Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec35e326-54f2-3912-914b-00b0b4354213.roa
File:                     ec35e326-54f2-3912-914b-00b0b4354213.roa (raw, json)
Hash identifier:          hPlvMrzwlJFmt+CyTjGL08ElSfwccS+g5owxx8VPGlg=
Subject key identifier:   BD:E3:68:04:C3:B0:E7:AD:EA:AF:21:42:33:74:01:9F:43:30:76:E4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AAB267039B36B90D3D7435880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec35e326-54f2-3912-914b-00b0b4354213.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     201106
IP address blocks:        104.253.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:70:39:b3:6b:90:d3:d7:43:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=f18974f1-ee4c-4107-b1f2-27ac552d022c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:a2:4b:49:15:e4:f9:d7:1c:75:40:b3:c1:
                    e2:06:7a:60:07:9b:88:5e:06:ad:11:39:f4:0f:e1:
                    ee:20:d8:0e:75:98:40:67:26:7f:79:a8:17:61:c7:
                    ee:f8:25:d2:1f:31:4d:79:00:5d:1b:ca:d2:f4:8e:
                    08:7d:82:bf:1c:7a:26:09:76:5e:f3:5b:20:df:a6:
                    0f:8c:32:0d:29:97:38:69:90:4e:ba:ac:f6:c3:47:
                    7d:7b:b0:5e:44:f1:6f:ba:c6:ba:83:bd:9e:42:59:
                    8e:2f:c3:1d:27:b1:77:99:92:36:f7:47:81:a9:ba:
                    a4:99:69:ec:aa:4b:18:2e:ce:f7:3b:6f:0e:bb:76:
                    65:48:71:13:c9:9e:64:c3:0b:30:c6:de:06:d0:e3:
                    2d:27:ff:5f:7d:f5:d1:52:23:98:a7:35:ec:d7:3a:
                    d2:5d:c4:7c:f1:05:c5:30:04:ce:35:ee:45:ce:ae:
                    91:6e:94:fa:29:01:5f:9a:90:ac:65:62:fe:e2:c9:
                    0b:24:ee:60:14:07:c8:df:51:f1:12:cc:fa:10:35:
                    b4:2b:88:da:86:fc:26:5f:5c:1a:0d:dd:af:c7:ec:
                    82:9f:a0:3a:a8:1d:19:4a:78:08:18:bd:89:e0:e3:
                    8a:6c:e1:cd:40:f1:5b:47:e7:13:7a:28:51:b1:eb:
                    db:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E3:68:04:C3:B0:E7:AD:EA:AF:21:42:33:74:01:9F:43:30:76:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ec35e326-54f2-3912-914b-00b0b4354213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:30:45:43:94:c4:19:54:d3:34:67:9f:8e:e7:73:39:31:43:
         93:74:84:bb:5d:1f:d3:b5:cf:11:d5:b5:2d:59:e6:66:1a:7b:
         71:b1:81:83:bf:39:93:fc:94:5d:47:c1:04:15:db:eb:b3:60:
         a4:0a:a1:c8:b7:dc:0d:37:ec:51:94:c9:56:dd:06:33:e8:5d:
         3c:7f:52:21:60:57:6d:52:42:c6:82:2f:cf:ce:1b:98:f4:e9:
         aa:ef:1c:ae:e5:70:df:8f:e1:3d:35:48:11:12:f5:23:65:89:
         c7:04:3e:1a:0f:4f:1f:fa:8f:3c:3d:f5:bd:2b:93:d2:c0:84:
         ab:f4:be:6b:f8:d8:a5:f0:3d:81:e1:d0:fc:6d:d6:28:8f:01:
         56:6d:14:3c:d6:c3:35:4a:6d:82:89:d5:e5:80:51:e8:d2:c2:
         22:92:98:32:fa:1b:33:44:27:68:81:87:06:91:fb:c0:50:87:
         15:23:60:80:f9:b8:e3:85:cd:cd:88:5c:20:23:71:aa:f5:a1:
         ad:02:80:8b:28:40:06:7c:99:73:8b:53:31:f9:b9:a8:01:01:
         22:6a:ef:60:8d:57:1f:27:62:d5:71:21:41:62:fd:f9:9f:84:
         99:07:0e:c9:1a:13:b1:b9:f0:b4:f9:b4:78:c6:1e:0e:ce:13:
         f0:a8:c6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:58:28 2025 by rpki-client