Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d22e4e1b-c757-34c2-8ba0-c05d45b1bc47.roa
File:                     d22e4e1b-c757-34c2-8ba0-c05d45b1bc47.roa (raw, json)
Hash identifier:          vWSl5saoGoTi6fsSQwn1/PCEGed1FWp82lEDhauIEBw=
Subject key identifier:   CC:D1:48:D2:BF:65:17:0F:E3:5F:90:9E:C4:3B:C9:7F:56:18:60:34
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A49705E113B9D3B66408988D8
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d22e4e1b-c757-34c2-8ba0-c05d45b1bc47.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     8881
IP address blocks:        104.253.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:5e:11:3b:9d:3b:66:40:89:88:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=d04b8128-43f5-40cc-b821-44834ce75753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3f:28:11:f2:d5:f3:83:3c:d0:c6:4e:3f:a3:
                    25:c1:68:56:58:d1:33:5a:3a:45:6a:61:17:b1:1b:
                    cf:4b:e0:05:58:99:84:81:9d:a1:28:8b:57:53:6c:
                    a3:51:5c:f3:c3:98:31:cb:92:91:37:22:9a:04:c8:
                    a9:46:34:f9:25:50:e1:91:e6:7f:77:cc:c3:35:54:
                    5b:8a:e3:00:6c:5b:d1:8e:cd:10:51:97:1f:a6:52:
                    e3:0c:75:52:a6:35:36:95:c5:8e:98:1b:99:5e:50:
                    f5:af:4b:20:a6:39:94:55:cf:10:3f:2f:e1:70:56:
                    e1:a9:d8:03:8d:ff:30:a2:52:76:bd:66:c4:d7:28:
                    bf:45:3c:0f:c3:05:e1:f1:bd:f5:55:47:4e:a9:62:
                    5e:d7:ae:89:85:66:8d:80:10:8c:64:81:bb:f1:c6:
                    7b:e2:f0:ac:f7:ad:ff:eb:91:85:36:05:0c:1d:e0:
                    22:60:46:83:e6:9d:80:43:2e:c4:ad:83:51:25:7b:
                    26:4a:ae:49:fe:2d:7d:65:de:0c:8d:e7:2f:ae:25:
                    59:bc:59:bc:34:b3:43:06:81:6d:0b:b3:dc:6c:29:
                    d5:2e:5d:6e:02:b0:53:9b:0b:02:fc:11:d6:97:ae:
                    bd:85:f4:77:a0:3a:bd:63:e2:29:ad:75:2c:2f:9e:
                    c5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D1:48:D2:BF:65:17:0F:E3:5F:90:9E:C4:3B:C9:7F:56:18:60:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d22e4e1b-c757-34c2-8ba0-c05d45b1bc47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e0:49:d9:eb:8b:4c:46:ce:67:cb:57:2c:5c:3a:19:9f:cd:
         1b:89:5e:de:70:b1:27:7b:bb:31:cc:c5:42:90:93:08:87:06:
         db:88:42:cf:c0:29:78:f0:c5:c8:93:48:8d:2a:63:dc:0b:8b:
         b6:e3:6c:7b:e2:d6:6e:34:5f:df:72:79:89:ef:1d:05:de:e4:
         72:2f:9d:8b:19:2c:f1:75:ba:26:0e:4d:3b:ff:68:e5:b1:40:
         94:5d:ac:5f:84:30:96:38:b0:a9:41:ee:9f:6e:d0:be:f4:6c:
         72:39:43:1d:77:85:d5:49:ee:4d:1d:e6:0a:1c:f1:6e:44:70:
         a2:30:be:7e:d4:9a:01:f9:e3:95:2f:f4:67:2b:ec:ae:b8:ee:
         3d:d5:dc:75:07:97:95:49:45:aa:df:9a:14:9e:d8:55:8c:a7:
         73:d0:e7:fb:41:63:74:6f:b8:38:bd:eb:dd:b3:df:15:41:85:
         f8:70:bc:6a:c5:9c:91:cc:9a:53:5c:8c:6d:28:85:1f:54:e9:
         69:b7:d5:b4:0b:14:88:01:e5:1d:4f:04:86:3b:f9:a8:c5:e2:
         eb:5d:c7:4d:d9:5e:f2:5f:aa:48:d3:5b:3f:16:3d:42:3e:71:
         99:76:94:03:0b:fd:6d:81:e8:8a:79:ec:e3:84:5d:94:c5:3a:
         1c:13:84:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:13:18 2025 by rpki-client