Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2586d05d-8f4e-3c41-bd12-693bc8bfa762.roa
File:                     2586d05d-8f4e-3c41-bd12-693bc8bfa762.roa (raw, json)
Hash identifier:          CJr5wNkIV6OuIFr/nqX2WGSNWJS/zE1bIUwgoqSoPGo=
Subject key identifier:   E4:92:C0:67:65:A0:62:A5:5A:65:E4:40:A7:59:4C:A2:17:3A:7A:98
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F0B560D5F012643D4F220C00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2586d05d-8f4e-3c41-bd12-693bc8bfa762.roa
Signing time:             Thu 22 May 2025 18:13:17 +0000
ROA not before:           Thu 22 May 2025 18:13:17 +0000
ROA not after:            Wed 20 Aug 2025 18:13:17 +0000
asID:                     25893
IP address blocks:        104.252.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:b5:60:d5:f0:12:64:3d:4f:22:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 22 18:13:17 2025 GMT
            Not After : Aug 20 18:13:17 2025 GMT
        Subject: CN=6e7bf475-e94e-4972-8ec2-c8efb95cf77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b5:2b:53:04:43:fb:55:68:c3:ee:7d:a4:c7:
                    c6:5b:8e:33:3c:19:80:90:d4:a0:fb:36:04:27:b2:
                    1d:b2:8e:24:5d:9e:5c:14:3f:ff:8b:eb:53:26:98:
                    4a:aa:28:9e:12:e8:eb:91:03:20:1a:4a:13:05:8b:
                    ce:6d:f6:86:77:d4:84:a9:bd:08:c0:68:39:5f:a0:
                    80:1f:b9:12:1f:72:e1:1b:58:33:3a:90:f8:8a:32:
                    26:81:b6:81:72:b9:c2:94:56:8a:b4:da:d1:fc:eb:
                    85:e2:de:c7:83:df:16:dc:df:e9:30:fe:0f:3a:19:
                    cb:96:b8:be:ae:c0:53:1c:72:e0:37:8f:a3:44:63:
                    f4:3e:eb:ed:10:a7:a2:35:05:fb:11:77:c6:5a:db:
                    db:12:60:97:02:83:ab:3d:cf:5c:d4:69:86:6f:90:
                    37:d6:be:ec:9e:6c:8e:f9:2d:bc:ea:cd:58:3e:8f:
                    47:6a:4f:9a:08:e0:46:68:91:97:28:bc:21:25:4c:
                    f2:b0:9e:2b:37:3d:8b:70:47:f4:40:e6:0e:d8:1e:
                    96:37:c4:7a:a7:03:d6:9a:42:93:a1:48:c3:dc:54:
                    cd:99:db:4a:90:35:3d:b1:9e:be:7c:0d:d1:56:18:
                    67:62:64:b7:ac:0f:c2:3e:5b:b0:43:9d:2c:6e:3e:
                    8a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:92:C0:67:65:A0:62:A5:5A:65:E4:40:A7:59:4C:A2:17:3A:7A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2586d05d-8f4e-3c41-bd12-693bc8bfa762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:b2:a9:b0:80:f6:4f:8a:6c:41:5b:f8:76:5d:e1:2a:15:5f:
         c4:ba:01:8d:ad:21:49:1e:9c:1c:0f:92:d4:d4:db:41:e6:1f:
         01:4b:7c:98:14:8e:6d:00:86:97:24:b4:cf:bd:ba:f0:5e:8c:
         34:dd:19:b6:32:64:1a:fc:2d:83:6b:38:f4:bb:31:60:b4:1c:
         d8:f7:2f:5c:e6:cb:9e:56:ac:ab:10:fb:43:1b:e7:23:5e:9d:
         a3:1b:08:44:2e:93:7d:e6:3c:de:77:ea:3a:ca:bb:3a:0d:af:
         4c:7a:15:2e:9b:65:5d:8d:04:0e:1b:00:2b:ce:69:32:da:21:
         d3:8f:9c:18:c2:e3:e0:4a:4c:a6:e6:09:97:63:f6:94:b6:fb:
         73:01:52:30:a0:66:ea:34:d5:c1:06:21:b6:c7:d2:b6:07:86:
         13:41:18:82:ef:41:67:9a:95:1f:3a:d7:56:5f:6e:f4:46:1d:
         36:b3:30:16:8f:99:a6:0c:3e:31:ae:10:10:52:3b:c7:0a:c7:
         41:56:e7:8b:5a:8d:36:74:5f:46:fa:e0:79:c1:c4:8d:50:d6:
         d0:11:b1:85:80:8c:f1:e7:fc:2b:e5:a2:2a:8c:d6:41:79:58:
         29:b1:95:cd:bf:ab:75:3b:33:bb:c2:9a:9c:84:b5:8b:03:6b:
         7d:4a:93:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:10:43 2025 by rpki-client