Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5d5ee7b-1fbc-3efa-aa22-fa908828cf44.roa
File:                     c5d5ee7b-1fbc-3efa-aa22-fa908828cf44.roa (raw, json)
Hash identifier:          QE+oNjNGc6mgHlbvSTO9g2fxkYbWOBmnFdHi7Xzr8Y4=
Subject key identifier:   41:A3:E0:C6:DF:4D:FF:5B:EE:4C:4D:9C:F1:46:65:7B:F9:62:C4:9E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AD23C362BEAD7289000072C00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5d5ee7b-1fbc-3efa-aa22-fa908828cf44.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     214238
IP address blocks:        104.165.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:36:2b:ea:d7:28:90:00:07:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=5bd3958d-cdae-46be-bbba-20e68c259aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:83:90:75:c5:a7:d5:b2:57:e8:f1:c7:65:
                    2c:41:43:47:57:14:b5:87:17:de:a6:8a:6a:c5:c3:
                    d5:7f:3b:cb:18:18:85:e8:5b:e4:64:9d:66:d4:21:
                    bf:c1:e6:e3:29:65:d0:0d:36:22:00:e4:cf:07:b6:
                    ca:58:f3:1d:5c:97:e4:9f:d3:28:38:dd:a8:74:16:
                    52:55:40:63:21:88:54:2e:cb:28:f4:7f:74:cc:df:
                    95:1c:f6:9a:5b:5a:a6:cf:36:b1:78:dc:ed:f9:fe:
                    76:7a:7f:9d:4b:ae:1f:1d:02:3b:b0:6e:a7:fd:d0:
                    dc:13:a2:16:22:35:1f:7f:80:c9:9d:11:f7:d8:34:
                    15:d8:c0:0a:ac:93:be:d9:36:e9:82:a9:43:7f:72:
                    fd:de:74:ea:b2:3f:d8:f2:46:52:03:59:71:ab:35:
                    32:d3:e6:c5:02:89:d6:5e:bb:ec:fc:2c:af:14:7b:
                    ce:0c:73:a2:3d:b8:c0:f2:a6:b1:9d:05:db:83:6b:
                    d8:03:64:ab:e6:ea:7b:df:7d:32:b4:43:81:fe:61:
                    22:fd:4a:5f:aa:a3:33:95:21:68:ae:bb:8b:5b:c0:
                    2d:27:cb:e3:5c:a1:19:da:ba:9c:0f:82:f1:ab:94:
                    57:94:0d:24:f2:07:95:d6:32:ee:03:ae:45:42:3d:
                    be:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A3:E0:C6:DF:4D:FF:5B:EE:4C:4D:9C:F1:46:65:7B:F9:62:C4:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c5d5ee7b-1fbc-3efa-aa22-fa908828cf44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:6f:06:3e:50:40:02:b7:b6:14:70:56:d6:c0:93:eb:50:7e:
         0e:da:b5:9b:01:dc:7f:78:a6:01:3a:23:55:14:fe:ac:25:fa:
         c8:74:62:20:aa:b6:de:fd:41:5b:1e:14:f1:22:a5:1e:90:36:
         0f:1f:d5:97:fa:79:c4:db:54:4f:bd:37:22:28:bd:b3:7e:63:
         e4:bd:3a:d2:84:a5:c2:2a:8b:f0:be:ff:55:d0:87:5e:79:e8:
         c3:10:e3:f7:69:dd:31:79:a9:e9:c6:dc:ef:2e:c8:ac:a1:66:
         e9:fd:1b:28:74:4f:b1:82:20:70:a0:32:ac:cd:99:56:75:45:
         7c:0e:8d:2a:83:a4:ba:62:9c:ce:ad:6d:d2:73:0f:b2:c5:c4:
         66:43:0b:04:bb:d1:3d:79:8e:81:f0:95:30:c9:b0:2b:a6:92:
         90:a9:70:26:6a:26:9a:95:28:02:99:32:ad:a6:d8:bc:2f:a5:
         c7:70:23:21:b1:5a:ab:1c:5a:2f:c7:c3:a4:72:57:20:27:c0:
         91:2f:51:76:de:60:f7:60:8d:10:65:f4:a7:22:9f:c2:ad:54:
         ba:34:a6:9c:c8:a7:c2:82:69:eb:1b:0c:2c:44:0a:29:f9:28:
         dc:96:40:31:be:73:8a:01:3d:67:de:c0:57:f5:1a:00:f2:de:
         8d:7c:8a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:03 2025 by rpki-client