Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bb3a7a7e-bd91-30c0-8d2a-46ce09fd54c0.roa
File:                     bb3a7a7e-bd91-30c0-8d2a-46ce09fd54c0.roa (raw, json)
Hash identifier:          rV0w1b/fUcXatyi5CMkyKzlkigPc0aJw2tcFKPwlGSY=
Subject key identifier:   15:85:A3:82:66:E0:12:38:E5:75:CD:59:79:68:59:0C:D8:87:68:50
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AF0D7D6C61EC82ED07EF2E8C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bb3a7a7e-bd91-30c0-8d2a-46ce09fd54c0.roa
Signing time:             Fri 22 Aug 2025 12:09:39 +0000
ROA not before:           Fri 22 Aug 2025 12:09:39 +0000
ROA not after:            Thu 20 Nov 2025 13:09:39 +0000
asID:                     5400
IP address blocks:        104.164.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:d7:d6:c6:1e:c8:2e:d0:7e:f2:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 22 12:09:39 2025 GMT
            Not After : Nov 20 13:09:39 2025 GMT
        Subject: CN=73274e1e-3603-4d78-b358-719209d3cba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fc:13:ad:95:90:09:37:f5:78:90:90:f4:74:
                    78:67:92:95:40:e2:9a:56:90:60:98:e9:c2:71:fd:
                    60:a5:2d:7a:1c:07:04:ee:6d:91:94:3c:a0:9d:36:
                    19:27:6d:43:ba:ff:c7:1e:2d:df:53:bc:83:a8:b5:
                    09:0e:8b:65:2a:58:a9:ab:d6:fa:d7:ed:81:1a:f1:
                    31:97:8b:7d:56:ed:23:f9:1d:0c:8a:d7:8a:c6:ee:
                    70:c4:f0:08:0d:a4:40:f2:d8:3d:b0:34:1b:3e:79:
                    d0:3e:88:4f:62:0d:f6:05:b3:92:48:0d:22:7e:4e:
                    e4:2d:7e:e1:a5:68:b4:c7:28:3d:45:8a:40:d3:6f:
                    47:64:81:42:34:3b:fc:00:62:1f:15:6d:27:8d:a7:
                    bf:a9:d0:ba:d4:10:36:b1:4a:f5:dc:b4:30:ce:f1:
                    6a:53:02:a5:e9:34:d4:8f:8f:eb:5a:4f:3f:97:c6:
                    7f:13:a2:84:9a:83:9c:5c:d1:a8:81:3b:84:b1:6d:
                    56:e4:31:8e:8a:d5:f3:20:f0:cd:8f:cd:af:73:2e:
                    55:22:1c:1a:8a:63:8a:88:0e:95:05:87:bd:f3:be:
                    94:66:6d:d7:79:b5:e5:44:44:37:e8:b2:56:e8:c6:
                    5c:d7:c7:08:28:48:ab:d3:54:7f:6f:dc:f8:fd:f4:
                    d8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:85:A3:82:66:E0:12:38:E5:75:CD:59:79:68:59:0C:D8:87:68:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bb3a7a7e-bd91-30c0-8d2a-46ce09fd54c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:5c:32:77:3c:a4:cd:af:d3:e8:9d:9f:d2:eb:a2:f0:1a:3a:
         6e:5e:b6:53:49:01:e5:ae:86:dd:2c:6a:ad:cd:2e:cf:81:0e:
         bc:3d:10:85:b4:27:b9:72:64:2a:bd:50:0d:ce:bd:82:48:26:
         8e:ff:0e:94:43:c9:4f:21:f1:f9:ff:44:1f:9e:39:33:31:7a:
         6b:4b:5f:12:ea:b4:f7:a5:f8:f7:f6:db:c4:03:5a:55:40:24:
         dd:28:59:44:09:68:f7:79:07:f4:d6:5a:b4:aa:de:fd:8c:26:
         f1:a7:9d:11:29:16:fa:9d:fe:9c:6d:5d:55:74:f5:78:e5:d3:
         83:90:29:b8:8a:67:7d:34:9b:32:77:14:cb:5e:2d:8b:95:e7:
         40:74:ae:bf:2c:38:d2:2a:b1:80:eb:cd:9b:bd:e0:34:c5:a7:
         6d:40:17:c3:41:ff:08:d8:48:88:d4:6b:c1:65:d7:bf:79:57:
         4d:e6:fd:94:f0:70:2c:f9:45:3c:b2:45:0d:96:b4:e0:6f:1a:
         10:42:e8:db:da:b0:cb:ca:5a:8d:13:2c:f7:8b:9a:a6:79:b0:
         96:15:a3:f6:b9:24:c9:fb:89:13:f9:56:c4:ea:ef:a9:0c:ae:
         5c:76:1a:9c:25:46:51:5a:8b:d7:46:2b:a3:e5:f2:09:5d:f5:
         8a:2f:f4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:26:55 2025 by rpki-client