Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b5a4c76f-ed92-3879-8ae5-4abb6e249789.roa
File:                     b5a4c76f-ed92-3879-8ae5-4abb6e249789.roa (raw, json)
Hash identifier:          EpBmiJZmkByXRV5xo+NCdppuRXLQCgwGlAneU5PYkKk=
Subject key identifier:   4C:C5:AE:D3:29:DA:7B:01:8B:05:92:D5:75:B5:83:5E:9F:09:C2:04
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849AD1A1DFE844FD40072D56900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b5a4c76f-ed92-3879-8ae5-4abb6e249789.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     12083
IP address blocks:        104.165.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:1d:fe:84:4f:d4:00:72:d5:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=202ff7f2-4b0c-4dea-ae37-ec6e0be17518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a8:3a:35:95:14:f2:4f:99:4a:03:3a:66:2a:
                    ad:63:78:d7:8e:7f:5c:ad:80:a6:31:d6:6f:54:09:
                    58:43:d5:92:31:55:2d:f7:d0:b8:da:3e:7e:f9:f6:
                    e7:ff:ab:f8:8b:41:ad:d0:a1:ab:12:2a:0b:f4:77:
                    ae:72:d9:45:4a:d9:8c:b0:c5:6e:00:2c:1d:35:26:
                    b0:76:f9:a1:cc:17:4d:b1:99:20:6d:57:5c:a0:cd:
                    06:bb:94:3c:45:f7:89:e8:28:9a:1b:82:d5:57:e8:
                    eb:f4:62:4b:6c:58:2a:84:f2:59:6e:65:99:6d:c8:
                    96:11:10:8d:be:bf:33:1b:20:52:4b:50:d7:4f:17:
                    3c:c7:3b:a0:e1:81:4e:c3:b4:f8:9a:26:4d:8f:c1:
                    a6:8c:e6:57:df:ff:be:d3:14:50:be:dd:70:6b:47:
                    0d:87:a1:33:9d:4a:92:52:85:bc:83:09:8f:17:4f:
                    b9:42:9b:1e:10:be:c2:14:44:4d:31:f5:b7:99:15:
                    b4:13:4e:c8:26:dd:4f:af:10:6d:3e:79:21:8a:a1:
                    18:0e:10:bf:78:f0:d3:06:d6:3c:3e:ad:71:bf:3d:
                    19:a4:94:6e:c6:73:46:4d:41:01:96:47:db:b6:4f:
                    5f:f9:1e:75:9d:f4:2d:9e:4c:fc:0a:5f:78:93:93:
                    0f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C5:AE:D3:29:DA:7B:01:8B:05:92:D5:75:B5:83:5E:9F:09:C2:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b5a4c76f-ed92-3879-8ae5-4abb6e249789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:87:86:f9:cc:7f:6e:f1:4e:c2:2d:d8:8d:00:3f:15:1e:3b:
         75:e5:b7:a6:2d:e1:37:0b:7f:67:ce:3b:eb:db:7e:5e:d9:e4:
         24:0a:4e:3b:db:35:06:06:89:28:53:c5:2b:6f:1d:1e:53:25:
         ad:bf:33:f5:11:2c:6a:4d:90:88:1e:c1:54:ff:8a:36:81:d2:
         8d:ed:17:d1:53:30:05:a5:2f:2b:b7:28:e4:cf:e6:1d:38:48:
         1e:41:59:31:4d:c2:6f:ac:b6:b0:56:0b:bb:e2:21:d8:45:5d:
         f3:74:b1:7e:d4:a1:c9:2a:79:cb:52:c2:05:d2:7f:47:f0:32:
         fb:4f:79:74:d2:e8:18:02:29:64:19:48:43:71:3a:74:1a:63:
         86:71:a2:d2:4f:b0:4a:72:bd:cb:0a:35:31:f5:82:8d:27:1c:
         19:93:e9:e1:9a:8b:b2:32:ac:21:4c:24:74:92:7e:a5:be:23:
         92:07:5c:9e:d8:5d:9d:96:fd:82:f2:91:63:a5:e0:cd:02:54:
         57:93:0f:e8:2e:94:b9:50:40:a0:28:c6:7e:e5:a4:af:5f:ea:
         c5:d8:7d:3d:ce:53:2d:01:82:50:66:be:7f:54:9a:c7:a3:cf:
         8c:56:e2:1b:56:54:ac:79:8e:d0:08:1b:a7:62:09:8c:8c:a5:
         41:da:f4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:23:25 2025 by rpki-client