Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e4032dba-18d5-3bb4-ba16-6885f6b8a390.roa
File:                     e4032dba-18d5-3bb4-ba16-6885f6b8a390.roa (raw, json)
Hash identifier:          3Fm5mm3KprfyNCG59TNRmQwnr/+kpUD4eZhqLJ2o9fk=
Subject key identifier:   01:81:1C:8E:C1:5F:62:35:77:E9:43:64:84:20:3B:02:D4:BA:A2:C7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A35E58D0C175B3D121DE68180
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e4032dba-18d5-3bb4-ba16-6885f6b8a390.roa
Signing time:             Mon 16 Jun 2025 13:01:03 +0000
ROA not before:           Mon 16 Jun 2025 13:01:03 +0000
ROA not after:            Sun 14 Sep 2025 13:01:03 +0000
asID:                     13213
IP address blocks:        104.253.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:35:e5:8d:0c:17:5b:3d:12:1d:e6:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun 16 13:01:03 2025 GMT
            Not After : Sep 14 13:01:03 2025 GMT
        Subject: CN=bacd842b-d7ef-414e-a18a-a33084784c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ec:e7:65:f1:2e:40:a2:5c:95:eb:59:3d:8a:
                    be:cd:8c:b3:77:cf:59:73:d3:8b:4d:f6:b2:45:72:
                    23:a2:9c:78:4b:36:01:e5:f2:8b:b7:08:a9:4b:7d:
                    f4:87:d0:b1:d4:5e:b5:42:85:6e:26:46:7d:8c:0d:
                    34:6e:08:e3:0b:7f:d7:fe:9a:d0:9d:14:b1:b4:c4:
                    29:d9:9b:85:50:e6:91:4e:e0:01:68:d3:8f:12:2a:
                    df:f7:d4:9a:e0:f4:d3:3b:36:12:a4:1e:0f:a3:63:
                    2b:d2:33:0d:0b:19:e7:e5:68:88:ec:65:4b:c8:d3:
                    a4:ca:49:71:75:7d:4b:39:58:70:d6:40:0c:e4:b4:
                    16:04:f2:fd:e9:b9:bc:00:32:a2:8e:f2:e4:a5:30:
                    cc:d0:ca:18:6a:84:1c:90:16:a0:d5:20:cf:79:f1:
                    2a:d5:b8:26:89:0b:f4:89:c9:52:0d:51:04:2d:16:
                    08:52:a6:c5:dd:bf:7d:da:37:2d:b4:73:96:36:a1:
                    ee:37:32:fa:98:9f:7c:04:29:62:01:c5:32:58:6d:
                    87:0d:d1:3a:06:ae:f1:8c:a1:72:69:47:89:06:ac:
                    c1:82:1f:64:d2:94:dc:ae:5c:07:fd:20:90:bf:6a:
                    06:f6:35:f3:13:67:94:58:50:07:b8:50:3f:60:7e:
                    72:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:81:1C:8E:C1:5F:62:35:77:E9:43:64:84:20:3B:02:D4:BA:A2:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e4032dba-18d5-3bb4-ba16-6885f6b8a390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:75:3a:b2:31:2f:f4:4f:34:db:18:9c:ae:c1:71:12:f2:90:
         0d:6d:6d:7c:cc:64:b5:e3:b8:f3:39:ba:46:9f:ca:01:e3:e2:
         68:ee:8e:a2:d2:3f:b4:56:b9:1c:a6:94:40:b6:f7:21:9e:8f:
         7d:78:cd:90:d7:6d:8f:bf:6d:a7:6e:cf:b3:1a:cc:ed:b5:e6:
         66:51:1b:61:ec:ee:e3:15:2a:76:71:29:0e:11:9a:a4:f6:84:
         f3:d0:cb:00:dc:b2:0d:3e:3b:4b:8e:bb:68:f4:3f:d8:70:cf:
         9d:a1:df:f4:d2:50:c0:98:6b:92:15:15:cc:e6:e6:e9:b4:13:
         c2:97:de:4a:c1:5c:f8:4b:79:de:8b:5d:ec:02:f6:cd:9e:4e:
         42:27:db:94:fb:c9:3a:c3:9b:ab:9e:b7:3a:44:9d:af:50:9f:
         f1:44:33:2d:8e:b4:da:b0:f6:cd:f9:fd:cf:9b:ff:af:a9:2c:
         5c:99:2d:5f:29:77:44:9f:b4:ea:3b:24:17:2a:31:0f:a4:3e:
         22:52:3b:14:33:b0:d5:71:fc:06:60:2e:b0:42:b6:cb:4a:e7:
         37:7c:18:2e:50:84:04:4c:a6:42:f7:93:76:ff:97:01:3b:38:
         9d:74:03:ce:92:a7:ed:50:bd:61:52:9f:bf:b5:a2:e8:78:cd:
         2c:18:49:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:45:00 2025 by rpki-client