Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d50a928-b94a-32d3-9c06-5421cd4b9b32.roa
File:                     9d50a928-b94a-32d3-9c06-5421cd4b9b32.roa (raw, json)
Hash identifier:          4eHnAY8GFEapkobg4LjrYJaEkjioFyIcreLnjYVDjvo=
Subject key identifier:   75:16:E4:06:F5:C9:77:C9:33:14:EF:C8:56:B9:FD:BC:25:5F:87:95
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CF68133B220E9C6BB614DB00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d50a928-b94a-32d3-9c06-5421cd4b9b32.roa
Signing time:             Sat 10 May 2025 19:55:51 +0000
ROA not before:           Sat 10 May 2025 19:55:51 +0000
ROA not after:            Fri 08 Aug 2025 19:55:51 +0000
asID:                     18779
IP address blocks:        104.164.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:68:13:3b:22:0e:9c:6b:b6:14:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 10 19:55:51 2025 GMT
            Not After : Aug  8 19:55:51 2025 GMT
        Subject: CN=b0bf699c-0895-440d-a98f-dbbe53a06d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:a8:41:38:d2:c0:88:50:4a:5b:96:71:2b:
                    d9:06:91:04:b4:3e:b9:86:fe:22:4c:78:46:f4:50:
                    93:ed:67:a9:f5:ef:e7:f5:b7:8c:c8:1c:5f:95:7a:
                    be:b1:ed:ec:db:d1:0f:76:ef:8e:8d:89:45:16:fe:
                    20:f7:b0:2c:96:58:1c:61:fc:ba:02:b7:54:17:83:
                    97:4f:3b:4a:a5:d7:d2:db:a3:ab:e4:48:26:11:a9:
                    cf:c4:70:cf:90:a1:1e:4f:4b:49:4c:ff:4c:8e:b4:
                    ed:46:9a:3b:0a:de:88:26:aa:62:1f:a7:3f:5f:3e:
                    df:50:16:a1:62:1a:5d:18:e1:73:b5:e8:ae:e5:8f:
                    97:ca:f9:66:7d:b8:ed:21:2c:aa:82:48:59:8e:28:
                    d5:0e:99:55:d6:d7:81:14:65:1e:57:a9:c2:12:c4:
                    cb:f0:66:6f:73:ef:c6:2a:04:2f:8a:c3:3a:3a:01:
                    50:d5:d3:8a:ae:52:aa:ca:37:07:9b:bc:c2:05:d4:
                    e2:51:8c:8a:11:05:a0:cf:c3:91:e0:ec:66:71:4d:
                    57:46:80:29:80:65:c2:48:a9:a2:b5:38:4d:ba:ad:
                    8b:23:60:b6:fe:eb:0e:66:c3:1c:34:0d:c1:9f:21:
                    4a:b2:05:0b:63:c6:62:87:29:25:ac:a2:d4:5c:9f:
                    d3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:16:E4:06:F5:C9:77:C9:33:14:EF:C8:56:B9:FD:BC:25:5F:87:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d50a928-b94a-32d3-9c06-5421cd4b9b32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:74:9b:54:bf:9a:50:91:e7:fd:5a:69:a6:6d:b9:c9:85:ff:
         8d:35:6f:48:bc:ec:1b:6a:5b:60:2a:78:cc:2b:ac:49:ad:33:
         69:3e:68:a7:1a:84:39:5a:5e:2b:97:bc:0e:9e:3e:da:4c:18:
         6a:79:c9:fa:0a:86:9a:23:cb:31:d4:7a:d5:1d:76:64:ee:5a:
         ff:c9:9d:96:99:45:1a:78:43:5e:b6:14:05:c1:e7:48:61:ba:
         c8:27:b6:95:21:76:8e:24:ff:90:df:99:2d:8d:f1:2b:89:0b:
         f6:30:bb:f5:17:81:e5:c2:d8:dc:33:45:73:7f:76:91:ff:ce:
         66:af:5a:34:3b:8d:84:16:e0:28:a8:fa:88:b0:0b:d6:be:ae:
         a9:40:20:d1:7e:58:63:bb:8e:42:63:6d:77:89:5a:22:5d:dc:
         7f:da:15:9f:46:6d:a6:58:f4:fa:6a:55:ee:e1:4f:f8:af:38:
         bd:1c:eb:80:ef:6f:2c:6d:de:32:e2:17:cc:02:d4:80:13:70:
         ad:db:bc:4f:96:47:eb:1f:4b:7f:59:84:14:13:9c:2d:80:2e:
         0b:33:59:4d:43:3e:cd:e3:ce:13:db:d8:19:6c:56:28:4c:06:
         24:d4:59:17:aa:a1:ab:87:a0:59:f1:e0:20:a8:0d:15:7b:d8:
         fb:79:4e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:46:41 2025 by rpki-client