Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0357508-e20b-3679-b9c0-2187c9afdee5.roa
File:                     d0357508-e20b-3679-b9c0-2187c9afdee5.roa (raw, json)
Hash identifier:          /fRxUIQ5yv8D1r373iNEoi9tRNplBJNLHNqyQBcoDZs=
Subject key identifier:   01:F4:6F:47:96:99:B5:6F:A4:86:AC:4D:4A:C3:8B:F1:43:3C:5E:41
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584BB2F7B0CBFF9B272006A75B40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0357508-e20b-3679-b9c0-2187c9afdee5.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     214238
IP address blocks:        104.165.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:b0:cb:ff:9b:27:20:06:a7:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=2a436896-2d8a-4b56-866e-e4ac64b7de21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:99:c1:57:85:08:9e:f4:80:b6:2f:07:99:f6:
                    9d:92:3d:a0:26:0b:95:38:a1:ff:92:b6:b7:8c:05:
                    39:d3:fe:cc:90:f2:dc:cd:7d:ee:13:44:1e:c6:ae:
                    00:1d:7a:54:57:c4:1f:32:96:9c:95:42:46:1c:7a:
                    66:84:20:56:d4:5c:9c:db:44:85:59:7b:40:ae:e2:
                    c0:58:4b:31:ab:66:8d:99:ce:23:5e:3c:5e:d3:8a:
                    3b:3f:58:a7:60:7a:06:77:3e:57:52:0d:6e:5a:c4:
                    be:b5:19:f5:2d:f7:e9:a9:9a:1a:a9:a9:67:f9:f4:
                    b9:48:02:ab:97:e6:95:b2:9f:5f:a8:8c:88:82:02:
                    70:25:31:74:77:b4:f6:ab:40:6e:fc:e8:e9:55:9e:
                    94:9c:0f:31:98:43:96:38:96:1b:f4:58:16:31:c5:
                    2b:37:64:65:07:af:8a:3c:aa:ff:72:92:9b:3d:f6:
                    e4:e8:a9:84:ec:18:e7:74:73:04:bc:61:a4:7b:9a:
                    8f:3e:49:8f:69:52:63:90:62:9d:29:d2:a9:7f:7e:
                    2f:76:e9:42:dc:57:cd:51:6d:41:fe:d9:3f:c2:f5:
                    26:d1:63:34:eb:eb:0d:b7:a8:15:97:d6:b9:8f:d3:
                    80:cf:2a:2f:b1:e4:85:e0:4d:45:fe:7a:9f:ad:c0:
                    d3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F4:6F:47:96:99:B5:6F:A4:86:AC:4D:4A:C3:8B:F1:43:3C:5E:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0357508-e20b-3679-b9c0-2187c9afdee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:2c:35:04:a2:1e:13:ca:66:5b:ff:a5:ca:fe:75:f8:bb:06:
         b9:05:eb:d5:ad:e1:5a:09:35:cb:a4:e0:88:1d:89:93:46:ae:
         b8:c8:7a:b9:74:c0:be:44:9f:f1:2f:38:c7:82:35:14:86:9c:
         af:a6:c4:b9:df:43:73:d2:65:d4:be:ac:4f:00:46:f5:8f:1e:
         e7:82:ec:54:dd:e4:ed:76:e7:28:ff:79:52:25:d4:e6:cc:c7:
         56:71:35:d7:fb:16:46:43:f0:d1:20:5d:09:eb:eb:3a:05:da:
         6e:9c:e9:41:e5:9e:f3:39:db:b5:35:37:8f:ad:34:1e:e2:75:
         02:3e:ba:24:cc:5e:ee:86:97:7b:12:7d:77:dd:54:bb:0c:32:
         2b:9c:8c:68:33:0b:0b:72:7b:93:a7:cd:f4:40:46:d8:a5:93:
         a6:22:11:dc:1d:eb:f1:55:fc:b2:be:e7:7d:79:27:ed:19:78:
         3c:d8:be:2e:18:b4:62:f4:ec:cd:a8:37:52:b1:f9:97:5f:50:
         fd:d9:92:ba:a8:48:a1:e5:ca:69:05:ec:c4:ce:8a:26:fd:a4:
         01:c6:d1:01:4e:e1:2a:3a:d1:22:d4:7c:53:83:36:80:be:1e:
         85:0d:f5:9a:59:33:fa:53:41:15:ea:0f:05:9f:d2:61:d8:e6:
         db:31:82:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:18:47 2025 by rpki-client