Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/fba144c0-7b20-3ea6-829a-6b7333457b43.roa
File:                     fba144c0-7b20-3ea6-829a-6b7333457b43.roa (raw, json)
Hash identifier:          WYEXQ2Br2H/Dq8syIClYXjglIMeEf86dm7rPpFkyPNo=
Subject key identifier:   25:36:15:B0:34:B8:00:6F:02:C7:09:9B:CF:DB:14:1D:11:E5:F4:2B
Certificate issuer:       /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Certificate serial:       010D0C9F4328584AE1968569D71841B2F4E46D80
Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/fba144c0-7b20-3ea6-829a-6b7333457b43.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     19318
IP address blocks:        104.218.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:85:69:d7:18:41:b2:f4:e4:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=c0b9c2dd-9d09-46e4-86ec-7bad82ab50c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3a:77:57:ed:58:42:80:10:02:33:f3:b9:24:
                    d5:ac:54:cc:4f:d8:d4:6b:7d:69:2b:fc:28:98:a5:
                    53:80:61:f6:4f:83:90:39:9f:7a:cf:a0:4a:86:67:
                    25:a3:de:42:b4:34:64:b8:99:77:f7:00:60:07:50:
                    09:71:a2:bb:60:f2:67:7e:4d:28:9e:1a:24:16:4b:
                    e6:22:3f:46:98:a1:ff:d9:b6:d0:20:6e:68:8a:7e:
                    85:87:87:d6:1f:e7:9c:bc:1f:e4:a6:f9:b0:7a:14:
                    58:d6:2d:5a:15:bb:5c:48:b1:2f:df:4f:ef:82:28:
                    f0:e0:ab:93:c5:d6:ae:8f:eb:df:8e:40:7e:27:9d:
                    99:89:7e:52:7b:04:3e:f0:bd:09:69:29:6b:bd:d5:
                    e0:eb:82:e9:d0:59:92:fe:bd:d4:63:1c:4b:18:71:
                    81:82:6d:cf:65:44:4c:a9:9c:42:7e:ee:41:0e:8f:
                    5c:fb:65:fb:9f:f3:64:3b:ea:85:d0:63:07:f8:49:
                    2c:05:26:15:1d:73:24:ac:91:2e:85:5d:ca:66:f1:
                    e1:3b:53:07:d5:67:45:23:b1:d3:47:2d:57:d7:3b:
                    ea:4e:ed:aa:62:72:79:5d:0b:d6:b1:c4:54:8c:29:
                    41:0a:c4:94:5c:62:75:e7:bc:92:68:5e:8c:20:ab:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:36:15:B0:34:B8:00:6F:02:C7:09:9B:CF:DB:14:1D:11:E5:F4:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/fba144c0-7b20-3ea6-829a-6b7333457b43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl

            X509v3 Authority Key Identifier:
                keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:be:c0:d8:f1:e0:d0:91:fa:00:ba:4e:42:9d:f1:6b:f5:5a:
         1b:94:11:af:1d:19:83:54:6e:61:98:d0:6c:75:01:3b:4b:49:
         40:93:41:a3:b3:02:99:e5:44:7b:8d:30:2c:04:ed:6c:a2:82:
         ad:73:59:50:34:01:97:b3:93:de:af:de:b1:e4:b5:c6:0a:33:
         7f:37:a9:2b:64:cb:c7:9d:17:dc:c5:55:3b:5f:6f:b5:d0:c8:
         5b:6c:3b:44:74:d3:81:18:e3:94:cc:1c:47:8e:5d:9e:dd:06:
         26:a8:6a:60:40:77:a9:4e:45:93:be:64:31:2b:15:1e:2b:71:
         c0:b4:97:da:ee:e9:b4:f3:3d:39:f9:ec:08:9a:90:2b:74:c1:
         09:47:85:24:79:9c:aa:23:a9:cc:0d:ff:ac:b8:b4:b4:e0:65:
         72:6a:bb:9f:76:2d:c6:9f:5a:7a:5a:c8:aa:14:57:45:1a:b3:
         36:fd:32:d0:72:6f:6e:00:ba:c5:8c:4a:1b:c3:9d:32:55:e6:
         c4:b5:36:f7:76:33:b2:f3:f4:b3:9a:19:7e:5d:93:38:b5:af:
         60:f2:ce:66:4a:c3:d3:1a:eb:3d:4f:fd:64:e7:53:60:5c:ae:
         d5:b3:40:43:f9:4e:6c:bc:69:f9:01:8e:38:3e:c6:a9:95:8d:
         47:08:1f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:08:06 2025 by rpki-client