Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f2997ae6-5814-3064-9d41-0f1ce37b94aa.roa
File:                     f2997ae6-5814-3064-9d41-0f1ce37b94aa.roa (raw, json)
Hash identifier:          bR6WTdVhlEh1wTBCQLpUbIV/gXazQosNHYaJT/OzpOE=
Subject key identifier:   BF:6B:D2:90:70:00:9D:79:97:02:25:B7:A8:FD:16:8A:8C:53:D3:D2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A30502DC157F0257583583F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f2997ae6-5814-3064-9d41-0f1ce37b94aa.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     18779
IP address blocks:        104.253.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:2d:c1:57:f0:25:75:83:58:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=d61b986a-1547-4c00-88e3-2fd47bfec4a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:26:b3:38:86:7f:d9:68:10:79:44:27:20:
                    72:db:9a:1c:96:03:49:ee:fd:2e:a7:e1:63:49:ea:
                    d0:79:72:bf:af:ac:63:a2:75:75:c9:6d:8e:94:52:
                    2e:ad:81:cd:3f:5c:c6:95:d1:5b:41:b8:a3:db:16:
                    15:1a:41:e5:d9:e5:ea:0a:a0:fd:af:bc:ce:19:f7:
                    98:f4:14:3e:b2:51:e2:82:09:ff:c8:0e:75:cd:19:
                    b3:c9:49:d2:d7:15:47:6d:3d:16:fb:8b:a9:ae:19:
                    a3:0b:67:4b:ce:f7:b2:7e:bb:a6:09:25:52:60:be:
                    0b:e7:98:4b:c2:95:66:5c:38:17:86:2b:99:0b:02:
                    69:f3:7e:5e:e0:a9:67:84:03:49:b4:0f:b7:7b:f7:
                    10:84:5f:21:37:7c:3c:a3:b9:4b:11:7c:06:9d:36:
                    c3:e9:3e:0f:f6:02:98:56:92:e6:37:49:12:ff:c0:
                    34:bd:24:53:81:c2:16:e6:80:2c:10:1d:ca:9c:9f:
                    ef:68:86:9c:ee:29:72:5e:32:9b:b2:70:cc:ea:36:
                    6c:32:2f:a7:40:6d:06:5c:37:83:31:e4:ef:e9:61:
                    d9:11:f9:09:b9:10:68:99:56:03:4b:0e:d0:eb:af:
                    2f:e8:0a:8b:45:78:3b:b1:c3:e1:a8:aa:c5:05:dc:
                    3b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6B:D2:90:70:00:9D:79:97:02:25:B7:A8:FD:16:8A:8C:53:D3:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f2997ae6-5814-3064-9d41-0f1ce37b94aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:12:f9:d0:96:7c:ea:7a:74:78:4b:d1:4e:38:6a:fc:05:17:
         b6:f5:40:ec:0d:a3:46:45:c0:a6:ac:eb:ed:8f:04:e9:ce:cd:
         20:00:19:98:65:a4:b6:6b:c0:1c:55:e7:93:05:f7:bb:b5:35:
         64:dc:8c:0b:f5:9c:56:5e:a0:70:f3:79:8a:c2:79:96:99:ad:
         bd:f6:28:30:b9:59:01:5b:ed:b8:6f:ee:bc:ab:51:8d:6a:ef:
         10:d4:1f:ff:57:c2:d5:59:e2:57:aa:20:10:fd:78:36:5a:87:
         a3:6c:39:3a:3b:17:93:b7:05:6e:57:77:c4:c9:7b:ef:f7:cf:
         be:67:0d:d1:76:43:e6:f2:be:84:07:c3:89:3b:2a:44:0b:cf:
         95:54:30:2c:10:5c:03:db:cf:e2:c9:f7:09:35:f0:81:35:fc:
         5f:4e:8d:85:2b:ab:7e:ce:3a:9b:9c:6b:74:c0:ab:fe:54:26:
         ae:57:c0:29:47:61:b7:b7:0e:a6:83:a8:e0:19:0c:e1:b7:ac:
         d8:8a:f2:80:9b:80:5f:0c:af:e5:04:93:c7:db:45:59:4e:2f:
         0b:92:0c:9e:32:d0:6d:33:fb:ad:47:c4:2f:a8:db:81:fd:92:
         d5:ad:b6:e0:e2:1d:ad:0c:22:e5:c2:ef:81:aa:f2:16:61:f5:
         d5:17:a9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:55:25 2025 by rpki-client