Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/226cd2de-84d2-324c-b786-ff8720b3c725.roa
File:                     226cd2de-84d2-324c-b786-ff8720b3c725.roa (raw, json)
Hash identifier:          mrXPRPl9U5A8nfteUK++nxuYt0cD2TvIZSnN1m8SBA0=
Subject key identifier:   5D:7F:BD:85:E5:EA:74:13:90:8F:21:DB:9B:FF:5A:A2:81:87:DE:92
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B8BE23475BA4F8BD854CBD6C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/226cd2de-84d2-324c-b786-ff8720b3c725.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     6830
IP address blocks:        104.253.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:34:75:ba:4f:8b:d8:54:cb:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=88e7608a-03d5-4a18-a1bd-bf10bf082138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:84:b0:22:4b:d6:f0:07:2d:e6:d4:48:95:99:
                    fb:0a:16:5f:03:19:2d:74:af:43:70:d5:9d:d8:e0:
                    ef:b9:cd:ea:68:6e:5b:85:60:d3:0e:bb:7c:33:33:
                    d0:91:85:05:44:61:1f:a6:4f:72:9f:2f:42:c9:5d:
                    c6:20:0d:46:4a:df:bb:a9:5b:a9:05:58:b8:a5:96:
                    fe:60:ce:ea:b3:17:d7:6a:f7:a9:4c:94:65:d9:1d:
                    57:cd:9a:85:ee:86:6c:c7:0f:d2:db:39:f5:e5:b9:
                    25:9e:60:e0:5e:71:46:82:3c:fa:ed:5e:ff:58:a5:
                    e0:d5:44:73:93:3d:a3:b5:1b:4b:69:26:5d:85:c7:
                    82:87:b1:39:e4:7a:a8:a3:88:86:15:59:4f:2d:b5:
                    d1:b8:76:7d:70:37:86:5c:2a:28:1c:e6:ff:c1:fa:
                    db:3a:40:68:3b:c6:c9:fc:4f:66:90:62:62:91:4d:
                    e7:74:af:25:bc:3d:e8:db:2f:4b:71:82:0a:cf:88:
                    31:f8:f5:16:af:b5:75:54:89:5e:cd:ae:2f:fc:03:
                    a9:10:2c:c5:aa:ff:43:24:bf:49:f0:ae:22:72:6c:
                    3e:6d:6d:57:4d:43:83:0a:d6:83:1c:9d:eb:78:50:
                    75:8b:48:31:a2:dc:01:7e:a6:55:bb:51:c7:d4:cb:
                    5c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7F:BD:85:E5:EA:74:13:90:8F:21:DB:9B:FF:5A:A2:81:87:DE:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/226cd2de-84d2-324c-b786-ff8720b3c725.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:fb:a7:f5:90:20:45:e7:a3:54:ee:55:10:e6:c2:1f:53:1a:
         32:65:f5:66:af:64:a1:0d:89:a7:b4:22:2a:d6:4c:7d:c4:7a:
         76:c0:2a:c3:e1:7f:b0:e4:d5:89:70:6a:6d:18:31:bb:67:7a:
         0d:8f:f6:de:35:57:44:77:8e:55:4a:c9:2f:17:f9:5a:01:e2:
         af:8d:da:dc:ee:94:e0:a7:30:fc:d2:ab:e3:9a:dc:64:3b:a5:
         96:2a:28:98:20:50:08:ec:88:76:08:b9:a3:ce:e5:3c:e1:13:
         ec:c1:17:85:a8:bc:7e:a5:0f:16:9b:06:71:16:c1:f7:4d:ca:
         52:65:9b:0b:64:34:eb:13:3b:05:99:23:6f:3d:5d:e9:a0:8a:
         1d:7c:b5:2a:5e:02:64:e5:7c:e5:64:ab:de:89:c2:35:82:2c:
         a3:81:25:ef:c7:d6:9f:1c:67:6b:2e:4e:14:f5:1c:e1:7c:c0:
         05:e7:d5:f1:0f:c2:69:37:37:1f:09:a3:19:66:19:4a:85:38:
         ca:a6:b2:8c:6b:ca:1a:8a:91:c9:53:6a:e6:0e:10:5d:fa:9f:
         bb:1d:8f:2b:b8:93:24:43:b3:0b:00:b0:83:07:22:11:2c:10:
         30:fc:8f:ec:2f:44:53:49:83:70:e7:4c:f6:d7:a7:25:51:b9:
         9f:de:e5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:35:09 2025 by rpki-client