Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f428a724-9582-318b-96c5-200db32c1cd2.roa
File:                     f428a724-9582-318b-96c5-200db32c1cd2.roa (raw, json)
Hash identifier:          Nytidrxl2tfRyXKq2v2fs+h+1U373ICOTEoe58KU2Mw=
Subject key identifier:   D7:10:98:53:F3:36:A4:31:3A:6F:23:F0:27:16:0B:45:E6:2F:31:88
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849CF683B004BDE7D895EFADAB0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f428a724-9582-318b-96c5-200db32c1cd2.roa
Signing time:             Sat 10 May 2025 19:56:10 +0000
ROA not before:           Sat 10 May 2025 19:56:10 +0000
ROA not after:            Fri 08 Aug 2025 19:56:10 +0000
asID:                     18779
IP address blocks:        104.164.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cf:68:3b:00:4b:de:7d:89:5e:fa:da:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 10 19:56:10 2025 GMT
            Not After : Aug  8 19:56:10 2025 GMT
        Subject: CN=8bda99cd-65b5-4a99-b99a-9056f242d0ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8e:3f:92:40:64:4b:b7:c3:87:2d:1d:4f:55:
                    59:5e:c3:00:77:d0:0e:6b:1c:a7:ed:be:8a:67:a8:
                    36:63:d5:64:e6:1c:d1:3e:55:5e:f1:77:1b:cc:fb:
                    bb:76:5a:e4:93:39:fb:e3:03:13:8b:e9:54:77:ac:
                    ba:ed:81:c8:cd:2b:ab:0e:4b:aa:05:21:62:92:2f:
                    4e:f6:9f:f4:87:de:f5:55:a0:46:4f:fc:5f:dd:68:
                    b1:d4:1d:de:e1:fc:2f:c3:d8:31:27:c7:b9:ad:d0:
                    87:be:e7:15:1f:7f:e2:b7:0d:10:6c:4b:dd:8a:18:
                    6c:77:e2:fa:8c:fb:e3:55:f8:78:22:90:0e:50:91:
                    69:e9:19:56:e6:aa:bf:9b:ee:78:18:7d:18:25:f2:
                    67:ab:41:4a:e0:48:0e:75:2f:88:5c:3f:52:74:91:
                    d2:c9:5f:10:ce:59:7d:a6:ef:d5:15:74:0d:8f:f4:
                    c0:cb:10:11:6a:72:00:79:7a:50:4b:89:4e:68:28:
                    c3:ac:e9:29:64:e9:c1:7e:db:b5:ee:22:cc:09:34:
                    00:51:50:ec:34:1c:00:36:b5:00:25:6d:f2:36:de:
                    f3:f2:52:2d:e6:3b:d9:c0:7b:c3:22:e2:e5:c1:7b:
                    bf:63:65:2a:09:e1:a3:8a:04:dc:f8:7e:bf:55:22:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:10:98:53:F3:36:A4:31:3A:6F:23:F0:27:16:0B:45:E6:2F:31:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f428a724-9582-318b-96c5-200db32c1cd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:7e:23:d6:55:72:4e:1e:ca:9d:79:0f:ae:60:03:bc:58:65:
         a3:31:c3:d9:bf:f1:c7:89:5a:33:41:69:66:ad:03:07:68:b5:
         01:58:a5:c7:dd:34:34:f7:99:b5:ab:ed:4f:c2:de:78:23:0f:
         43:b7:be:85:94:43:a8:e0:cf:14:4c:3e:7d:32:0d:a6:b6:ef:
         a8:5d:4c:6c:7c:64:e0:30:b7:22:92:5d:e0:50:ce:a6:d1:d0:
         fb:fd:cb:d2:76:9e:2b:89:cd:d0:0b:2f:03:64:fb:9d:5f:8b:
         33:58:d4:48:64:a3:99:7f:cc:db:97:be:e8:fa:46:de:81:d8:
         f9:04:8e:5b:b8:23:0b:2b:9d:f7:46:d3:47:d0:e4:e6:e2:83:
         f4:f1:02:7c:70:16:ec:a1:d3:1a:4d:97:f3:3b:c8:83:0b:a3:
         af:39:9f:e9:0c:c2:b0:57:79:74:d2:bf:fe:5e:da:cd:31:88:
         40:5b:97:4f:76:f9:ca:7c:34:a5:72:3d:77:d1:fd:d5:c4:71:
         a7:de:88:07:0c:c0:1f:6e:8f:58:0b:96:84:45:75:d0:40:9e:
         66:59:b6:ca:c2:f4:c2:71:51:91:6c:c8:8e:a1:b3:4f:18:85:
         77:6b:bc:b7:7d:83:40:5e:5a:c9:f3:19:8b:a6:dc:79:7e:ef:
         14:8a:df:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:28:13 2025 by rpki-client