Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/10bb4ace-0f53-39a7-a141-bbf7e4926c0f.roa
File:                     10bb4ace-0f53-39a7-a141-bbf7e4926c0f.roa (raw, json)
Hash identifier:          s/aYnjtiEJCddQ+4Hnt1yfv4K0+A1D1gOAWGsh7pLdA=
Subject key identifier:   DC:06:E8:63:7D:87:87:38:3B:5B:73:AD:61:0B:A3:88:C3:BC:D6:A2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F2824E79BE344F69EEEB48C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/10bb4ace-0f53-39a7-a141-bbf7e4926c0f.roa
Signing time:             Fri 23 May 2025 09:42:00 +0000
ROA not before:           Fri 23 May 2025 09:42:00 +0000
ROA not after:            Thu 21 Aug 2025 09:42:00 +0000
asID:                     214238
IP address blocks:        104.165.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f2:82:4e:79:be:34:4f:69:ee:eb:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 23 09:42:00 2025 GMT
            Not After : Aug 21 09:42:00 2025 GMT
        Subject: CN=a5edb8d2-9046-42ca-bcb1-5ff87f629970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c8:52:e4:6e:84:22:7c:26:8d:fb:7b:b8:ac:
                    e1:92:cb:fd:4b:60:ef:90:3d:d0:cb:b0:94:7c:73:
                    39:3e:a0:02:7b:62:2c:7d:2e:23:39:01:31:10:e5:
                    8a:9b:c1:71:58:17:43:16:54:54:c8:f0:e1:67:88:
                    a2:0f:bc:57:f8:a4:40:fb:08:87:63:03:c9:1f:1f:
                    f2:bf:53:9c:27:65:b6:64:ea:b5:b4:ba:51:c2:79:
                    c4:6a:61:58:9c:07:01:b2:25:e5:27:f0:d9:8f:1b:
                    19:75:12:21:01:e4:2f:29:2a:3b:b3:8d:36:b9:a1:
                    63:ea:bc:8e:6d:4a:d8:ad:22:6c:4a:81:bb:0c:4f:
                    88:34:1e:35:ae:7f:d6:ed:ce:cd:ed:98:87:70:59:
                    3a:d8:74:ad:ba:72:41:e1:b9:bc:21:28:37:8e:f3:
                    e3:b4:c9:2f:0b:e5:7b:75:e0:5b:41:aa:2b:7e:c3:
                    d4:a8:c8:6a:88:a2:46:1b:67:43:d1:2d:06:27:60:
                    98:75:e3:70:35:a4:a1:f3:75:8a:25:75:c1:a0:64:
                    d7:47:59:d4:45:ab:cf:af:b0:b9:49:23:24:da:60:
                    0c:1b:2e:84:6f:30:ac:f5:42:e0:35:db:f1:bb:d2:
                    75:0e:3f:fc:3d:57:f7:7d:34:5f:0f:f3:86:e7:6f:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:06:E8:63:7D:87:87:38:3B:5B:73:AD:61:0B:A3:88:C3:BC:D6:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/10bb4ace-0f53-39a7-a141-bbf7e4926c0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:ae:64:5f:b7:5a:76:e5:a8:fb:23:bd:c6:23:94:07:63:6f:
         a0:05:da:b7:dd:08:ef:84:e1:15:6e:0a:8b:9a:2b:e3:1e:e9:
         1c:20:37:4a:e6:11:eb:61:23:23:2b:8a:2a:2a:19:cc:40:6b:
         4b:32:63:5a:19:ca:ea:ed:dc:b6:09:f6:61:aa:74:27:34:b0:
         fe:6d:67:ad:d3:8c:46:17:e4:1b:6c:32:4c:57:8b:46:4d:5c:
         d7:6a:77:07:1c:ee:63:82:d0:bb:1f:28:0a:d2:1d:3e:05:d6:
         49:19:ed:98:ea:05:fb:60:99:15:fa:15:65:ff:64:d5:32:73:
         b8:0b:d0:35:81:a0:e5:08:f2:c4:be:71:3b:f0:e2:af:41:92:
         42:48:42:36:29:67:ef:4c:82:bb:e7:64:b6:91:3a:4e:9c:c7:
         87:51:e0:31:cb:08:56:ec:c1:78:97:48:f7:3e:c1:20:a5:d6:
         6a:0b:48:ea:b9:c9:0d:93:77:56:9e:9b:62:f4:4f:5b:d9:3d:
         5a:d8:c4:75:e2:d8:a2:2b:94:46:8e:54:9b:10:b1:58:d8:09:
         df:af:54:6e:9a:2f:c9:30:8b:9e:f1:71:f9:47:fe:c7:4e:0f:
         25:70:22:aa:45:c4:b1:c3:ee:97:75:7c:d2:8d:44:02:0f:83:
         43:d1:e0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:47:11 2025 by rpki-client