Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/60996661-4b29-30b8-a988-e53cf0d2b789.roa
File:                     60996661-4b29-30b8-a988-e53cf0d2b789.roa (raw, json)
Hash identifier:          Mv0TC2++Lf2HDtTOOCXprgshHy7ZMlkCF4nSzK0iEFM=
Subject key identifier:   EC:52:C8:B1:3F:D4:04:65:C4:08:72:78:29:D8:85:3F:C5:E1:10:E3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849AD1A16833DB4C14B8C578330
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/60996661-4b29-30b8-a988-e53cf0d2b789.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     11404
IP address blocks:        104.165.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:16:83:3d:b4:c1:4b:8c:57:83:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=9d1756bf-80ba-48b7-bc75-eedac2c03458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:8c:3c:1d:18:49:24:b1:e2:dd:c4:79:66:
                    d4:ca:7f:07:91:e4:d2:d1:99:06:c7:3e:01:c4:c1:
                    6d:43:35:51:c3:3f:79:ac:77:65:1e:80:1c:08:d3:
                    13:de:a1:d0:00:23:2f:83:03:73:03:8f:83:a8:22:
                    46:57:84:4f:36:61:78:5c:93:b8:7e:5b:b1:74:b9:
                    15:c2:86:66:6b:96:2b:c8:da:c2:6d:2f:4d:eb:54:
                    30:99:96:57:75:2f:5a:06:fa:40:70:f9:40:14:80:
                    c2:19:ef:79:54:03:d4:3d:06:ba:be:0f:14:6d:34:
                    50:4c:fb:ea:b4:05:24:f3:83:89:ff:fa:a9:bb:5e:
                    08:6c:0e:db:e8:5a:43:04:f1:9a:70:9c:7f:a2:37:
                    e3:0b:59:8f:0a:87:ce:50:5e:f8:0a:d6:12:43:75:
                    55:69:66:01:a1:0b:7d:22:75:ea:87:b1:f1:56:26:
                    7d:18:54:91:69:f8:9c:0f:7a:0c:42:c7:64:73:bc:
                    ce:77:2e:a4:46:64:66:c8:42:51:c1:e9:c4:f6:55:
                    4c:3f:9a:bc:2e:90:74:4f:40:7d:72:be:2b:ac:a8:
                    08:b6:b2:8e:2b:82:3d:e5:d5:30:5c:36:94:08:82:
                    9f:52:fe:35:8f:be:df:ce:01:49:2f:c2:1c:02:b6:
                    b7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:52:C8:B1:3F:D4:04:65:C4:08:72:78:29:D8:85:3F:C5:E1:10:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/60996661-4b29-30b8-a988-e53cf0d2b789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:af:c2:30:38:2f:9f:bc:a0:46:75:22:c6:ba:2a:da:30:c3:
         38:0e:7a:05:1b:ac:81:0f:98:1e:ec:06:5f:02:07:2b:70:c9:
         db:ae:b4:a7:71:0a:16:24:2b:8a:31:66:64:b0:bb:e4:c3:c3:
         2f:d5:ae:30:fb:08:78:ef:f4:58:72:0a:d6:f3:91:82:7c:0f:
         b4:d6:92:a8:74:97:1b:c2:6f:1a:83:ac:1d:04:4e:78:59:e4:
         98:2f:a1:8c:d2:03:7d:96:00:0f:d2:9f:3c:76:2f:3b:4f:0f:
         db:59:4c:b2:c3:cd:a3:98:66:1f:5c:ab:42:af:e4:89:0f:30:
         c8:2a:53:33:05:b5:f4:e2:5e:6b:9a:c3:24:17:1c:ff:5d:49:
         8d:46:27:20:b2:82:cc:4c:62:17:e4:f8:42:e9:dc:1a:1c:28:
         a8:51:e9:a1:5f:1e:5d:82:3d:39:dd:7c:e2:64:5b:f2:11:0b:
         4e:d0:33:b2:5f:98:2d:73:e2:21:67:74:9d:d5:28:59:1e:e8:
         62:05:e3:aa:17:1a:bc:4d:73:fb:6a:47:30:de:86:53:f6:8e:
         ba:c9:8d:3f:96:00:a1:56:51:cc:98:92:99:50:68:89:5d:69:
         d4:39:d8:40:fb:fa:21:fb:e6:47:4a:9a:c3:7f:a8:68:91:1d:
         12:19:4d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:15:01 2025 by rpki-client