Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d41397c7-aeeb-3dbf-ad75-76ce9d632430.roa
File:                     d41397c7-aeeb-3dbf-ad75-76ce9d632430.roa (raw, json)
Hash identifier:          /zdSDtLZ2oeE5cqKMCc5QaDEycL7I+0PTm9afaS405A=
Subject key identifier:   66:29:FC:6F:35:12:86:DA:9C:BC:36:24:9D:A1:6D:C9:14:F1:04:3B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849B14A37E35F41D22D59E554A0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d41397c7-aeeb-3dbf-ad75-76ce9d632430.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     48031
IP address blocks:        104.164.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:37:e3:5f:41:d2:2d:59:e5:54:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=dcc426df-8416-4855-9000-50b0afd23ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:88:7c:e3:87:03:3f:25:30:29:65:0e:c0:e9:
                    6c:ed:d0:d1:0e:c9:26:dc:29:12:5f:de:eb:2b:c4:
                    13:87:ff:7a:7e:33:93:29:a4:35:a4:69:c3:d6:3d:
                    0e:8e:ac:2d:2a:09:89:2e:5e:61:96:d6:1b:de:fd:
                    ea:e5:b0:c2:fa:8d:49:d7:81:9d:3f:4d:ae:2f:e3:
                    ee:a4:c3:72:1b:94:3c:c0:cf:4c:b6:bc:ab:82:ba:
                    f5:5b:92:2a:c6:bf:7b:68:ed:f1:19:8d:70:67:5f:
                    f0:fb:7a:e6:f1:4c:92:0f:30:3a:d8:2e:b5:35:26:
                    13:3a:d6:fc:d2:45:25:af:93:57:1d:25:b0:79:ad:
                    f4:dd:52:03:29:21:fb:4f:81:57:6b:7a:5c:a4:e0:
                    f0:1f:a6:83:f7:98:52:82:c5:2e:39:6b:99:0d:75:
                    b7:2e:3c:fd:77:1c:f1:6d:2d:bf:49:5c:1d:6e:4f:
                    60:d1:7f:a1:01:2b:8b:d3:56:7b:4d:56:52:03:cc:
                    9b:9d:1f:db:3b:5b:9e:d3:69:6d:fb:d4:bb:8d:2a:
                    27:72:5e:63:20:da:9f:8b:23:33:81:73:e6:a0:4e:
                    d5:fb:9d:fd:29:20:80:17:96:b7:cd:88:41:30:de:
                    50:54:1b:94:c3:cf:dc:77:08:91:af:9e:63:b2:91:
                    14:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:29:FC:6F:35:12:86:DA:9C:BC:36:24:9D:A1:6D:C9:14:F1:04:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d41397c7-aeeb-3dbf-ad75-76ce9d632430.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:01:a8:34:d2:49:5b:5c:4f:fe:7f:30:97:23:c2:80:75:e6:
         de:ae:18:ed:fa:4f:89:35:1b:c0:c0:b0:ab:50:52:aa:f9:cb:
         b3:3b:b8:e1:06:49:c5:99:d7:b7:0c:08:cd:fc:eb:04:d2:5c:
         71:6b:8f:67:5c:37:7e:ef:e6:c0:21:e9:88:48:91:02:76:6a:
         5a:76:43:4e:7d:06:1a:45:0c:57:5e:32:a0:b3:66:91:0a:90:
         d6:fa:ee:c6:cf:10:b3:bd:41:f6:af:2c:80:d3:6a:e1:3f:f3:
         31:26:c9:0d:be:71:48:ca:5a:f2:19:ce:f6:b1:a0:67:cf:45:
         69:22:16:0b:37:a5:75:93:06:05:83:e8:3f:f6:df:79:63:b5:
         ef:5a:6f:9b:94:4e:be:8a:ea:0e:d2:b8:65:ac:89:37:ee:a5:
         5e:68:06:6f:30:a4:9e:00:07:c9:8e:5a:16:ba:ac:16:13:46:
         f0:a8:e8:e8:2c:90:03:1b:31:f9:6c:dc:d8:46:45:02:4b:84:
         12:33:04:3a:9a:ee:97:2d:e6:10:ac:04:ab:0a:90:56:49:cf:
         80:87:56:5e:f2:44:6c:22:a8:2f:59:16:be:36:1c:ea:22:8c:
         39:bb:fe:00:90:2a:22:98:84:30:b8:40:73:14:51:2b:58:da:
         de:0b:52:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:31:19 2025 by rpki-client