Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e461d961-6d25-3ab5-931f-2ca2f8ea0f7d.roa
File:                     e461d961-6d25-3ab5-931f-2ca2f8ea0f7d.roa (raw, json)
Hash identifier:          NhOhfrJY4tnZ/Zou0FZoTS2C8q6H8hNfJH+A1ubFSGo=
Subject key identifier:   E2:86:26:11:F5:DC:6C:5A:BF:D4:67:97:93:63:16:9E:BB:6B:9B:37
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F432858496E4984A1564CC0E77FC8C780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e461d961-6d25-3ab5-931f-2ca2f8ea0f7d.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     214238
IP address blocks:        104.164.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:84:a1:56:4c:c0:e7:7f:c8:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=e00bdd73-4216-46f8-8052-f937e65511b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:7a:5a:46:0a:54:54:ea:a1:ed:67:1a:75:
                    3d:25:5c:be:37:53:26:2c:4d:92:5a:4d:4d:56:56:
                    a7:5e:a7:f2:a7:eb:3f:9f:78:9b:5a:cd:31:0d:dd:
                    6a:9e:90:a8:1f:c1:33:ab:85:c4:f4:15:35:00:77:
                    1b:f9:84:f3:78:69:97:84:5f:b5:04:45:4a:1f:b3:
                    01:08:4a:0a:3e:4a:9f:0f:28:d3:2f:66:8d:ed:38:
                    5c:42:98:ed:c1:15:74:26:a2:af:a8:1f:c8:57:fc:
                    3e:a6:8b:b9:d5:5b:92:20:96:f9:36:3a:46:6e:c1:
                    05:6d:ef:35:fe:4a:0b:07:5c:62:90:06:20:9c:e6:
                    40:30:84:ad:65:17:32:43:a2:30:80:ef:7f:4a:91:
                    9f:34:63:ea:b4:3f:be:11:22:04:7f:48:81:af:07:
                    ff:4c:39:9d:5b:a6:90:4b:cb:06:fe:a5:8d:41:f0:
                    7f:9e:2a:70:9e:06:f5:55:90:d2:83:50:d7:fb:11:
                    a3:dc:d8:e5:5b:78:23:b6:dd:b9:7a:a9:8e:e0:d5:
                    5d:57:06:f5:8b:db:31:af:7f:ba:1d:4f:f0:5e:45:
                    bb:31:8c:f7:18:50:0d:47:e5:4d:3e:63:dc:4d:a4:
                    9b:69:95:af:9e:6a:41:4b:2b:55:9b:12:20:28:e5:
                    a0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:86:26:11:F5:DC:6C:5A:BF:D4:67:97:93:63:16:9E:BB:6B:9B:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e461d961-6d25-3ab5-931f-2ca2f8ea0f7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:66:eb:f6:06:ea:3e:18:e6:cd:f8:c3:89:bc:c2:37:6b:7e:
         3a:58:68:13:a3:d4:ac:8c:c2:aa:16:b7:09:f7:a9:80:26:7b:
         ba:97:9d:5b:5c:76:1f:9c:eb:ea:72:6c:5c:97:67:cc:22:08:
         99:7b:65:97:7f:ce:ee:66:43:28:db:2d:92:14:5a:ea:e2:6d:
         c8:71:20:c0:3d:c7:2b:a5:4a:34:9a:2c:b2:4f:cc:bc:43:e2:
         30:55:16:05:7f:bc:5a:c9:1b:33:eb:4a:24:14:fc:72:a0:23:
         98:1d:50:f7:f2:d7:1b:d8:16:08:aa:c8:1e:2a:27:67:05:04:
         63:c7:d1:9b:e0:07:cd:4e:4e:bd:20:47:55:82:a5:7b:57:58:
         cb:f5:b8:96:d2:4b:24:15:a7:49:37:82:25:23:7d:e7:dc:c5:
         14:8b:9a:eb:de:5c:e9:e0:6b:32:b3:99:3c:f1:9e:c1:22:a1:
         af:5a:a1:4c:bd:84:9c:ea:86:b4:6e:2a:99:b1:ec:10:92:7e:
         ec:a9:e5:a5:70:64:07:4e:ac:4d:4a:4a:fe:8e:44:50:8f:be:
         24:35:f3:e3:a5:b7:fc:2d:b0:67:3e:fa:a2:bc:36:f0:11:aa:
         88:4f:76:61:1b:6c:96:88:9e:da:b8:4f:b9:e6:bd:2d:c9:5b:
         ac:96:b6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:25:14 2025 by rpki-client