Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3acafbef-fd04-37fd-98f8-722cd3faeecf.roa
File:                     3acafbef-fd04-37fd-98f8-722cd3faeecf.roa (raw, json)
Hash identifier:          0gwmEDPgfVKcjgvQSpyZBU6OsksaYYTqSmtTvs93Qz0=
Subject key identifier:   3B:F4:57:5C:AF:91:17:FC:12:D5:77:68:41:C5:A4:89:B7:F7:93:D2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AD23C3C34EAD2535C5AB34E00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3acafbef-fd04-37fd-98f8-722cd3faeecf.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     44477
IP address blocks:        104.164.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:3c:34:ea:d2:53:5c:5a:b3:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=3ea7e9d9-b3bb-4407-a8bd-3398a49aca26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:26:87:d7:49:f6:dd:62:65:da:8d:8b:d0:f9:
                    8c:00:f4:f2:5f:3f:57:d5:e8:b3:77:89:83:3a:47:
                    8e:c5:89:d3:ff:ca:8c:79:5d:9e:8e:05:e1:35:fb:
                    87:5f:be:41:17:0a:a4:30:43:f5:2f:a2:4d:ae:9b:
                    e1:0a:21:f3:4b:bd:59:1a:16:f3:67:42:b3:8a:9f:
                    6d:31:78:c1:e7:2b:c6:4d:a7:53:e4:38:83:e9:0f:
                    52:6a:c6:2f:59:fe:83:cc:0f:93:eb:86:3a:3b:bc:
                    0c:76:7a:59:ef:9b:b6:a0:0f:e5:b5:63:6f:12:de:
                    67:fe:ad:7a:4d:5b:ab:46:ae:cb:9a:cf:d6:f4:11:
                    15:2f:88:61:16:3e:7a:bc:7f:0f:7b:7d:ee:1c:e1:
                    0f:3c:98:60:4d:c9:3b:34:e0:e8:e8:4e:a0:61:e0:
                    7d:f6:2e:65:99:ab:1b:35:fa:fb:21:66:96:ce:07:
                    93:3e:89:3b:ed:1c:9f:0d:68:36:a9:01:df:57:31:
                    45:fb:cb:4d:67:f9:69:5a:83:6b:7b:0b:6d:a5:d8:
                    89:c3:9b:ed:4a:cc:d8:17:d4:fb:cc:c7:fa:29:2b:
                    20:bd:f3:32:1f:3a:f8:3a:9d:86:8d:e5:6d:52:85:
                    aa:b1:58:5b:98:29:37:ca:f3:19:bf:88:49:9c:81:
                    ea:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F4:57:5C:AF:91:17:FC:12:D5:77:68:41:C5:A4:89:B7:F7:93:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3acafbef-fd04-37fd-98f8-722cd3faeecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:4a:67:63:93:89:ff:3a:5f:d3:c2:bb:04:50:23:8d:05:3f:
         39:19:e3:c8:cc:c8:60:ec:c7:d7:fc:82:8f:ae:a7:34:b7:cc:
         42:df:c4:58:d8:71:b9:68:40:c5:2e:1d:1b:21:53:d5:90:bb:
         76:5f:df:6e:ad:8f:21:2e:a9:ef:ee:9a:03:a3:25:44:15:24:
         24:06:c9:71:fc:65:b1:d2:6b:c6:ad:77:9f:0e:5e:bc:4e:36:
         56:e3:a3:39:39:7f:90:a9:1d:fd:ad:29:1e:40:54:44:82:c5:
         d0:d5:c7:9d:ee:41:5f:4c:d6:c9:35:f7:85:66:91:d5:3f:19:
         92:f3:e2:89:a7:06:08:38:fe:7a:13:7f:c0:7c:36:fd:37:8d:
         79:8d:8a:86:47:76:77:bd:7b:9c:0b:dc:37:be:6e:ac:38:f0:
         f3:51:f8:b1:33:82:7a:22:f3:31:e0:1e:b3:5f:3d:67:d0:6d:
         9a:c5:81:04:dd:d7:c4:73:03:66:a5:4e:9b:a9:8e:6a:8f:6f:
         5a:eb:4c:e0:50:67:ca:b5:ab:a3:2b:49:ce:d2:20:ed:97:ec:
         ee:6c:29:c1:38:43:60:02:f7:a8:67:81:01:bf:b9:5f:03:98:
         73:92:bf:1c:52:b5:22:1e:d6:19:0e:ee:1b:a7:22:37:a3:4a:
         17:c8:b3:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:25:54 2025 by rpki-client