Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/18fb001a-970c-3cab-8188-d1568ca51609.roa
File:                     18fb001a-970c-3cab-8188-d1568ca51609.roa (raw, json)
Hash identifier:          R6x/pas4LBGlRZY9hrpwbPHP8rB67I3n/dACIkUsGTI=
Subject key identifier:   DF:AE:61:98:37:55:35:4F:F8:3D:AD:75:08:A4:3C:27:E6:2C:DF:38
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584AF0F135966351754D4B70D960
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/18fb001a-970c-3cab-8188-d1568ca51609.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     18978
IP address blocks:        104.218.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:35:96:63:51:75:4d:4b:70:d9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=6bfec99b-e93a-4fae-b414-ac5fae948243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5f:e3:db:dd:b5:33:57:0d:8e:03:20:af:b1:
                    0c:07:65:ed:74:5f:e0:ee:8e:68:bc:2e:e6:62:63:
                    64:55:db:bb:dc:44:6c:dc:4f:96:ac:ad:06:5b:e4:
                    0a:fa:27:a7:65:62:8d:b4:f7:a2:fa:de:5d:92:87:
                    ed:05:1b:87:c5:bc:95:45:a2:5b:f0:e7:07:81:df:
                    18:ef:74:7f:bf:e7:d0:cd:a5:ba:98:dd:d3:47:c6:
                    06:dd:63:13:61:5e:9b:14:da:ab:4c:4d:7b:01:42:
                    47:6b:40:59:f5:b6:45:c3:9c:5e:c9:3f:8d:90:1f:
                    44:fa:10:64:a4:89:7f:a0:cd:e1:77:1a:15:f2:ef:
                    07:ea:82:d8:e3:b2:6f:a2:4e:7e:6d:43:ec:24:a8:
                    9d:ff:a9:3e:c0:09:76:37:65:bb:78:31:5a:88:5a:
                    27:d5:1a:af:42:36:b4:fc:9f:27:54:94:99:14:7f:
                    79:7b:51:a7:cb:93:90:f7:32:cb:61:d3:6d:ea:74:
                    c8:29:ed:a5:2a:55:fd:03:98:b4:37:ee:ac:f4:59:
                    eb:b8:b5:61:ea:1b:b0:16:ff:38:85:0b:d2:1c:61:
                    ca:ee:ae:e8:77:bc:44:a9:6c:4a:58:4d:fc:d9:70:
                    36:c0:41:15:f2:cc:d2:5b:e7:e9:f7:5f:5c:6f:bc:
                    1e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AE:61:98:37:55:35:4F:F8:3D:AD:75:08:A4:3C:27:E6:2C:DF:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/18fb001a-970c-3cab-8188-d1568ca51609.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:18:09:c6:f3:83:e4:a2:91:96:f2:6f:84:0e:80:b1:c5:d8:
         43:df:3c:f6:10:2b:4a:14:29:00:be:eb:88:73:a2:76:3a:86:
         a6:9e:23:3b:4c:16:58:06:94:f6:93:ba:2e:98:f2:fb:1a:2d:
         3d:32:bb:f2:16:13:7a:ac:53:22:35:20:a9:5e:b4:ae:af:5e:
         ca:b0:0d:5a:8c:1e:bc:48:55:ee:78:1d:21:e0:5b:4e:7d:01:
         44:6e:39:5a:e1:20:aa:bf:1b:03:5f:85:c9:c8:0d:e8:79:1c:
         db:58:25:ae:39:77:2a:24:d3:c8:ac:af:81:d0:55:44:87:05:
         ff:cb:01:42:b0:52:e4:64:40:9c:f9:8e:51:1b:88:7e:76:41:
         6b:5a:5d:43:24:ab:7a:6f:a4:1c:d7:da:9b:ee:ac:98:23:5f:
         1c:d3:dc:01:73:09:70:f9:36:ba:80:7b:ef:b1:44:ca:d6:49:
         3e:f6:ea:67:7c:28:f5:3d:fd:b4:d0:d1:58:64:63:0f:02:b5:
         b2:86:9a:fa:87:ba:c9:48:72:42:96:bd:4b:5d:72:3f:0f:3f:
         3b:6c:3c:9e:cc:d2:5e:65:0e:72:62:a5:17:51:12:b9:d3:6a:
         12:fa:d6:e4:8e:74:f9:92:b6:b2:cb:93:a8:31:95:58:ec:92:
         a6:84:d5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:59:42 2025 by rpki-client