Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4463b3d7-dc30-3119-8f3b-d6fa16840150.roa
File:                     4463b3d7-dc30-3119-8f3b-d6fa16840150.roa (raw, json)
Hash identifier:          nXCACBbZH/BYx78byze78BjCWSJEByWKC3fZJ21GJ0s=
Subject key identifier:   7D:15:95:9C:9D:DF:AD:7E:51:B9:FC:B4:12:79:28:3C:9D:A7:46:0F
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AEE2698C9B75F66DE05D4DE40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4463b3d7-dc30-3119-8f3b-d6fa16840150.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     262287
IP address blocks:        104.252.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:98:c9:b7:5f:66:de:05:d4:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=8617638a-c21a-4954-86bc-d2933530d0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e3:6a:a8:11:00:46:b4:a7:69:ee:69:d3:d1:
                    21:4d:15:cd:12:e0:67:59:d8:f9:6b:1e:8d:47:47:
                    96:71:30:72:61:48:c0:43:25:f0:a6:5f:3d:1f:61:
                    e1:cf:7f:d6:b0:7d:f5:75:ca:da:56:fe:d6:aa:d8:
                    2b:be:7d:9c:19:c4:0e:92:f8:7e:92:36:05:95:d0:
                    e1:3e:f5:6e:e3:4e:7d:2e:2d:63:1f:28:84:4b:df:
                    13:69:15:91:d6:22:51:66:79:b3:d3:d1:4c:7f:36:
                    09:ca:a3:15:fe:ed:36:5c:d4:b7:d7:eb:7d:7c:49:
                    6e:8b:59:4f:87:b8:fb:19:42:7d:67:c4:2c:f6:68:
                    63:67:f3:1f:12:36:ef:83:56:d0:c8:15:cb:d0:2c:
                    0e:ed:53:56:6e:ab:7e:92:4d:f3:79:4a:f1:d2:8a:
                    cf:26:71:b6:48:45:f3:36:9b:94:5b:55:8e:de:a6:
                    cd:b3:24:fc:e4:2a:07:f4:1e:45:cc:82:1e:ac:1f:
                    98:da:02:0b:96:85:b8:3f:ad:d4:0a:93:7d:37:0f:
                    b5:32:18:d0:91:c1:c0:f2:8e:48:77:1a:1d:14:73:
                    9e:b8:fc:38:7b:7b:d1:3d:ae:10:62:eb:88:42:81:
                    30:18:76:c2:07:00:d6:42:75:1a:aa:f1:68:f3:ae:
                    32:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:15:95:9C:9D:DF:AD:7E:51:B9:FC:B4:12:79:28:3C:9D:A7:46:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4463b3d7-dc30-3119-8f3b-d6fa16840150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:58:9e:c5:6d:08:3f:27:ce:3a:b9:4f:33:7d:ec:b3:69:2f:
         c2:82:5c:5c:14:a2:80:50:31:ed:bd:2a:d3:83:04:65:7d:4a:
         6a:07:bb:c6:0c:35:7a:c7:7a:23:6e:28:bd:5c:28:1b:2a:9b:
         af:f2:80:e5:f1:62:59:44:30:47:7d:54:b7:d1:e2:85:f1:d5:
         f5:39:4a:62:d4:ff:94:1b:5b:74:6a:cf:82:6a:6c:7e:16:bf:
         7b:52:21:47:b0:02:43:25:f7:80:2e:12:6e:b9:e7:3b:12:f0:
         ef:16:e2:d0:ac:1d:37:5d:ba:54:bd:cd:68:5c:74:61:77:e8:
         56:dd:9f:ac:ed:6e:14:c9:0c:80:11:e2:2e:70:48:e0:13:0d:
         05:19:3d:af:39:52:6d:cb:f3:3f:d2:95:7b:e9:7e:ad:08:2a:
         19:42:21:e2:7b:be:99:24:5f:c5:06:d9:8b:21:d6:8f:fe:80:
         3f:12:d4:86:5d:4c:ec:14:fc:2e:e0:74:81:e9:e8:1a:85:d4:
         5d:15:30:4e:09:ae:e1:75:17:45:b3:22:b9:69:93:c1:33:0b:
         9e:ab:0d:dc:5e:bb:92:9a:f8:c9:ab:33:c3:ff:96:e2:43:61:
         72:c5:0e:02:17:d3:f1:7d:87:a0:eb:96:56:8e:67:3c:72:00:
         b0:b8:6c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:31:58 2025 by rpki-client