Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca726d0c-919d-3905-9285-bdc57a15efa8.roa
File:                     ca726d0c-919d-3905-9285-bdc57a15efa8.roa (raw, json)
Hash identifier:          bocxIyFxFv/f8S+kT2VkPwt2FOVmbTuD9rZbGwbfWdE=
Subject key identifier:   03:C8:A1:1D:5C:A3:5C:F7:2F:89:3E:7A:02:0C:0C:A6:F6:07:C1:AC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CF684E3D4F81C5BBCC1D5AC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca726d0c-919d-3905-9285-bdc57a15efa8.roa
Signing time:             Sat 10 May 2025 19:56:19 +0000
ROA not before:           Sat 10 May 2025 19:56:19 +0000
ROA not after:            Fri 08 Aug 2025 19:56:19 +0000
asID:                     18779
IP address blocks:        104.164.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:68:4e:3d:4f:81:c5:bb:cc:1d:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 10 19:56:19 2025 GMT
            Not After : Aug  8 19:56:19 2025 GMT
        Subject: CN=cb987aca-c4d4-4a54-bfa4-85a9c39b61d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:54:c9:e4:d7:68:3d:55:9f:53:b8:91:75:
                    63:5d:55:3f:65:fa:aa:b8:d4:83:6f:14:7b:02:26:
                    86:e0:2b:1c:19:f5:f4:be:8c:ee:c9:eb:72:3c:df:
                    12:ec:1a:77:30:a7:5c:e6:77:11:b9:25:66:bf:f2:
                    75:06:2a:f0:21:35:a4:c1:37:c6:b3:19:12:8f:cd:
                    05:7f:5b:7f:6b:f0:9d:95:09:4a:39:45:ad:ea:06:
                    0b:07:fc:f5:1e:d3:c5:6c:82:f2:7d:71:ed:b8:63:
                    96:c0:1e:23:46:5b:71:43:b0:5e:cf:4a:10:0d:1e:
                    e1:d0:fb:cf:a3:dd:8c:29:81:57:c5:b7:07:57:c1:
                    18:f1:6e:e7:25:d1:59:f1:4e:7d:1f:10:71:6c:80:
                    ed:6f:0b:d8:fd:41:ab:4f:1f:43:97:38:b1:76:6f:
                    31:9f:6c:8b:0a:70:8d:0b:9a:0b:c7:a6:95:29:63:
                    8a:c2:7c:c1:b5:d2:97:78:77:33:f5:b9:a8:39:08:
                    b3:6b:d7:7e:35:89:fe:5c:09:0d:14:dc:69:97:fb:
                    b4:60:86:6b:65:84:3a:e3:a4:01:b6:9f:f7:9a:3e:
                    9e:50:16:83:f8:af:30:46:53:9e:9c:bf:6c:4a:a5:
                    6c:ea:6c:fe:70:8e:69:ee:73:a5:21:5e:2c:d6:e0:
                    57:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C8:A1:1D:5C:A3:5C:F7:2F:89:3E:7A:02:0C:0C:A6:F6:07:C1:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca726d0c-919d-3905-9285-bdc57a15efa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:08:f5:2b:4d:18:6e:31:46:e6:1e:76:64:b5:9b:d3:c5:2a:
         7f:d2:27:38:d7:f2:78:2e:7b:cb:1a:5c:91:dc:89:cc:b3:ea:
         a3:88:a6:6e:82:72:54:3e:7e:8d:e0:67:18:16:6f:45:54:44:
         82:5d:ea:07:ad:e9:5a:f7:60:14:0a:25:b5:a7:15:2f:fe:8b:
         54:ae:57:e5:93:1b:b0:d6:90:be:dd:8e:22:59:54:46:cc:94:
         15:ed:03:2b:f0:48:00:1e:46:d7:b2:9b:f0:b9:d5:d4:33:38:
         5e:99:56:25:97:06:03:e2:b5:4e:1a:c2:69:53:f5:15:34:bf:
         1a:9a:e1:c3:6a:e7:01:a8:1b:d4:03:20:91:86:3b:b7:ee:74:
         3d:55:b5:e9:00:b4:35:13:61:90:29:35:c3:da:08:b2:e9:e7:
         2d:49:f5:86:10:aa:22:3f:93:6b:7e:37:f1:a7:00:76:ce:2a:
         1d:60:43:81:06:fb:8b:52:ec:25:87:ce:86:31:9c:26:bb:00:
         4a:85:8f:69:43:99:05:2c:1c:2e:90:86:e8:0d:33:c7:e6:fc:
         88:8d:a6:c8:af:11:af:e6:82:48:a5:e7:de:b6:d1:41:09:2e:
         ae:31:40:f4:55:23:de:57:65:f2:f2:30:90:3e:f5:c4:d2:b3:
         9b:67:be:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:27:01 2025 by rpki-client