Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d35314b-893a-39f7-9bbb-d00dc9c29923.roa
File:                     9d35314b-893a-39f7-9bbb-d00dc9c29923.roa (raw, json)
Hash identifier:          SB6bwRPjRtS3pWwo5B981gaQH/payWzsKOSyRe/zE5s=
Subject key identifier:   DD:AD:0D:62:BF:04:98:15:A2:04:AA:31:30:41:D8:DB:5D:1B:AD:EA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CBCFAB481E2A068615F83FF0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d35314b-893a-39f7-9bbb-d00dc9c29923.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     50131
IP address blocks:        104.164.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:ab:48:1e:2a:06:86:15:f8:3f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=1db183b9-71cc-4a26-b7ba-95b6145fd780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:55:92:43:5e:f2:cc:be:9b:83:6b:02:26:cb:
                    80:eb:fd:9b:0b:61:0f:5b:69:0b:0b:bf:4d:be:00:
                    7a:21:b2:90:d1:da:b2:d6:69:b2:a7:2a:38:de:63:
                    c6:26:7a:fd:fc:6b:40:00:7e:8c:25:c6:d5:c7:91:
                    5e:2a:49:24:79:77:0f:cc:d7:94:71:e2:30:57:c8:
                    71:6b:73:91:9f:a2:0f:22:6c:6b:5f:71:df:8a:4a:
                    e0:26:6a:bd:4e:c1:f3:67:c5:d5:fa:ce:85:59:44:
                    2b:76:25:03:54:2d:ec:32:27:e4:a6:6a:3b:81:f3:
                    cc:bf:f9:83:ff:46:5d:09:e1:f2:8f:f1:2b:09:4d:
                    02:db:56:1a:f0:9d:68:6c:84:8a:d5:67:2e:2e:51:
                    75:93:0f:2c:26:3e:0d:69:ab:f1:f8:5d:a3:47:1c:
                    76:cd:14:c8:ff:8a:81:d8:24:80:7e:c3:39:0a:8c:
                    6b:9e:3e:f3:df:ec:af:c3:6b:a5:9d:86:22:d8:be:
                    92:67:2b:a7:41:d5:1f:64:9e:5d:77:2a:14:08:1d:
                    bd:e2:0f:ee:e2:d3:cf:de:fd:4a:26:20:a7:18:0b:
                    58:61:6f:6e:b5:a2:84:bb:b8:f4:3f:e8:74:68:3f:
                    b7:da:36:9c:b5:e5:25:57:f6:f4:41:dd:26:f2:41:
                    5e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:AD:0D:62:BF:04:98:15:A2:04:AA:31:30:41:D8:DB:5D:1B:AD:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d35314b-893a-39f7-9bbb-d00dc9c29923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a4:73:6b:9a:78:16:b3:99:53:e1:74:72:96:4e:57:e0:05:
         5b:30:80:87:7d:d7:47:cb:26:c0:c3:6e:11:b2:22:cd:fe:05:
         11:40:eb:40:8b:6a:8d:52:1d:83:fa:4e:13:1c:b3:ac:c0:66:
         77:2a:75:c5:38:08:ae:35:ca:ed:f6:d0:42:40:21:8b:16:f6:
         f6:cf:ac:36:0b:03:0f:64:0c:0b:7f:12:1b:06:2b:a0:a6:94:
         c9:6a:f2:27:75:c2:fc:8d:83:6a:a9:ca:7b:f9:bd:0e:89:32:
         de:f1:19:33:4a:cb:7f:5c:76:25:c8:a7:9b:30:76:07:18:47:
         6c:23:e9:17:a4:34:eb:c4:c2:6d:a3:a2:a6:3c:e8:75:29:75:
         43:f7:55:54:ba:a3:67:44:a6:ac:c2:d0:63:12:87:0e:0a:be:
         79:1d:f5:6f:8e:ae:96:1e:62:e0:88:14:80:8f:80:6a:66:a6:
         b1:c3:2f:ec:48:4f:26:cd:1d:56:48:b1:cf:39:3e:fc:aa:02:
         33:e4:51:6e:20:25:e6:c6:3d:c0:45:2d:dd:93:48:b7:c1:29:
         df:d7:4f:ed:a2:0f:5e:bc:70:c5:2a:2b:16:e5:91:07:6d:b7:
         7b:27:20:b8:2b:07:1f:91:6b:3e:e7:ff:de:06:66:86:60:26:
         49:d1:74:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:57:50 2025 by rpki-client