Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c59af93-98d2-3f31-8ebf-7b10cf02fc1b.roa
File:                     8c59af93-98d2-3f31-8ebf-7b10cf02fc1b.roa (raw, json)
Hash identifier:          7Kw3tQlD82i0hqfQWbfHJ98HVq62CYFOnE1JLl1+t+c=
Subject key identifier:   2E:3B:74:11:06:04:F9:E3:28:EE:FD:D2:FF:50:20:4B:88:48:DE:D3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584BB2F82DACCEDD359459F0A680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c59af93-98d2-3f31-8ebf-7b10cf02fc1b.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     214238
IP address blocks:        104.165.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:2d:ac:ce:dd:35:94:59:f0:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=2fc02c8c-0511-44d6-ac89-07b16347a5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:9d:b3:c6:af:93:ef:f4:2a:5b:b7:20:32:
                    af:70:b7:61:87:28:61:f5:19:11:06:aa:30:b2:37:
                    18:5f:a3:e0:42:4c:ff:ad:63:12:41:74:cf:41:70:
                    16:ac:ee:70:51:73:7d:59:0c:b9:8f:6d:61:34:ab:
                    31:80:78:19:38:5b:60:a2:52:39:ed:97:cb:83:18:
                    c8:e5:14:eb:81:0a:9f:30:7e:8c:19:51:49:2c:d9:
                    5f:1a:38:87:7c:54:84:5d:22:ef:15:f6:5b:50:c7:
                    6e:f9:f3:de:9f:74:39:a2:79:44:fe:34:d6:32:84:
                    1f:19:e2:37:03:cd:e4:79:e2:bb:24:15:f3:60:bb:
                    5d:69:be:1a:5b:69:10:a1:bb:26:cb:c0:46:c9:c5:
                    dc:5e:30:d9:f3:e3:9e:97:6b:0f:17:41:d4:77:dd:
                    ec:96:03:28:e8:da:e4:11:96:81:8a:3f:65:4d:64:
                    e8:8b:7f:c7:58:b4:c9:3e:9d:ae:b9:6e:7f:8d:57:
                    99:96:3f:56:99:2c:0e:61:90:61:a2:9b:21:65:d2:
                    75:df:db:06:38:d8:97:90:52:d7:88:91:e2:18:77:
                    5e:5c:82:c5:18:c2:2b:a4:09:9a:99:5a:a0:4d:64:
                    a0:83:7d:76:dc:62:42:29:4a:16:d1:10:32:69:db:
                    ee:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3B:74:11:06:04:F9:E3:28:EE:FD:D2:FF:50:20:4B:88:48:DE:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8c59af93-98d2-3f31-8ebf-7b10cf02fc1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:88:11:d9:cd:88:b2:95:b5:e5:8c:e8:ec:c0:98:11:ff:bc:
         c7:b0:cd:22:67:76:23:d2:e4:af:24:8b:e8:41:f4:85:f1:20:
         55:55:4e:2e:22:20:7a:43:9e:6a:3f:1e:16:4b:57:45:c5:60:
         78:28:aa:68:9a:5c:6d:ff:af:30:41:f8:18:54:06:d9:35:3c:
         fa:30:dc:6e:9e:83:76:3c:d6:de:42:21:e1:10:6c:8a:0e:1f:
         ec:4b:e8:b0:31:97:15:97:66:59:37:7b:3b:07:57:66:12:97:
         d9:5e:d5:97:52:e5:2b:7a:8d:cf:01:f8:41:11:6e:fb:e8:9a:
         a8:67:19:9e:9f:99:18:ac:e1:68:cc:73:4a:5f:ef:52:e2:90:
         eb:3f:4c:92:5e:01:9c:21:99:95:af:da:a3:93:f0:4b:ac:ec:
         3b:be:56:d4:ff:55:a4:f2:5f:d4:79:f9:1d:bb:b8:e2:1c:5c:
         72:8d:e9:31:1c:af:0e:7a:a8:23:ff:b3:c6:e4:99:f3:10:3d:
         a1:d5:71:44:b8:3b:9f:47:16:77:13:56:59:3a:86:2b:8e:dd:
         7a:2d:ae:b8:10:e7:df:3f:04:e7:23:7c:76:e5:f7:98:cd:4b:
         64:df:5c:64:02:a5:c4:9a:63:ec:0c:3b:aa:61:98:23:94:aa:
         fd:c7:21:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:38:52 2025 by rpki-client