Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e7223e08-e9aa-3344-b17c-8f42f0cc533c.roa
File:                     e7223e08-e9aa-3344-b17c-8f42f0cc533c.roa (raw, json)
Hash identifier:          5kFxBxq5GBFPFJCpJdhJttEN8mmLurs981NAh1BqHvk=
Subject key identifier:   5F:45:A5:FE:CD:D8:07:52:6E:6E:F9:58:8C:13:66:7E:95:57:DD:02
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AEE269249FE81CA43C1AA2F60
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e7223e08-e9aa-3344-b17c-8f42f0cc533c.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     212238
IP address blocks:        104.252.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:92:49:fe:81:ca:43:c1:aa:2f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=1e2c922f-3c42-42dc-bb1b-ddbf02027fb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:53:e4:cc:dc:18:cf:4c:a6:74:e5:09:1b:56:
                    2f:3d:e9:4e:a1:4d:6e:76:ed:bf:1e:68:cb:96:a0:
                    06:3b:94:2c:b6:00:09:70:d4:c6:67:65:23:c7:15:
                    4a:29:91:14:aa:60:83:ef:22:8f:3c:33:2e:52:30:
                    c9:c3:81:c7:f2:46:e2:33:c3:04:7d:d2:0e:66:c9:
                    7f:6a:1b:b8:89:d0:ea:3a:c8:d0:22:7e:45:1f:82:
                    6d:12:e3:fc:4a:8a:c4:21:b5:55:60:3b:c7:18:23:
                    15:04:45:2b:86:8f:a9:22:c7:d7:44:7e:32:e9:9e:
                    08:fb:8d:8b:f2:16:3e:79:41:c4:5e:4e:43:0f:34:
                    ee:23:aa:59:98:07:86:7b:35:0a:32:42:f4:c7:05:
                    7c:de:b5:a7:de:4a:a3:30:b6:54:24:4b:b9:cb:57:
                    6b:7f:c0:3f:d3:c5:61:7d:9d:45:7b:3c:7b:a8:cc:
                    9a:0d:91:b4:ac:cc:df:c6:5e:f2:d4:d7:09:ea:6a:
                    be:f8:aa:bf:1c:5d:0d:d0:e7:e2:df:e1:58:66:32:
                    7d:28:fe:f3:db:52:7e:b0:ca:26:04:6e:6f:d2:e3:
                    cb:ec:2c:27:a1:17:96:c8:a4:12:5d:34:93:77:d5:
                    c9:96:9f:ab:45:50:45:a9:cb:48:b5:e2:a5:44:26:
                    80:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:45:A5:FE:CD:D8:07:52:6E:6E:F9:58:8C:13:66:7E:95:57:DD:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e7223e08-e9aa-3344-b17c-8f42f0cc533c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:71:cc:33:c2:4b:b0:de:8e:b7:53:24:d1:fc:2a:3a:76:c2:
         3d:55:16:1d:0d:ba:75:ff:12:12:69:06:30:44:65:3a:be:01:
         f3:65:97:d7:8e:54:f1:89:4c:31:6f:06:0a:0c:76:39:a2:7a:
         7e:80:47:3c:12:b4:20:1b:b0:5f:5b:56:9f:e6:92:2a:40:03:
         7e:eb:ae:e2:11:81:d4:77:f1:7b:ba:84:5d:f2:7d:64:2c:e4:
         82:ca:c8:83:a9:1c:e8:f6:8d:f6:f9:97:ca:04:d0:06:9f:df:
         ff:ef:07:46:ce:45:ee:50:7d:50:16:b1:0d:a0:c5:3c:43:43:
         7b:73:ed:71:db:f8:77:7a:7b:a9:ae:98:1e:52:dc:de:c3:12:
         ca:6a:d1:f9:91:16:08:d4:04:da:fe:63:19:3d:ba:d0:c1:c5:
         35:db:9e:49:31:c0:6c:d7:56:b4:ad:ad:aa:bd:a2:45:1d:5d:
         3c:80:8e:68:2a:0d:1c:14:92:9a:59:ab:aa:dd:95:cf:ac:c5:
         c7:a1:73:6d:32:f0:f2:d2:a6:2a:8e:d3:a9:a4:5d:95:e4:60:
         a5:a2:c5:95:bd:5e:ac:64:a5:b5:94:7a:31:7e:b3:36:78:77:
         20:72:98:ab:9f:da:08:c2:bb:9b:78:18:dc:78:55:ae:6e:8d:
         61:4f:92:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:00 2025 by rpki-client