Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aa7855f0-32f9-3e72-aae9-2f79021e4ade.roa
File:                     aa7855f0-32f9-3e72-aae9-2f79021e4ade.roa (raw, json)
Hash identifier:          Av+EAJytKkU4F6rT6d7ykXoRZbYBfcEA1JHWboIvr2w=
Subject key identifier:   31:F4:8D:44:95:39:7E:8E:E7:70:D3:97:FF:40:EF:F1:0B:AA:DD:4D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B14A5032B2FA5E7DB8E06400
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aa7855f0-32f9-3e72-aae9-2f79021e4ade.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     48031
IP address blocks:        104.165.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:50:32:b2:fa:5e:7d:b8:e0:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=bcd81399-2b27-424b-bd53-be1bbd09b102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:52:2a:d6:d9:45:65:f0:8a:72:1d:91:76:29:
                    70:34:f6:09:2a:b5:f7:89:a1:3e:3c:2e:40:95:f7:
                    2a:ec:08:c2:62:d9:23:7b:11:7c:59:3b:ae:c8:5a:
                    83:b2:52:f0:fe:aa:ee:58:8f:d5:08:c7:6b:55:69:
                    35:ef:29:05:ef:06:cb:b3:d1:2e:7b:c6:ff:51:ad:
                    90:80:0a:df:e0:dd:4d:38:6b:bc:3f:73:72:4e:4b:
                    32:03:eb:3d:dd:91:0c:e8:3d:dd:7d:17:86:9b:21:
                    ba:49:f4:1f:da:ca:3c:a0:0a:d3:1e:c4:5b:e2:12:
                    e9:47:c3:ab:2e:01:96:07:41:49:78:4d:c5:e0:5b:
                    d2:86:e0:2b:9c:d3:13:b4:1f:c1:e2:7d:14:ab:34:
                    b5:04:bf:b5:59:55:3f:13:24:78:bd:76:92:00:fa:
                    47:9f:01:29:f3:b7:71:cd:d3:cb:d1:36:7e:f5:f6:
                    56:c0:1a:be:9a:2e:ad:c0:5d:35:10:58:ba:2c:5c:
                    89:a4:af:10:a1:d5:07:c5:b8:cf:7d:ff:c6:97:fb:
                    39:75:b0:8d:9f:f3:85:da:da:65:d0:e5:81:f5:63:
                    c3:f7:33:80:b1:0e:88:38:6f:c6:c0:65:4c:14:25:
                    cf:37:ee:64:14:1b:48:16:b9:6e:5e:88:ba:50:61:
                    7d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F4:8D:44:95:39:7E:8E:E7:70:D3:97:FF:40:EF:F1:0B:AA:DD:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aa7855f0-32f9-3e72-aae9-2f79021e4ade.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:95:dd:54:07:38:95:2e:5e:49:37:77:18:72:05:e7:7b:e7:
         33:ff:3b:4a:38:1d:dc:c2:5b:5b:a6:43:c5:a5:59:4f:ec:b7:
         79:71:de:12:0b:f9:f2:ea:8a:cd:27:9f:ef:6b:2b:6f:83:f6:
         53:59:d9:fe:c5:7c:02:3b:cc:5c:46:f0:59:30:9a:29:67:a0:
         25:84:2b:7e:b2:af:65:6d:aa:11:a9:e1:5a:d0:98:8a:7f:b3:
         5a:d5:76:a2:38:0f:3a:f8:5d:d9:31:c5:70:1a:d3:78:a6:77:
         cf:49:7a:3b:1d:ec:8f:44:78:6d:81:03:e4:2b:fc:51:b3:47:
         38:de:23:a1:e4:3f:cc:fa:e0:26:09:c8:42:7d:95:74:ec:13:
         cd:c1:83:a1:6f:49:2e:d8:8f:47:a9:2d:cf:ae:7d:88:00:20:
         05:24:13:d2:62:fa:2b:69:65:af:fe:f0:cb:da:b9:55:c1:65:
         3a:25:21:1e:d2:60:a4:8a:eb:c5:a8:b7:7e:a7:49:bd:5b:1c:
         c2:9c:57:93:fa:8a:59:50:37:0e:71:94:1f:5d:96:b3:e3:e7:
         e6:d3:ad:d9:b9:37:f0:ea:3d:5c:a5:c4:ea:5f:7f:a0:3d:69:
         1c:cb:f6:ac:a9:69:4c:a0:a8:5c:19:3d:00:67:f2:a6:13:08:
         01:eb:9d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:00:08 2025 by rpki-client