Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6cb0dda0-5038-341d-8681-a0e696ca10a7.roa
File:                     6cb0dda0-5038-341d-8681-a0e696ca10a7.roa (raw, json)
Hash identifier:          Qg5P3GeOM4PqNkJ5ScZVHIcCamQZG4exFEvinecWjSI=
Subject key identifier:   A5:A6:6D:C3:1A:7E:3E:F5:06:CD:C7:7D:6B:A6:3A:B9:5A:27:63:A2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849A089E89AD7C033DF9CFACE80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6cb0dda0-5038-341d-8681-a0e696ca10a7.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     5650
IP address blocks:        104.165.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:e8:9a:d7:c0:33:df:9c:fa:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=fe0a807c-b05a-44e5-a5a6-9e37db5b979c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b4:1e:a3:04:fa:19:a1:82:96:11:38:61:5b:
                    e4:d6:c1:ef:6a:0f:a7:6e:5e:24:1e:5c:8a:78:95:
                    db:ef:aa:c7:52:11:08:8c:cf:80:c7:1c:05:12:b1:
                    2c:1d:65:72:e4:93:a4:ba:7c:9c:3c:48:8e:0d:1b:
                    22:e3:51:5a:35:f5:5a:3e:a0:8f:a8:31:22:76:08:
                    92:bd:7a:b6:f3:7e:b6:93:14:bd:e8:21:6d:ab:51:
                    3c:0b:f3:d9:09:b6:04:7e:a1:ee:36:04:3a:60:dd:
                    57:fe:30:6c:75:09:77:21:68:c5:5a:16:42:0e:e9:
                    eb:09:cf:13:7e:3d:5c:d2:28:81:17:4a:b9:55:82:
                    21:8e:22:86:e0:de:12:6e:ee:a5:7e:b3:54:24:92:
                    07:24:10:7b:c9:02:9c:78:3e:6f:db:2e:6f:97:02:
                    9b:48:20:26:20:a6:ba:b9:da:79:ed:00:f5:9b:a9:
                    8a:30:22:b7:3f:5f:4c:1a:26:2c:9d:78:6d:f7:79:
                    ca:13:60:15:26:70:0d:25:cb:42:90:d5:5b:a7:e2:
                    25:eb:9a:19:f0:8a:77:58:25:59:dc:36:7f:ff:4e:
                    48:a1:40:4e:89:48:ec:1b:a3:d5:11:21:ff:5f:56:
                    fd:32:9d:f8:38:27:22:02:64:aa:6e:b4:6c:05:89:
                    a1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A6:6D:C3:1A:7E:3E:F5:06:CD:C7:7D:6B:A6:3A:B9:5A:27:63:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6cb0dda0-5038-341d-8681-a0e696ca10a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:30:6b:55:8a:77:41:f9:a3:a2:31:cf:c1:c4:3e:2e:b5:1a:
         36:59:d3:79:d1:50:76:47:0b:8e:d6:69:42:5b:e7:7a:26:0a:
         ac:d5:ff:bb:de:05:db:bc:53:99:78:89:4c:cc:6c:bd:bc:36:
         33:07:00:11:01:33:46:1f:6d:ce:7e:0a:1c:e7:b0:26:22:b3:
         4e:c1:67:b6:18:b3:02:4e:03:72:bb:85:5b:50:9b:af:5b:a9:
         24:18:65:59:34:5c:93:d7:66:5a:13:ae:ea:79:7d:7f:d7:11:
         97:90:c4:f7:1d:8e:3e:73:f5:4b:ed:5d:ea:e3:b2:c9:29:f8:
         62:41:7c:1e:47:db:8a:dc:15:57:4e:a4:92:8c:42:e1:0f:dc:
         d2:62:99:da:c1:02:7d:27:5e:40:5d:36:3d:cf:b4:2e:d2:d5:
         82:f2:f1:8b:e3:a5:4f:b1:a0:55:5d:c3:01:4e:e3:72:aa:7b:
         18:65:d8:cc:57:60:9f:8c:c1:e3:94:c7:16:ac:90:56:40:25:
         a2:ab:87:46:b1:96:eb:66:f5:56:73:09:6c:46:bd:b2:a0:f4:
         89:cf:6a:b0:51:49:d3:8e:7e:6b:3c:9a:dc:1d:3b:3d:34:d7:
         40:2c:b9:1c:0e:b5:3f:0f:9b:eb:0e:61:2b:08:c3:ea:e5:84:
         7e:1b:92:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:32:29 2025 by rpki-client