Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5cb2ebf0-ab1c-38c4-ad7e-58ccacb9993a.roa
File:                     5cb2ebf0-ab1c-38c4-ad7e-58ccacb9993a.roa (raw, json)
Hash identifier:          aj0V4U4G4KXsE9rjcGLLcYkkU6Y0il+dtYY0cy32DTQ=
Subject key identifier:   B0:71:4F:02:5B:31:86:A0:BC:5B:BE:1C:87:15:52:41:0C:AA:A5:B5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CF686098CA39480CE0C14980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5cb2ebf0-ab1c-38c4-ad7e-58ccacb9993a.roa
Signing time:             Sat 10 May 2025 19:56:28 +0000
ROA not before:           Sat 10 May 2025 19:56:28 +0000
ROA not after:            Fri 08 Aug 2025 19:56:28 +0000
asID:                     18779
IP address blocks:        104.165.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:68:60:98:ca:39:48:0c:e0:c1:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 10 19:56:28 2025 GMT
            Not After : Aug  8 19:56:28 2025 GMT
        Subject: CN=e3eaadf8-5f04-4347-822c-6bf972f11098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ad:0d:fc:f3:c2:3e:f6:b0:07:20:eb:19:4a:
                    95:09:b8:f4:a3:29:de:d2:38:d8:27:68:19:52:2a:
                    8b:ad:37:8e:06:6b:bd:f8:1f:d2:77:e6:70:ee:8b:
                    8d:28:a0:f0:61:13:0f:50:83:67:1e:14:82:a2:14:
                    01:a5:34:41:eb:82:60:85:77:44:7a:62:61:df:fd:
                    8a:d7:c0:e4:9e:10:e5:a5:9b:b5:43:31:3d:0f:a7:
                    94:ed:e1:d0:ca:4a:09:b6:d1:a0:a6:65:d5:4a:f0:
                    79:e9:84:e5:98:aa:48:2d:60:86:91:f7:74:cb:fb:
                    f5:d9:80:13:5e:fe:18:f5:af:1c:83:ff:49:3a:60:
                    89:20:9b:68:70:51:df:d7:83:dd:2a:d9:c7:f5:be:
                    ce:f2:ee:67:ef:50:03:51:42:2d:8e:17:90:d7:e2:
                    14:99:a2:03:bf:3e:8f:86:a8:75:65:08:28:8b:4c:
                    6c:be:18:60:d8:3f:ac:ca:b1:d3:05:23:5a:79:ba:
                    aa:ce:54:61:08:c5:9a:a9:d0:ee:b3:2d:9e:df:a7:
                    25:59:ba:47:d5:e7:3c:5a:d0:8a:08:73:99:48:8f:
                    46:18:d7:7e:75:3b:32:99:88:0d:49:b9:13:92:43:
                    5f:dd:0b:d1:6d:bb:1d:37:7e:83:9f:02:bc:a6:fc:
                    21:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:71:4F:02:5B:31:86:A0:BC:5B:BE:1C:87:15:52:41:0C:AA:A5:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5cb2ebf0-ab1c-38c4-ad7e-58ccacb9993a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:f9:d0:55:52:b8:66:b5:d3:6f:4f:de:2c:c4:4d:5f:8c:9f:
         bf:49:c5:88:1b:81:9b:85:d0:67:e1:c1:7e:ba:c7:ad:61:01:
         8d:35:14:0a:1b:17:96:d6:f0:70:03:e6:8e:d2:ec:84:02:3c:
         b2:4a:68:12:99:1c:8c:cc:fc:04:2b:76:0e:b4:f9:3a:e8:48:
         ce:25:aa:d1:43:9a:dd:6d:81:7f:60:cf:0a:d0:18:fc:64:86:
         40:57:34:03:2e:b4:ce:c4:af:ba:7c:7b:f1:63:8d:8e:a4:08:
         b6:3b:1a:92:61:86:eb:3e:ad:ee:3e:2d:7d:8d:f9:76:85:b1:
         82:4e:69:8a:ba:32:b0:7b:60:1d:ab:73:c5:8a:6a:a0:14:ab:
         5d:4f:7d:aa:ef:ae:0d:94:1d:a7:e9:23:bc:0c:bf:aa:7c:f5:
         48:f0:f2:52:07:76:46:6e:af:65:e8:5e:c2:27:f5:42:52:7b:
         75:f2:fb:c8:df:90:5a:69:5a:93:4b:09:ef:7c:05:b7:94:92:
         4d:07:0f:cf:43:e4:51:96:26:69:cc:29:24:d7:b8:fa:3f:b4:
         e8:f1:cc:a5:93:0d:5b:4e:17:c7:75:d1:87:59:d2:88:a8:db:
         d3:d0:a7:22:19:a0:27:df:c3:9a:69:9d:64:33:ae:e2:88:5f:
         e9:40:c2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:34:31 2025 by rpki-client