Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/323a0546-d4d5-3569-8228-3b89e02edad8.roa
File:                     323a0546-d4d5-3569-8228-3b89e02edad8.roa (raw, json)
Hash identifier:          UfMUVcjcBbCk+OzDizGjSm5qu7UreNhk0gymuCDkXRI=
Subject key identifier:   83:77:3A:5A:4A:1B:72:D5:6E:62:2C:96:3E:00:FE:D7:B4:1D:4F:F3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0F15624ABBBFE276B311F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/323a0546-d4d5-3569-8228-3b89e02edad8.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     212238
IP address blocks:        104.252.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:56:24:ab:bb:fe:27:6b:31:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=be497eb7-6c84-4bfe-96d3-64b37be85810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:28:7c:05:55:a0:cf:27:95:a3:00:dd:84:51:
                    14:f5:fb:68:df:f8:5e:f0:97:4b:c4:fe:b7:92:67:
                    6e:8a:35:31:7b:7b:29:f1:f4:b1:11:9e:96:5d:a1:
                    0b:6f:39:92:dc:0a:45:83:56:f8:be:40:8e:1d:b6:
                    01:ad:3a:4f:87:35:6a:2f:50:5b:d4:be:63:1c:ab:
                    be:3f:9c:fc:6d:d5:fc:56:7a:48:68:88:1c:04:9d:
                    a2:3e:54:7e:2e:3c:85:ed:39:d4:67:e2:62:ed:2b:
                    41:a0:a5:4d:83:7a:89:92:a5:9b:ad:c5:9a:57:91:
                    2c:5e:4c:62:a6:61:aa:4d:c6:46:cd:65:17:0f:bf:
                    36:a2:b9:e9:f8:3a:99:55:fb:21:95:41:93:92:0d:
                    fe:af:26:76:fa:f3:d8:da:57:16:7b:94:d2:89:d6:
                    14:14:49:94:d7:c5:f4:35:3b:9e:c7:dc:0a:d1:f6:
                    ad:a2:5f:d4:45:ff:5d:86:64:c5:4b:18:90:3f:13:
                    b9:a2:49:dd:f2:61:cf:06:c5:97:38:22:42:40:07:
                    b3:8a:68:35:fc:0c:b3:f2:97:b1:a8:05:aa:62:60:
                    9e:7a:3e:7c:15:ed:61:85:81:68:c4:4d:bd:2b:3e:
                    c4:2e:fe:54:fc:a6:dc:82:1d:99:61:4d:90:01:fd:
                    bc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:77:3A:5A:4A:1B:72:D5:6E:62:2C:96:3E:00:FE:D7:B4:1D:4F:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/323a0546-d4d5-3569-8228-3b89e02edad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:b8:81:53:17:20:bc:c9:73:bb:b6:b5:07:e5:ff:c4:aa:04:
         77:92:fe:14:70:05:6d:9f:12:1a:0e:78:5a:14:b6:41:77:30:
         ed:30:16:7b:8d:a5:20:1b:98:44:87:f7:a2:8c:3f:94:5e:b4:
         3e:e5:4a:82:24:f3:82:20:ba:45:68:d3:84:27:9f:7e:69:02:
         37:2c:cc:c7:40:6d:52:36:9a:84:56:dc:b8:b0:f1:10:a2:d6:
         e7:dc:9e:3a:ff:1f:0b:85:9e:7a:5c:49:3b:07:25:f2:04:b0:
         4f:1d:06:99:b7:8f:a7:fe:6f:80:9f:d3:2a:72:85:dc:b7:27:
         55:fd:64:71:9e:82:49:44:85:bd:4c:67:ef:15:07:85:fb:be:
         46:b3:c6:42:fc:d8:4b:c4:89:71:0f:c6:d7:87:6a:46:38:e2:
         ad:a6:fe:27:e2:f9:69:82:14:29:3a:14:b7:d9:26:38:59:1b:
         e5:44:e5:37:70:c9:7f:3a:9e:e2:d9:53:0a:06:6e:e4:0a:91:
         b5:47:18:4f:2a:69:8a:7d:ba:7a:a8:aa:c6:cd:0f:24:66:97:
         5d:b5:52:e3:fd:23:ef:2c:75:63:6b:10:92:2b:a3:9b:79:f7:
         e6:cd:28:37:91:86:6c:a7:68:9c:e4:57:38:fb:2c:a6:63:9f:
         a9:2f:d6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:33 2025 by rpki-client