Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2ba66495-1e17-379f-9a90-2cc8dbf7141a.roa
File:                     2ba66495-1e17-379f-9a90-2cc8dbf7141a.roa (raw, json)
Hash identifier:          Pz88ijuo+gZsX3sqehX2DddYisNGN4tHJ8TCtMAw2Bs=
Subject key identifier:   85:33:31:E1:BA:11:E6:4F:EA:1F:12:B9:21:48:5F:70:2E:7A:1E:9C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CA36DA67E88C447F5B6A0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2ba66495-1e17-379f-9a90-2cc8dbf7141a.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     11404
IP address blocks:        104.165.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:a3:6d:a6:7e:88:c4:47:f5:b6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=a5025c12-3f48-4b38-b50f-781b69a0dce9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:db:ce:3f:14:41:e7:3b:82:80:58:91:1b:
                    6a:9d:22:dd:21:8a:ed:02:9c:ed:49:f4:2f:a6:0e:
                    24:4b:f0:94:8c:4c:98:4d:d6:e3:f8:dc:ee:98:bb:
                    65:5c:76:31:cd:5a:a1:99:d3:52:dc:89:d6:19:4c:
                    64:72:f8:9b:85:cf:af:ce:b7:a6:c1:f1:07:85:93:
                    cd:8d:08:ae:a6:76:9d:24:11:9b:bb:28:55:0a:3d:
                    fa:f0:32:a8:e8:a3:f7:76:d6:72:64:22:6f:2b:25:
                    9c:4e:ba:49:34:00:83:67:f3:8b:69:d1:85:02:e4:
                    04:41:6e:46:0f:cc:84:3e:ee:b9:c3:08:45:00:34:
                    c6:d8:99:9c:d8:31:c1:40:e2:c4:af:49:63:6b:d2:
                    0f:fc:f8:01:5e:d1:67:c7:d2:94:c6:8d:02:7c:0c:
                    a2:93:b1:08:fd:62:92:00:6b:8e:08:a4:b4:e2:69:
                    ec:5b:0f:f0:4b:df:14:23:e1:50:54:7d:ce:13:23:
                    10:e7:b6:7b:c1:82:ee:fa:5b:81:9c:f8:60:0c:a8:
                    7a:bf:cd:59:06:92:8d:e0:bb:a8:6b:9d:e4:6b:3d:
                    ae:70:be:70:a1:94:48:94:e0:6f:8e:bb:9f:f2:57:
                    cf:1c:a9:0c:47:b6:1c:8e:e8:60:11:33:09:f7:39:
                    c9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:33:31:E1:BA:11:E6:4F:EA:1F:12:B9:21:48:5F:70:2E:7A:1E:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2ba66495-1e17-379f-9a90-2cc8dbf7141a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:18:45:66:b0:40:78:b4:bd:fd:16:9c:c9:b7:8d:71:fb:ac:
         5a:8c:b0:0b:04:9a:bd:7f:7f:a1:21:c1:5e:60:f0:dd:9c:ad:
         2d:be:51:95:0d:70:c4:f8:97:8b:c9:67:c7:6c:7f:64:1e:83:
         92:d9:86:6a:a2:14:c4:84:7f:a3:04:f8:91:72:25:bb:9e:64:
         18:82:16:0f:fc:8d:1a:34:bf:39:97:38:0e:f8:c7:ce:15:bc:
         0c:20:60:aa:ae:41:47:25:50:c9:62:8c:56:2e:f1:72:8d:e1:
         da:8d:be:53:ed:90:02:0e:d9:91:5a:0a:22:35:57:b8:3f:d5:
         8c:a0:6a:c1:01:02:6a:a3:b7:a3:6d:5d:b6:97:8e:80:07:8d:
         42:f5:5b:59:65:b3:21:d6:4c:73:65:bf:6d:8e:6a:34:5f:75:
         59:9c:84:ad:73:75:a2:b3:fe:0f:7a:cb:b2:c7:4c:b0:8a:1e:
         a5:fd:6a:4e:fb:dd:36:b6:19:4c:ab:b2:7e:4a:0c:a7:2d:c4:
         1e:c5:13:ee:7d:75:71:f4:94:8e:3a:23:52:8e:e2:6a:45:0f:
         e1:b6:1a:8d:e1:68:fd:74:82:0f:9a:76:1d:31:45:a7:13:27:
         f6:1a:10:72:5d:9b:cd:03:db:16:b9:0d:3f:c1:e5:27:02:cc:
         94:e1:3c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:05:48 2025 by rpki-client