Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2b13589e-6523-317d-b042-f4d881397abe.roa
File:                     2b13589e-6523-317d-b042-f4d881397abe.roa (raw, json)
Hash identifier:          8p/qsAr//Nv7UONiedieaBScB8HfcVvEUbdtK0QCpG8=
Subject key identifier:   6B:DD:01:8E:F6:D3:5F:C2:6E:C2:CA:73:E3:DC:F1:75:79:FC:DF:31
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849C056C58BED9AE08FC9025540
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2b13589e-6523-317d-b042-f4d881397abe.roa
Signing time:             Mon 05 May 2025 10:23:52 +0000
ROA not before:           Mon 05 May 2025 10:23:52 +0000
ROA not after:            Sun 03 Aug 2025 10:23:52 +0000
asID:                     396073
IP address blocks:        104.164.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:56:c5:8b:ed:9a:e0:8f:c9:02:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  5 10:23:52 2025 GMT
            Not After : Aug  3 10:23:52 2025 GMT
        Subject: CN=28002f5a-d83d-486d-8491-f20c4b2d7240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c0:30:93:e8:4f:b1:02:18:3a:d2:85:98:bf:
                    6c:f7:81:5b:f8:32:4a:f9:3a:e9:36:ff:05:f6:fc:
                    68:5b:53:0c:6b:dc:93:d7:ac:44:20:58:13:bb:58:
                    1b:91:4e:57:56:76:4c:b9:2e:62:73:59:e9:b7:cf:
                    5b:5b:ef:31:84:b0:45:26:df:8f:84:bc:3b:c4:f6:
                    c1:1e:14:ba:93:27:7a:fa:42:3b:d4:bd:9d:cf:7b:
                    e9:59:a5:64:6d:99:53:ae:b3:69:07:30:c2:3e:b1:
                    3a:bf:92:af:a7:d6:f6:9a:bb:3b:52:32:c6:d0:9a:
                    a7:b5:9e:71:98:a3:57:c8:45:ed:e8:d3:1a:2b:2c:
                    aa:d5:1e:9a:f2:2c:24:6f:27:f1:3a:9c:07:58:0e:
                    a3:e0:bd:67:1b:7e:2a:4f:68:f9:65:de:ef:39:09:
                    ac:ed:9c:25:64:37:51:0a:ce:4d:b1:b0:49:ca:f0:
                    0e:30:87:f8:4e:27:a0:ee:b6:88:f2:4f:64:c8:e0:
                    07:eb:cc:15:cc:12:6f:9c:b7:4d:50:19:9f:3b:dd:
                    aa:37:f9:db:01:d9:96:9c:ea:b6:75:9d:b6:0d:da:
                    5a:af:b7:37:29:4b:3f:57:76:c9:d9:f9:2d:da:c1:
                    c8:40:3d:5e:4f:d7:a2:8e:82:84:87:9c:32:46:e7:
                    a5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DD:01:8E:F6:D3:5F:C2:6E:C2:CA:73:E3:DC:F1:75:79:FC:DF:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2b13589e-6523-317d-b042-f4d881397abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:67:43:2f:2d:d3:17:05:7e:68:83:5d:d8:7e:64:90:53:52:
         cd:62:e3:96:54:1f:a1:1f:e2:fd:46:b3:57:2a:f1:4e:f5:6a:
         77:87:54:52:38:b4:ff:db:ef:fb:56:79:c8:d2:9f:37:9f:91:
         d9:a5:d9:fa:55:bb:24:c3:06:e5:10:03:7c:8a:7a:64:2c:01:
         9f:58:c5:1d:9e:f9:8b:2d:b2:40:82:ad:5a:8f:09:0e:9d:24:
         46:a9:7e:36:ec:e4:2a:15:1a:4a:44:dc:e6:59:6e:45:07:34:
         0d:0c:35:46:6d:3f:5d:96:ff:fd:51:a3:25:3c:51:92:56:94:
         41:e2:4a:b8:f7:58:2c:a1:a7:f6:74:7f:3e:bd:d4:34:f4:4c:
         d3:a5:87:b8:91:31:bb:dc:7c:ab:f5:ef:04:53:e7:1c:eb:d9:
         c2:2b:9f:c6:6c:04:a2:85:91:76:94:28:21:48:da:25:e2:32:
         76:6e:a7:d2:34:6f:15:92:4d:2d:ad:b6:02:99:ec:4b:31:81:
         4e:52:47:6e:f1:c7:0f:26:f5:f6:53:82:cb:82:2b:7f:76:7d:
         0b:92:01:6e:c5:4c:2e:26:de:13:c9:d4:3e:9c:ca:d6:e0:92:
         e0:6f:52:fd:ce:d3:61:fb:23:0b:2a:f8:fb:25:1c:17:d8:85:
         ad:a8:3b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:42:47 2025 by rpki-client