Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/67d58338-8744-3195-a984-eddfe156541b.roa
File:                     67d58338-8744-3195-a984-eddfe156541b.roa (raw, json)
Hash identifier:          9+YkCleKKsz60PK1IZyq/TQ23ty7cXpMqVtUSPUhPHs=
Subject key identifier:   69:93:97:10:B0:A7:85:D7:37:9C:94:FA:5A:29:E5:0A:AB:08:6F:68
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0F157051747B811245E8AC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/67d58338-8744-3195-a984-eddfe156541b.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     212238
IP address blocks:        104.253.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:57:05:17:47:b8:11:24:5e:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=eeff8ddd-16de-45fb-8613-c4591c6298be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:31:ec:22:8f:3a:b6:c0:cf:5d:d9:62:1b:bf:
                    96:3e:66:c9:62:74:59:72:fe:24:36:03:3a:fe:3c:
                    23:ee:85:61:66:22:98:b9:c2:4a:11:d4:72:84:7d:
                    54:02:58:5b:83:7a:5b:df:2d:1d:da:4b:2b:87:98:
                    8a:ed:ef:04:63:54:7b:d6:96:7a:7c:3d:13:ab:e2:
                    b4:49:c9:c0:a4:d5:e5:12:7b:4e:15:3a:50:fb:0c:
                    df:a7:21:45:19:71:5e:45:07:4c:c1:1d:07:d1:14:
                    c2:af:08:cc:01:a2:b3:b4:1c:7a:00:cd:97:81:b7:
                    a8:34:62:6b:10:c7:f0:59:ed:50:8e:75:22:7c:77:
                    cd:6c:0d:10:bc:66:f1:c6:76:62:6f:00:bf:6f:1d:
                    42:98:90:4b:14:00:4e:74:6a:4d:db:a5:39:91:ba:
                    16:e4:88:29:df:ea:e0:1e:3f:55:b6:f2:87:8b:45:
                    7d:af:16:36:0d:02:24:88:fd:a1:db:f0:46:eb:f6:
                    77:45:1b:f2:c1:b4:e2:eb:9d:4f:bb:72:06:b5:56:
                    1f:91:ce:82:54:83:4c:a4:2c:6c:e9:6e:1a:71:36:
                    83:54:ce:93:35:8b:65:9c:32:6f:c1:cf:81:69:3f:
                    4f:5d:14:dc:4e:70:04:2d:4b:b3:ce:72:1a:75:f8:
                    79:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:93:97:10:B0:A7:85:D7:37:9C:94:FA:5A:29:E5:0A:AB:08:6F:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/67d58338-8744-3195-a984-eddfe156541b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:f8:a3:79:43:39:27:e6:c6:cd:4d:98:68:85:4e:77:9a:47:
         24:11:e9:73:af:8e:84:02:09:c7:67:c6:76:27:88:e2:4d:06:
         fd:27:6d:a0:0d:06:78:87:e0:66:a2:6b:86:a5:6e:d5:8e:3b:
         6c:59:52:de:cb:c2:3e:52:0b:43:6f:e5:47:47:10:f1:35:cd:
         fe:b2:18:ed:b2:39:06:dd:41:d1:19:fc:aa:4b:f8:f3:0d:ba:
         99:a5:58:d6:b3:a9:1f:ac:04:8e:4c:33:6c:89:48:b3:1f:ce:
         29:ab:e2:d1:2e:a9:f0:42:ac:20:5f:5d:82:74:70:38:a5:af:
         f8:66:98:6d:cb:55:19:92:11:a2:4d:d3:0a:aa:7a:70:d9:b9:
         90:33:dd:14:9b:88:9b:27:67:d0:91:d3:22:7b:ed:1c:70:30:
         a0:bd:d0:c1:22:6c:35:96:d3:7a:ee:84:b5:59:02:1d:25:02:
         30:9a:e9:68:a0:c2:dc:60:75:fe:7f:1b:8e:53:b7:d0:39:12:
         09:c8:e4:3c:11:46:f1:92:cd:3e:dd:0e:25:0d:54:83:46:d3:
         51:39:93:6b:41:1a:87:0e:47:48:3e:70:9a:01:30:5e:f9:56:
         a1:8e:e6:33:3c:6c:85:a2:9a:aa:d4:5c:3c:ca:0c:15:b9:e5:
         f4:ff:59:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:32 2025 by rpki-client