Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/16593bdc-1fb1-3cf8-adac-d5fbf0295286.roa
File:                     16593bdc-1fb1-3cf8-adac-d5fbf0295286.roa (raw, json)
Hash identifier:          EElaZNZ34fNa2pjHpt5xe7fyn1zX7jfVWHlHcjxP91s=
Subject key identifier:   36:53:60:06:8D:6E:6F:33:ED:CD:10:86:78:D6:0F:BF:E6:B3:FE:9B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0D7D9CCCB4FE153C520AA00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/16593bdc-1fb1-3cf8-adac-d5fbf0295286.roa
Signing time:             Fri 22 Aug 2025 12:09:41 +0000
ROA not before:           Fri 22 Aug 2025 12:09:41 +0000
ROA not after:            Thu 20 Nov 2025 13:09:41 +0000
asID:                     5400
IP address blocks:        104.253.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:d7:d9:cc:cb:4f:e1:53:c5:20:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 12:09:41 2025 GMT
            Not After : Nov 20 13:09:41 2025 GMT
        Subject: CN=912f344a-b1ab-4079-96a6-8be548c85045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:60:1b:d0:92:86:c8:57:00:97:b4:d1:26:05:
                    7f:56:25:b9:07:be:10:aa:a7:11:91:42:d6:f8:e7:
                    89:f9:00:51:dd:9f:29:2f:0d:bb:a6:98:d9:2d:f3:
                    2b:eb:81:be:d7:59:c1:57:a2:50:b4:10:3b:1c:db:
                    d6:56:83:cb:ca:8a:8a:00:51:22:54:f0:86:7f:b0:
                    f2:7a:db:dc:a4:49:23:0d:b3:05:03:3b:05:b6:72:
                    2b:51:8c:d6:b2:9b:3c:7e:0e:4f:8a:d8:a4:ab:fd:
                    15:e1:43:78:69:f0:7d:62:c1:05:be:ce:f6:4a:0e:
                    e7:d4:97:08:49:5d:26:e7:cb:6f:0e:38:16:d4:4f:
                    7a:75:ca:3b:54:c3:b7:68:5e:78:05:e0:83:f8:9e:
                    c7:0b:a3:0a:e1:2e:be:e9:ec:a8:8e:03:f4:d4:15:
                    de:ba:20:0d:a4:e9:07:1a:45:16:e4:07:ad:72:18:
                    c5:a0:48:39:a4:96:ac:ff:12:8d:67:c9:56:94:cf:
                    eb:44:7a:4f:0b:57:4b:95:fc:97:b8:10:11:a0:07:
                    f9:a3:ad:52:94:bd:ac:29:f9:01:06:4c:a1:83:6b:
                    e6:55:e4:ee:f2:5f:02:56:b7:c2:bc:91:2f:3e:88:
                    ba:5c:b9:6a:57:1d:e8:4d:c5:03:5e:85:fe:c8:ea:
                    55:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:53:60:06:8D:6E:6F:33:ED:CD:10:86:78:D6:0F:BF:E6:B3:FE:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/16593bdc-1fb1-3cf8-adac-d5fbf0295286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:cb:8d:30:70:0c:e5:2d:03:f6:3b:be:59:be:34:78:14:34:
         87:69:e1:58:b3:34:62:b4:32:26:7f:83:4f:c2:f7:bc:ad:13:
         50:48:c7:bf:96:9d:0f:95:cd:93:78:66:0e:c9:81:c0:41:9f:
         32:ac:f2:5a:21:af:6c:8a:95:22:33:74:1a:b8:20:7a:c8:48:
         8a:0d:66:b0:12:81:41:e7:e6:1b:6b:97:37:37:ac:d0:f0:54:
         88:b7:ba:b4:09:7b:0c:e0:8d:9c:42:71:74:58:58:ca:d3:e0:
         16:61:e0:3e:50:db:66:9c:74:59:1f:07:b8:05:94:ec:a0:27:
         16:bd:e5:27:60:7e:2c:b5:48:8d:5d:fc:06:2d:7c:e6:08:98:
         98:4b:eb:3b:cf:f5:da:70:7d:15:e2:ef:57:d4:04:57:cf:b9:
         d7:eb:3f:72:3b:d8:85:a0:c1:09:92:7a:f9:e1:3c:d8:b1:77:
         0e:3f:0f:23:68:21:dd:a7:f8:64:8d:5a:24:9d:9d:a8:98:ce:
         7e:5e:00:47:72:9f:6f:e2:84:bc:59:01:b4:d5:fe:ba:3d:d5:
         66:d1:54:56:f8:f4:9f:2f:41:16:ce:74:98:83:b7:5f:e8:eb:
         da:9a:95:77:9f:01:64:69:73:9f:16:3c:c8:52:54:f3:0b:32:
         e6:f2:84:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:18:17 2025 by rpki-client