Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7cdc77b0-68d5-305e-a785-c039f1758925.roa
File:                     7cdc77b0-68d5-305e-a785-c039f1758925.roa (raw, json)
Hash identifier:          Vrsdklc9vj+vuJkUBqp2kHu4gGItzz9lbszCgq4Vw3o=
Subject key identifier:   EB:B8:68:2F:D5:E1:20:1E:BB:51:11:E3:C4:86:2B:0A:85:78:20:5D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CF682ADF200F11B83D08F3A0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7cdc77b0-68d5-305e-a785-c039f1758925.roa
Signing time:             Sat 10 May 2025 19:56:02 +0000
ROA not before:           Sat 10 May 2025 19:56:02 +0000
ROA not after:            Fri 08 Aug 2025 19:56:02 +0000
asID:                     18779
IP address blocks:        104.164.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:68:2a:df:20:0f:11:b8:3d:08:f3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 10 19:56:02 2025 GMT
            Not After : Aug  8 19:56:02 2025 GMT
        Subject: CN=d8b86076-dc2e-4e24-8eb3-040153e07662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:eb:de:d0:e8:10:f2:a9:47:94:e9:80:1d:75:
                    1a:88:19:2c:0f:3d:85:d6:2a:4b:5e:6d:c7:6c:ba:
                    41:7b:99:e0:04:a8:d3:84:2c:0a:17:f9:3a:3c:fa:
                    3e:a7:03:f2:2a:12:e9:5b:ba:40:77:79:58:18:fd:
                    2d:25:e2:ec:c3:85:03:88:43:0e:86:16:85:37:2b:
                    a5:7a:c5:48:e4:35:b9:b0:33:9b:14:65:b7:04:04:
                    64:7e:34:40:17:7f:bd:9f:9b:03:86:4f:67:eb:97:
                    d2:b3:29:9f:84:a4:50:8c:0a:9d:9d:b8:30:70:b6:
                    2b:0d:3a:3f:cf:ff:6e:e6:5a:ef:30:27:39:f6:ef:
                    f4:86:e2:08:1d:ff:13:34:f7:16:e4:b5:5e:62:b9:
                    be:5f:01:93:f1:51:c9:c1:93:79:f8:ba:d4:26:91:
                    89:56:a6:18:19:5d:f3:d0:f6:13:21:c4:71:9e:36:
                    45:fa:9e:41:e4:08:a5:65:7d:5c:cd:d1:68:32:56:
                    e4:a7:98:1e:b2:03:81:fa:49:ce:53:e6:db:d3:16:
                    bf:fd:17:1e:d1:3b:47:b4:c6:c5:0a:ca:e5:f4:13:
                    09:7b:45:0a:19:17:96:44:6a:ca:6d:31:ec:88:d1:
                    fb:b0:e6:14:ea:77:92:85:9c:ec:4f:15:c3:86:6d:
                    a1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B8:68:2F:D5:E1:20:1E:BB:51:11:E3:C4:86:2B:0A:85:78:20:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7cdc77b0-68d5-305e-a785-c039f1758925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:05:8e:a6:58:0b:fd:d7:25:ea:71:15:c0:70:d1:56:70:a6:
         2f:b9:55:05:d8:33:f8:b7:aa:f4:cf:c8:cf:df:2a:87:41:76:
         fd:d8:b5:fa:f2:95:4d:14:37:40:aa:81:da:66:0f:76:d1:1d:
         0c:1a:97:27:c5:5b:6a:84:43:1d:12:27:41:e3:9c:d3:ea:db:
         73:9e:84:9c:3e:79:ce:64:84:9d:4e:18:b3:57:2f:49:b0:ce:
         5c:d6:a3:30:89:05:28:8f:c0:6e:2e:3b:e3:a1:ca:6a:f1:e3:
         66:b2:e1:ed:be:ce:d5:1d:23:23:f3:c0:5e:5f:fd:15:bd:ca:
         28:30:59:f7:d4:d3:5a:22:af:90:ef:4c:4a:17:e8:ba:b1:74:
         1b:f7:48:86:d1:d0:4b:4c:c3:a6:b3:61:6f:59:fc:8c:2b:5b:
         55:d5:33:1d:64:0f:9b:14:9d:a8:7a:f0:79:7e:46:f5:7e:99:
         87:c7:a1:15:e7:a1:a0:2d:66:e6:c2:4a:1c:ee:66:da:3b:ef:
         67:41:35:33:96:92:ad:bd:53:40:98:e6:0e:18:60:e9:0e:19:
         52:6e:9d:6b:57:a5:9c:0a:1b:5b:a4:e5:ec:d1:b2:f9:bc:78:
         e5:74:80:8c:be:3a:25:52:5e:e2:b5:4f:ae:36:0c:4f:4c:87:
         07:06:14:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:27:13 2025 by rpki-client