Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5d236ec1-c105-3b95-a3ae-807c84595cf2.roa
File:                     5d236ec1-c105-3b95-a3ae-807c84595cf2.roa (raw, json)
Hash identifier:          bwPcTxmJQcLasDLzkLPldB7BwfLKuSUSkA1h0UPriPY=
Subject key identifier:   89:19:29:E5:1A:1A:25:88:01:44:B2:61:3A:3C:97:CC:0D:71:14:C5
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B57A2B4B93D9521A75C55A40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5d236ec1-c105-3b95-a3ae-807c84595cf2.roa
Signing time:             Thu 01 May 2025 13:00:58 +0000
ROA not before:           Thu 01 May 2025 13:00:58 +0000
ROA not after:            Wed 30 Jul 2025 13:00:58 +0000
asID:                     400402
IP address blocks:        104.253.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:7a:2b:4b:93:d9:52:1a:75:c5:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  1 13:00:58 2025 GMT
            Not After : Jul 30 13:00:58 2025 GMT
        Subject: CN=41bdfa98-6cb0-4bd6-b57a-81ec9bbedd93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:d6:7a:69:76:b2:ab:a6:35:cb:f4:89:98:
                    88:88:ba:2b:22:b3:8a:83:c9:c9:f0:41:01:eb:88:
                    a0:43:c7:1b:5e:07:12:bd:9e:9c:48:cc:1e:9c:cb:
                    36:76:ff:83:ac:5d:7d:73:5c:76:2d:ab:a1:c2:74:
                    1a:56:34:d9:ad:f4:a1:a7:e9:d9:db:bb:fc:d4:cb:
                    3c:49:79:16:96:e8:d6:95:c2:3f:e7:39:8a:0d:68:
                    b2:4e:6c:08:ac:ed:a5:47:c1:d7:ce:dd:1b:8e:4d:
                    34:41:96:db:94:92:f5:04:f5:13:e6:04:bf:a8:5e:
                    e8:88:6f:46:0a:8a:3d:57:be:b3:7f:08:51:9e:51:
                    0e:1b:ed:ca:7c:7b:da:97:99:8e:b1:6a:34:44:37:
                    e8:07:ec:66:9f:2a:10:88:b5:01:06:f0:7b:fb:6f:
                    75:07:38:b0:9b:77:8d:e0:e7:1e:d0:3e:9c:4f:28:
                    5f:7f:48:2d:f9:b1:7d:15:70:2b:a4:76:b0:8e:43:
                    77:7b:60:cf:a9:84:cc:4b:94:0f:0a:ff:c4:a3:87:
                    b3:cc:3f:0d:4f:8c:2a:9c:b7:bf:32:d5:59:b2:d4:
                    11:69:d9:3a:53:c2:63:80:bc:cb:e5:3a:dc:23:b8:
                    79:90:a2:9d:dd:06:f1:28:8b:11:3a:4d:77:38:89:
                    5c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:19:29:E5:1A:1A:25:88:01:44:B2:61:3A:3C:97:CC:0D:71:14:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5d236ec1-c105-3b95-a3ae-807c84595cf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:2c:44:64:eb:62:7c:1a:52:73:40:38:3b:14:8c:c3:63:60:
         89:02:2f:3e:00:3b:48:ea:15:3b:03:d8:fa:c6:f4:8a:57:48:
         78:6b:d2:b6:31:e0:10:7f:bc:9b:d2:a0:2f:44:5f:8a:93:78:
         15:73:37:ce:4c:e7:36:0a:ae:f1:3b:dc:93:17:99:08:29:fc:
         8a:a8:20:34:5c:2c:1e:2d:a1:0f:f3:84:60:cb:5d:ef:42:53:
         22:cc:ae:e3:5c:25:80:13:3c:78:e0:ef:22:82:8a:84:d3:21:
         c8:ab:7f:1d:2b:d0:78:e4:7b:df:d3:85:8b:55:36:1b:7a:6a:
         ea:27:bd:84:ff:97:f3:b7:3a:ca:75:7f:68:07:4a:44:19:25:
         f0:51:c9:65:44:09:a2:dd:bd:81:d2:b0:c6:8b:44:53:17:1e:
         38:12:3a:44:cd:b2:7d:7f:7b:86:1f:91:bb:26:be:5e:f9:20:
         bd:4c:f4:c7:47:2d:0b:9d:54:5e:38:09:26:c5:20:c1:24:26:
         e4:bf:e3:76:59:58:7b:4a:2b:0b:23:26:92:f2:24:47:3a:ae:
         ec:3f:1e:05:24:3c:e8:91:36:69:75:fd:15:74:0b:76:c3:b8:
         d2:88:bd:83:c3:1d:13:6b:af:42:5e:a5:f0:3a:8b:df:5f:e6:
         f0:bd:9b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:05:24 2025 by rpki-client