Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a824ab05-eabe-3abf-9de6-d1de5bb568f3.roa
File:                     a824ab05-eabe-3abf-9de6-d1de5bb568f3.roa (raw, json)
Hash identifier:          2nO9fsmYmH+ZOmHESHjRkAuPk7SMOttPYmT5YHu81U8=
Subject key identifier:   FF:2D:F1:BB:1F:97:97:A2:3A:E8:D0:76:6A:19:A6:4D:16:08:8C:EE
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584BB2F7B1ABE0A3DDF9F908C940
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a824ab05-eabe-3abf-9de6-d1de5bb568f3.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     214238
IP address blocks:        104.165.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:b1:ab:e0:a3:dd:f9:f9:08:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=9005d321-c6fe-42a9-8d48-03429e65a8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:ae:eb:1d:98:20:9f:e9:52:79:b7:0d:80:
                    61:62:48:a9:d0:8d:d1:83:e2:c4:47:37:40:e2:28:
                    8b:5b:1c:75:32:3f:7f:cb:c6:e7:29:2a:60:e7:6b:
                    32:b4:59:8b:e6:6e:f5:4c:3d:e2:df:e3:ef:4c:7b:
                    53:58:a3:80:1a:5a:e3:f0:d2:2a:f1:a7:b5:eb:83:
                    29:0d:63:22:84:21:22:98:2e:61:b3:0c:71:f2:cc:
                    79:e1:c2:82:46:0e:9d:74:25:80:b1:71:a7:58:27:
                    dd:62:33:9e:32:e1:ee:2e:a6:1b:12:c2:0b:71:d5:
                    35:46:7a:b2:ba:a7:0b:d5:22:df:f0:47:82:c2:72:
                    e9:f2:8f:fc:66:12:40:bb:94:67:48:45:97:40:0a:
                    f1:18:c5:ba:88:7b:51:be:bf:02:ca:b9:67:21:45:
                    f3:f5:9a:3c:27:c1:dc:88:5e:19:be:c7:3a:38:92:
                    54:bd:38:34:2a:8e:5c:d5:80:11:6d:85:f7:36:c3:
                    56:ca:08:9a:fc:3d:80:bd:77:fd:b9:7b:87:2c:10:
                    be:77:cb:fe:12:cd:d6:2e:ae:9b:9d:76:23:da:91:
                    16:16:e6:60:10:81:d4:a5:47:4c:e7:39:a0:4a:5c:
                    57:5a:b4:97:c4:5e:ee:fc:86:50:32:9c:4a:01:d7:
                    1f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2D:F1:BB:1F:97:97:A2:3A:E8:D0:76:6A:19:A6:4D:16:08:8C:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a824ab05-eabe-3abf-9de6-d1de5bb568f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:86:a9:44:95:66:fb:ca:e1:f2:c9:e6:7a:fe:4c:28:46:20:
         d1:17:59:51:14:5b:85:63:a0:14:b7:57:93:f1:1a:b1:fd:a9:
         17:38:66:0a:a9:90:1d:95:9b:37:4f:2b:2b:75:20:c7:be:d2:
         bf:d5:87:3b:0c:4b:02:a5:4f:b8:46:07:19:f4:55:28:bd:13:
         84:7b:31:05:78:0b:84:09:c4:ee:e2:ec:d2:1f:b1:dc:75:13:
         f9:c6:80:2b:a4:65:ce:49:11:c2:e1:0c:3c:23:ff:22:20:04:
         3e:cf:07:dc:5a:7c:22:d4:cd:d7:ca:aa:01:2c:8e:58:bd:2e:
         85:03:5b:6a:9c:e8:be:53:de:3a:c6:23:05:f4:10:b4:9a:29:
         bd:43:ff:4e:6c:e8:f3:d9:b9:76:78:49:9d:45:07:4c:4c:58:
         ac:fa:b2:4d:d3:aa:75:d4:d2:bf:50:19:0e:06:7b:cd:45:a4:
         cc:0b:90:6b:09:69:ea:08:ab:9f:f7:e4:02:4e:a9:5a:33:71:
         f0:85:d7:c1:ac:96:73:10:88:c5:47:29:f3:64:22:3c:c1:34:
         1f:b6:78:98:81:34:31:78:90:62:84:7a:84:bb:ad:93:2c:b7:
         40:61:7f:9d:9e:33:ed:e8:f1:df:b9:8c:59:f4:b7:e0:6e:d5:
         d0:e9:66:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:16:02 2025 by rpki-client