Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/717b2ece-5917-390e-af3c-cd63970df76f.roa
File:                     717b2ece-5917-390e-af3c-cd63970df76f.roa (raw, json)
Hash identifier:          2IDRsXdmdjA8ygl+XDgTaabm4SDC2izlBYvPLzeQw30=
Subject key identifier:   A7:46:0B:60:D1:70:21:AE:84:C2:ED:E0:75:E6:9A:DB:A7:9F:AE:69
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0F14C55A57AAECC65417FC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/717b2ece-5917-390e-af3c-cd63970df76f.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     9009
IP address blocks:        104.253.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:4c:55:a5:7a:ae:cc:65:41:7f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=9fc0b46f-d7d2-4c16-bdb4-40fd4eac8c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e2:db:b2:e1:43:66:b4:54:37:37:65:12:cc:
                    fc:05:1f:3b:d9:fd:1c:1e:83:f7:d0:4a:96:d8:f2:
                    5a:9e:d4:eb:34:c6:20:77:f2:10:53:14:96:30:92:
                    e1:5c:b2:96:17:59:e4:59:3b:66:c0:0e:b8:cf:fc:
                    0f:9f:7a:ee:c9:27:b7:c5:7e:af:f0:69:b1:4a:d2:
                    ec:1e:5e:e8:08:fc:de:91:2c:05:0d:05:a1:df:ba:
                    dc:92:96:1f:f5:11:7f:92:a9:2c:c0:bb:3b:cd:7e:
                    96:65:d4:91:d2:d0:a1:49:18:f5:f6:c4:32:03:e0:
                    57:dd:54:52:11:bf:ab:ef:5d:ca:07:aa:6c:88:aa:
                    57:34:50:c5:50:97:26:7b:66:04:42:0a:b6:6b:05:
                    cf:ec:4d:6a:a4:28:e1:8d:23:30:40:e3:7e:2b:fd:
                    a4:79:92:bf:c3:54:69:a7:a7:dd:11:17:9d:0f:98:
                    9d:3a:6c:30:d2:6d:7f:a5:c4:e8:9d:2c:92:65:b7:
                    5d:d6:2b:a6:8e:45:2c:91:6b:c7:89:9c:c1:bb:7d:
                    22:f1:06:a9:55:fc:13:2c:e3:09:da:4a:11:8b:a0:
                    83:cb:d9:4e:bd:3e:4a:2f:8e:02:f1:e1:39:56:b2:
                    c8:37:b4:fb:d7:47:9e:af:be:87:0e:c3:75:55:56:
                    f5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:46:0B:60:D1:70:21:AE:84:C2:ED:E0:75:E6:9A:DB:A7:9F:AE:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/717b2ece-5917-390e-af3c-cd63970df76f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:a3:52:e5:68:01:4d:8a:b5:cf:cc:ab:0c:51:7b:e6:01:80:
         a8:cb:9d:1a:c4:6a:d3:93:22:ee:30:f7:72:17:f4:66:00:5a:
         f7:20:bc:1e:8d:1b:b5:ac:68:fb:63:30:83:13:2c:2f:87:ff:
         8a:54:72:de:fb:2a:ab:fa:71:29:cf:04:2e:e1:dd:38:f8:44:
         45:d4:0c:fd:98:58:47:83:f3:62:d8:e8:34:42:2e:13:30:bd:
         79:f4:95:87:3d:7f:c5:3a:85:e1:e9:41:20:71:a0:4a:8d:a0:
         5b:90:9c:0a:05:24:48:85:f6:0b:7e:f9:31:b0:40:8d:d1:75:
         05:59:52:75:f2:2d:7d:dc:66:81:81:3d:4b:2e:48:f4:21:9b:
         01:5c:00:76:be:b0:62:14:09:be:d5:f7:71:0e:e1:f4:ec:fd:
         01:e8:c7:2f:03:16:a5:61:2f:b5:17:95:76:00:77:1a:33:76:
         b6:28:77:b6:a3:b1:9f:72:e1:e8:ff:f2:08:8f:4c:5e:44:65:
         5a:2f:42:f3:2a:a6:6f:90:32:72:7f:38:d0:4e:d0:a2:9e:d2:
         ed:a8:b5:d2:9c:93:4b:0d:25:9f:df:73:61:a5:05:a2:ae:aa:
         d8:8e:d5:e0:13:29:3f:50:a5:ba:73:7f:63:1f:93:69:dc:b9:
         06:b2:ea:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:17 2025 by rpki-client