Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c210e3fe-4412-3505-9352-32820b0f7a0f.roa
File:                     c210e3fe-4412-3505-9352-32820b0f7a0f.roa (raw, json)
Hash identifier:          CikN7QQRER4t/6EXaiCJdp7WqzvA9rTatL3UtkGF1VA=
Subject key identifier:   59:DE:37:BD:F9:2C:7C:0E:91:BB:E6:2A:A7:DA:7F:9A:4F:EC:B5:B1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584BB727BC07EFEFBFD33CD23280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c210e3fe-4412-3505-9352-32820b0f7a0f.roa
Signing time:             Sat 01 Nov 2025 13:00:37 +0000
ROA not before:           Sat 01 Nov 2025 13:00:37 +0000
ROA not after:            Fri 30 Jan 2026 14:00:37 +0000
asID:                     401838
IP address blocks:        104.164.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b7:27:bc:07:ef:ef:bf:d3:3c:d2:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov  1 13:00:37 2025 GMT
            Not After : Jan 30 14:00:37 2026 GMT
        Subject: CN=2f514ce5-5d1e-44b9-8fbf-36929a8c6797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cb:c5:8d:43:c4:36:3e:26:a8:69:20:1b:b6:
                    ae:2d:71:1d:e4:32:9b:ab:b0:fb:7e:7a:a3:3d:83:
                    41:dc:9d:2d:12:11:d5:7e:7c:53:82:a1:dd:b1:6d:
                    ed:1d:83:40:80:6a:b5:7b:ab:07:dd:a9:24:f7:91:
                    0d:95:5e:b6:0d:13:a2:91:08:ce:c6:b4:61:b3:0a:
                    0c:96:69:d2:a2:82:be:a7:a4:b4:b2:90:9a:54:0c:
                    4e:93:4c:71:f7:8b:e2:d6:20:6b:bc:a4:98:08:e9:
                    c5:fb:7e:15:72:0c:b9:15:eb:67:d6:90:b2:44:e3:
                    74:87:9e:d5:5d:88:5e:40:e8:35:9a:24:fe:98:55:
                    95:0a:3f:3d:94:b3:15:ee:06:1a:32:d1:af:98:c4:
                    c5:97:4e:33:ba:26:d1:e4:ea:0c:26:8d:1a:52:d2:
                    76:ac:8b:31:7d:8d:84:d6:1e:d5:07:7e:b8:bb:cd:
                    4c:cd:68:67:0c:3c:ac:b5:36:da:64:59:04:03:c9:
                    c2:2f:98:16:09:58:cc:d3:14:64:33:df:53:09:ab:
                    34:40:26:88:3a:ee:f2:c6:fe:5b:e4:d3:ac:e6:b2:
                    4e:16:1a:a6:df:5e:11:6c:10:bc:ef:23:ab:9d:25:
                    dc:d5:1e:49:3a:65:04:b2:5f:13:0f:cf:40:81:7f:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DE:37:BD:F9:2C:7C:0E:91:BB:E6:2A:A7:DA:7F:9A:4F:EC:B5:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c210e3fe-4412-3505-9352-32820b0f7a0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:58:18:29:5e:a4:28:6b:1c:c3:90:49:07:09:8a:71:74:76:
         88:90:c0:76:28:49:ec:41:ec:e2:b3:73:4d:c9:cc:22:e2:e9:
         e8:fb:4a:46:d8:f8:44:b0:d3:cf:ed:b0:b9:31:50:bd:71:b9:
         4d:d9:20:95:57:0e:7e:29:df:fc:22:b4:cc:a5:bf:e5:68:8b:
         cd:c1:78:27:ca:8f:b9:6f:0f:d4:13:33:5c:7e:47:8d:dd:57:
         c9:e1:2a:b5:ab:76:a2:04:7c:9f:a0:0a:d6:a9:f9:01:19:30:
         c7:d4:3d:4b:a2:6f:67:5c:46:8d:96:2e:e1:ff:95:6a:e6:5f:
         c3:81:c2:ab:67:aa:cf:90:f1:78:99:63:65:24:74:98:ce:3d:
         03:e3:74:2d:e5:90:44:44:e0:83:f8:24:d1:37:f7:dd:ee:19:
         48:5f:e6:da:87:36:57:6b:58:62:82:1d:09:29:55:f1:b3:b5:
         b8:19:85:d5:0f:1e:88:98:9e:e7:bc:9f:0a:95:66:48:e4:ef:
         23:1f:30:4a:4f:7a:20:86:db:a9:4b:fc:79:77:ca:c0:fe:56:
         7d:83:25:d2:1c:62:47:d3:ca:1f:4b:4d:f6:f6:a1:8e:f0:41:
         18:20:49:e8:a0:e3:b6:87:81:4f:1c:4f:bc:a6:7d:ca:ef:a3:
         48:b8:8f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:41:20 2025 by rpki-client