Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3540636a-0ab7-38d3-8ee7-014a1e269346.roa
File:                     3540636a-0ab7-38d3-8ee7-014a1e269346.roa (raw, json)
Hash identifier:          0zrbuhex1VLm+zV2kYXEFg5VuT2m4uqhozUGcKp3a1c=
Subject key identifier:   0D:18:F1:AC:B0:70:80:6A:B3:C5:4B:B5:66:C0:84:6D:2B:19:19:52
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE6EBAB56B89D9CDDDBB00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3540636a-0ab7-38d3-8ee7-014a1e269346.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        104.164.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:6e:ba:b5:6b:89:d9:cd:dd:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=812b4fe1-bc99-4372-9572-da89264d85e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6d:d4:f6:ab:b3:12:b8:25:2a:47:10:03:00:
                    d0:8d:7e:be:ae:f8:6a:ea:79:87:de:6a:6f:b3:27:
                    43:e9:ad:94:50:30:f4:c8:16:e9:14:69:2a:3b:db:
                    4d:01:da:57:70:60:da:a5:e7:48:c3:f5:12:04:64:
                    0d:1b:83:39:53:b9:99:8b:46:2c:de:83:29:85:2f:
                    cf:96:e5:94:99:80:68:df:05:34:05:fb:df:30:72:
                    eb:16:17:f6:dd:b7:ab:02:b1:2e:49:2c:fc:f4:98:
                    e0:3c:46:e4:34:b8:b0:77:f4:ed:02:81:70:94:39:
                    31:8c:fc:a1:78:d8:07:a9:5c:c6:bb:dd:a4:65:30:
                    9b:9c:22:35:c8:41:21:00:e0:4e:2c:d3:13:b7:11:
                    6a:2a:75:f5:7f:04:87:73:82:7b:f5:bd:a8:f7:26:
                    ef:34:c5:92:43:67:a8:cd:7d:57:fd:8f:ac:bd:7a:
                    7c:50:6e:cc:aa:e0:73:a8:f6:f9:3b:b1:fe:be:bf:
                    57:8c:28:1f:84:72:98:68:ed:8e:b8:97:5e:d4:5a:
                    01:0c:78:1e:d4:0f:d7:82:f5:b2:27:61:67:40:cd:
                    c2:ed:9e:84:69:af:c5:25:a9:1f:47:57:27:83:5c:
                    18:c2:f0:9b:bf:ed:06:04:45:a5:3e:14:01:b0:57:
                    fd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:18:F1:AC:B0:70:80:6A:B3:C5:4B:B5:66:C0:84:6D:2B:19:19:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3540636a-0ab7-38d3-8ee7-014a1e269346.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:cc:30:8f:2d:5f:98:d1:f2:a8:ea:1e:b9:37:4b:d5:11:67:
         44:f7:1c:18:fa:94:dd:e9:54:92:60:c0:cb:8b:85:90:fb:60:
         de:fb:31:95:4d:7d:a8:c1:53:19:7f:27:ae:a3:2e:71:50:2d:
         e1:53:4a:55:45:cf:05:0b:0e:69:18:93:8f:83:9c:7c:20:c0:
         b1:bc:34:56:18:6d:cb:ec:82:c1:85:63:e4:70:de:40:3c:c3:
         3d:7b:17:4a:a1:98:90:45:cc:c2:3e:d7:7b:47:0f:cf:81:8c:
         19:79:6e:86:dd:e6:84:47:e5:09:c7:2d:2f:22:a8:27:c9:f6:
         90:7f:8d:d2:62:43:16:1b:73:c2:e7:b6:73:7f:85:9f:66:b2:
         b2:19:f5:e2:4a:ba:4a:89:8d:5b:0a:cf:96:73:97:56:4e:55:
         a7:e4:f8:8d:05:d7:8a:8f:7a:8f:7f:30:65:82:26:31:6b:54:
         d9:5b:53:77:df:83:11:4c:7a:e0:18:12:32:00:45:0b:ac:fe:
         ee:e7:1d:52:48:65:87:3f:99:16:f4:57:74:60:80:9c:3d:8e:
         41:ff:bd:65:8f:be:aa:36:e4:7e:7a:a9:f7:4c:77:f0:6b:ac:
         a8:cc:15:33:64:51:72:cc:32:fe:0e:12:60:6f:66:4f:3b:d0:
         6f:d9:c6:60
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzm66tWuJ2c3duwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
ODEyYjRmZTEtYmM5OS00MzcyLTk1NzItZGE4OTI2NGQ4NWU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu23U9quzErglKkcQAwDQjX6+rvhq6nmH3mpv
sydD6a2UUDD0yBbpFGkqO9tNAdpXcGDapedIw/USBGQNG4M5U7mZi0Ys3oMphS/P
luWUmYBo3wU0BfvfMHLrFhf23berArEuSSz89JjgPEbkNLiwd/TtAoFwlDkxjPyh
eNgHqVzGu92kZTCbnCI1yEEhAOBOLNMTtxFqKnX1fwSHc4J79b2o9ybvNMWSQ2eo
zX1X/Y+svXp8UG7MquBzqPb5O7H+vr9XjCgfhHKYaO2OuJde1FoBDHge1A/XgvWy
J2FnQM3C7Z6Eaa/FJakfR1cng1wYwvCbv+0GBEWlPhQBsFf9tQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA0Y8aywcIBqs8VLtWbAhG0rGRlSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzU0MDYzNmEtMGFiNy0z
OGQzLThlZTctMDE0YTFlMjY5MzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKSpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAbMMI8tX5jR8qjqHrk3S9URZ0T3HBj6lN3pVJJgwMuLhZD7YN77MZVN
fajBUxl/J66jLnFQLeFTSlVFzwULDmkYk4+DnHwgwLG8NFYYbcvsgsGFY+Rw3kA8
wz17F0qhmJBFzMI+13tHD8+BjBl5bobd5oRH5QnHLS8iqCfJ9pB/jdJiQxYbc8Ln
tnN/hZ9msrIZ9eJKukqJjVsKz5Zzl1ZOVafk+I0F14qPeo9/MGWCJjFrVNlbU3ff
gxFMeuAYEjIARQus/u7nHVJIZYc/mRb0V3RggJw9jkH/vWWPvqo25H56qfdMd/Br
rKjMFTNkUXLMMv4OEmBvZk870G/ZxmA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:02:24 2025 by rpki-client