Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/ac107706-b8aa-33ab-be17-de1da671b7a6.roa
File:                     ac107706-b8aa-33ab-be17-de1da671b7a6.roa (raw, json)
Hash identifier:          unJeBWWaDqmCbM4Bd0Av82rcd+vWluH7GfjQC7mfSXc=
Subject key identifier:   C5:74:B0:F7:DB:B9:B1:5C:90:86:FE:D9:99:76:2A:97:EA:60:F7:F0
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584BA39D04375E56920C5C98D080
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/ac107706-b8aa-33ab-be17-de1da671b7a6.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     14618
IP address blocks:        104.218.201.0/24 maxlen: 24
                          104.218.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:04:37:5e:56:92:0c:5c:98:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=2e1c70d7-0782-4619-92a6-12983dbcc0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:81:e8:eb:81:d6:01:f3:0c:f8:a3:2e:1a:44:
                    8f:4d:72:16:e3:6a:43:41:71:97:15:4b:99:9d:a8:
                    2d:94:77:40:6b:25:2e:13:c2:18:3e:27:29:d7:3c:
                    12:e3:91:ff:49:9e:84:24:0c:73:c9:5b:d2:d9:29:
                    3d:82:2e:dd:02:7a:5b:ee:0d:19:b9:74:ee:2a:2d:
                    a5:7a:4d:ad:14:bd:5b:d1:c8:cd:21:6a:e9:63:41:
                    60:d7:6a:a9:bd:f1:20:c7:46:9d:40:c1:0f:2f:14:
                    ac:71:22:44:9e:a1:d0:87:e5:15:24:3e:b7:aa:ef:
                    95:a8:48:a5:b5:76:f5:3d:ba:80:db:2f:39:59:df:
                    ec:ec:c3:12:6b:05:6a:b6:d5:4d:b8:68:88:e4:37:
                    55:f6:fc:be:aa:2a:5e:35:fd:dc:e2:7a:62:45:fd:
                    ea:9e:f9:43:84:5a:0b:23:db:a3:c5:a8:44:0b:bb:
                    c2:45:db:3c:f0:77:46:5b:e0:db:8f:ce:87:68:1c:
                    cf:e8:fb:23:6b:54:ff:3e:7c:00:96:e3:15:ac:a3:
                    87:40:5d:16:9a:a8:23:ed:96:4b:a9:e2:13:5a:9d:
                    ed:36:d7:9d:9b:fd:ab:39:7a:a6:7b:8b:11:2f:6f:
                    98:06:34:7b:85:e4:62:42:34:a5:9c:c0:e9:7a:8e:
                    6a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:74:B0:F7:DB:B9:B1:5C:90:86:FE:D9:99:76:2A:97:EA:60:F7:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/ac107706-b8aa-33ab-be17-de1da671b7a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.201.0-104.218.202.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:38:14:37:23:c7:0a:82:a3:3a:10:66:ab:92:96:1f:19:7b:
         ab:2f:a3:58:8c:4f:99:50:90:5f:e4:c0:3b:8e:8e:ec:06:fb:
         5b:ad:68:df:bd:9a:65:ed:36:49:f0:45:00:64:b9:e6:25:8d:
         ac:c4:cf:6d:e9:86:08:5e:c7:3f:7f:cf:70:a0:e1:e3:bd:29:
         e6:60:12:1a:f1:64:ea:37:cd:b4:00:b8:fa:a0:29:01:31:dc:
         20:fd:a4:63:11:2d:7e:f9:62:1f:b5:e7:62:77:9a:c4:f1:13:
         80:9e:08:d5:53:c7:99:22:9f:65:4b:56:06:76:d7:7b:39:f7:
         ec:45:71:1b:9e:2f:e4:5b:13:36:5f:4e:50:47:e3:8f:d9:03:
         03:c6:c7:6a:4e:9f:7d:d4:06:fd:a6:e0:ca:23:bc:5e:74:c8:
         c0:67:90:ac:0a:16:76:eb:a2:04:23:73:d6:3a:9f:72:7f:39:
         35:fd:bb:0b:9b:13:f7:15:0f:2f:a9:99:7c:4b:5a:8a:c2:db:
         e7:2f:21:30:3a:e7:42:0a:fc:f9:6f:5d:c5:92:75:b0:cc:18:
         67:8a:41:26:4b:fa:d6:fb:fe:b7:40:29:38:f6:05:43:e5:36:
         54:b0:fe:a0:d5:2f:fa:9a:39:85:55:89:86:d0:f4:ba:b6:75:
         9f:f4:d0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:48:20 2025 by rpki-client