:e6:f8:51:7d:e4:51:a5:
         a1:15:e1:1a:28:dd:4c:b0:8a:70:3e:79:26:31:9f:d2:bc:bf:
         5a:43:f9:e5:52:5a:96:06:37:b6:b6:91:4f:ac:39:af:07:8b:
         17:6a:82:38:1a:39:84:63:74:6e:11:b0:99:59:f8:4a:fe:d4:
         77:06:9a:48:04:c7:61:0e:d4:cd:f8:14:8e:ac:c3:26:1e:8d:
         b3:5b:93:2d:c5:4f:11:0f:9d:c6:3a:f1:6b:ce:fa:05:52:43:
         0f:c3:06:7f:6c:58:77:ec:48:75:cf:b6:c1:cc:20:bb:b2:01:
         0c:f2:68:5b:31:99:e8:da:e3:d3:5f:6c:ac:18:bc:b0:68:a9:
         ae:8c:03:fd:a1:f9:80:63:53:17:cf:a3:28:a8:77:b1:1f:62:
         84:0f:06:b5:86:0f:5d:f4:7d:96:1f:d9:bb:78:f0:53:df:eb:
         6a:f8:82:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:34:00 2025 by rpki-client