Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdae9e84-cb98-3d50-8eae-b47498b37816.roa
File:                     cdae9e84-cb98-3d50-8eae-b47498b37816.roa (raw, json)
Hash identifier:          F1gSkKJUvhAnZB2zFj+onsAm8koC0v/iZcfwG+nWT4s=
Subject key identifier:   63:F9:8E:D7:8B:9B:30:B8:8F:BD:60:B4:1B:12:C5:4E:06:2E:57:56
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AEE26989F7798FE10C50DA200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdae9e84-cb98-3d50-8eae-b47498b37816.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     262287
IP address blocks:        104.252.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:98:9f:77:98:fe:10:c5:0d:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=e8c28c3f-c9af-4835-a165-efdab8ad22f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:df:b0:72:50:09:48:b1:b4:7e:e8:ab:f3:be:
                    58:74:d5:c4:0f:28:2a:5a:31:cf:ca:03:5c:4c:29:
                    3c:3b:dc:a7:74:59:a4:95:33:3c:96:20:aa:0d:09:
                    5d:cf:68:21:a8:1f:a9:83:0c:98:cc:2b:81:e9:6e:
                    5c:cd:41:0a:05:66:1a:0b:75:1f:27:6d:b0:e7:e8:
                    af:6c:25:f6:16:1e:3b:fc:96:da:19:cb:d6:e1:70:
                    39:7f:b5:52:ed:3f:aa:8d:72:ba:70:78:08:8d:fb:
                    94:62:15:a0:bb:b2:65:cf:12:c9:36:49:25:5a:a9:
                    52:0c:ca:fc:5c:79:7b:88:86:ed:e2:a8:e7:18:d1:
                    54:9c:79:7b:71:b6:f8:74:9a:3d:ec:16:b4:b9:f3:
                    ac:d7:d4:4e:f9:4d:0a:72:9c:c6:12:99:e6:70:b9:
                    9d:6b:c6:01:65:fe:db:95:eb:45:be:4f:71:ac:54:
                    a7:e8:44:1c:bb:3d:10:b1:cd:0e:14:2c:bf:b0:f6:
                    4c:92:45:6e:e2:31:9b:02:5e:46:a2:08:c4:3f:ac:
                    69:65:a2:06:cf:c8:56:ee:32:b9:a2:fc:1e:fb:34:
                    42:d5:ac:5e:6c:4c:f5:ad:4d:6e:e3:77:c0:67:a5:
                    1f:b6:5c:3f:7d:71:83:83:c3:37:49:4d:c5:5b:e8:
                    d6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F9:8E:D7:8B:9B:30:B8:8F:BD:60:B4:1B:12:C5:4E:06:2E:57:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cdae9e84-cb98-3d50-8eae-b47498b37816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:06:79:34:45:94:33:f5:b5:62:bb:39:60:4e:26:a0:91:46:
         56:82:d7:f2:dd:e0:4e:4e:eb:33:a6:ce:ca:b7:6b:fa:8e:35:
         90:56:cb:b1:76:5f:6c:65:3e:64:81:60:6c:fb:7b:c0:d2:ba:
         08:5d:dd:5b:04:3f:65:90:36:ae:30:39:c2:de:d9:c0:0c:1b:
         52:47:0d:76:79:14:55:ab:f4:a8:da:e1:b2:10:f6:7a:47:3e:
         89:12:d7:c1:81:89:2f:72:51:d2:1d:da:77:86:aa:a3:40:c9:
         f7:a7:08:e5:00:da:c0:96:5b:4a:29:47:f1:f3:15:c6:37:4e:
         14:df:3c:f6:68:88:86:9d:95:c8:54:4a:31:e5:b2:34:84:f8:
         e7:22:0d:f6:8d:2a:0c:3d:04:4d:ab:be:b6:2f:24:4e:fa:4c:
         92:14:e2:bd:a0:ca:4a:6f:84:b3:68:22:a1:b2:22:5a:d5:0d:
         eb:21:87:e1:e2:da:0a:d8:6c:ad:e2:a6:9b:46:25:d1:ae:5e:
         cd:26:65:9a:99:5e:ca:8e:84:e0:64:bf:9e:a9:52:68:bb:b2:
         77:86:fa:58:6c:cc:31:5d:f4:89:f1:ad:9d:88:19:04:47:c1:
         5e:48:17:32:13:f8:8a:d6:47:f8:22:7d:83:ba:9e:8d:18:05:
         98:f8:d8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:02:25 2025 by rpki-client