Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a9ce6493-d2ac-33d0-ad7d-b84e32dc4665.roa
File:                     a9ce6493-d2ac-33d0-ad7d-b84e32dc4665.roa (raw, json)
Hash identifier:          qvGcpDdJ39J4DfWSefry8YSBlCR4ikA6LayEjOUN478=
Subject key identifier:   D6:10:54:B3:D6:F4:5E:6B:CE:17:EF:BD:45:E6:56:B3:6A:15:F0:54
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0F14C7F617B56C0B3EA1EE0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a9ce6493-d2ac-33d0-ad7d-b84e32dc4665.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     9009
IP address blocks:        104.253.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:4c:7f:61:7b:56:c0:b3:ea:1e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=10240b60-d85f-4e1a-b343-e246db26acca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ce:bd:42:ee:6d:63:96:8c:39:03:53:75:3a:
                    54:31:51:7a:a6:c3:67:cd:83:5a:4b:5c:a7:cf:c7:
                    2d:8a:29:b2:57:8d:1e:d8:95:7c:eb:2b:14:5c:1a:
                    2b:b6:b9:18:51:db:84:37:bc:1e:9e:43:04:b4:95:
                    a3:fe:f4:81:7d:fa:55:5e:92:0c:37:36:80:95:48:
                    a7:99:ef:7e:5e:30:54:1e:9a:88:84:0c:b5:eb:3b:
                    87:b1:c0:26:98:dd:14:52:fa:a3:ed:b4:45:b4:77:
                    2e:66:53:d2:72:bc:bc:f1:0d:bb:e2:01:7f:c7:2c:
                    d9:74:58:f2:56:da:1b:a0:c3:6a:7b:c2:a2:79:54:
                    c6:af:db:b2:6a:20:d3:24:78:8c:11:97:ec:ec:26:
                    15:49:ec:ef:f2:d5:39:77:d2:7f:6c:ac:46:f5:e7:
                    bf:0b:9b:00:56:e0:e2:e1:d2:00:e4:fc:3f:ee:11:
                    f4:0f:23:6d:f3:2c:3e:12:e9:d6:aa:5c:62:1d:42:
                    b5:33:25:0c:44:4b:bd:41:7b:cd:f0:d3:9b:35:9e:
                    53:1c:f4:c8:0a:fd:1a:49:b7:db:4c:08:04:5f:3e:
                    25:84:89:3a:39:0c:de:64:6f:8b:fa:13:f7:57:75:
                    31:6a:cf:a4:56:f5:48:68:3d:ba:f0:da:0f:cc:0e:
                    4c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:10:54:B3:D6:F4:5E:6B:CE:17:EF:BD:45:E6:56:B3:6A:15:F0:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a9ce6493-d2ac-33d0-ad7d-b84e32dc4665.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:c1:1e:78:bf:2a:dd:85:e0:27:8a:80:50:1f:db:8c:40:0e:
         75:d6:eb:41:ea:ce:3b:71:5e:01:2e:fa:c3:61:4c:d2:71:c4:
         9e:18:5b:d8:5f:2f:fd:e2:4e:e0:4f:70:55:ab:92:9a:08:55:
         1d:f6:11:b8:dd:3a:7e:20:6a:e3:44:70:e2:ad:21:3e:11:92:
         21:92:b2:49:56:33:fb:89:f8:0e:0d:66:16:f5:b7:f1:3f:4b:
         6c:b5:59:56:31:82:c4:1a:ae:67:c5:fb:2b:62:ad:96:6c:21:
         e6:79:02:3c:43:77:bd:a0:c2:fd:8c:4d:59:c8:7a:21:f9:2a:
         ff:37:7d:1f:74:41:fd:e4:3e:86:0a:bb:e3:c4:cf:76:ac:a1:
         3b:37:c1:f1:1b:c3:b3:47:46:78:66:00:31:7b:54:c6:38:9c:
         f0:27:da:49:6f:0c:ff:56:f3:9b:17:0e:2b:cb:cc:3e:c8:d9:
         ed:29:fb:14:aa:a1:63:ab:7b:21:f7:46:e8:29:8b:8b:b8:2d:
         25:ad:5e:6b:50:64:f5:0f:46:32:57:13:e6:d9:ab:93:24:ad:
         f5:ca:9a:7c:69:b9:c3:69:18:a0:a1:c7:7e:49:cc:50:f2:c8:
         57:a5:86:4f:54:62:5a:69:2c:2f:f3:c7:a0:3a:e3:18:2c:b4:
         d6:a6:eb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:22:20 2025 by rpki-client