Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b97d1b9-7f99-38ae-81f7-03995cf891bf.roa
File:                     3b97d1b9-7f99-38ae-81f7-03995cf891bf.roa (raw, json)
Hash identifier:          0Xcd32CpWbYv8/mg8GCtFVB0BuZfrHvjosY6n0U1w5E=
Subject key identifier:   AE:0F:0B:B0:62:02:D7:F0:7B:DA:1B:0D:BF:31:F8:FE:E6:C7:4E:01
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B90122E02001105E2766E33E3
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b97d1b9-7f99-38ae-81f7-03995cf891bf.roa
Signing time:             Sat 18 Oct 2025 13:00:39 +0000
ROA not before:           Sat 18 Oct 2025 13:00:39 +0000
ROA not after:            Fri 16 Jan 2026 14:00:39 +0000
asID:                     18779
IP address blocks:        104.164.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:90:12:2e:02:00:11:05:e2:76:6e:33:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 18 13:00:39 2025 GMT
            Not After : Jan 16 14:00:39 2026 GMT
        Subject: CN=8c27a100-12e1-4b7a-bf01-7191c6d5b5c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:08:51:05:ad:c4:8d:3f:a2:95:8f:8d:81:
                    54:6d:f6:b1:25:60:e5:52:0f:af:89:09:a8:1a:f9:
                    b8:40:12:2b:80:ec:ed:fc:2d:c6:44:83:f2:1c:72:
                    40:08:8c:84:2d:5d:76:a3:e3:90:a8:a0:45:12:cf:
                    cb:cb:79:82:bc:ca:60:c9:75:fc:fc:58:7c:76:78:
                    e0:e7:fd:17:ae:a7:b1:22:fa:70:6d:a1:53:0f:c1:
                    9e:fc:3b:65:6e:82:c3:b7:c1:57:c4:b7:5c:4f:10:
                    54:4b:85:ce:07:e1:27:27:c3:23:00:33:a8:a3:cd:
                    aa:1e:20:5f:b1:26:38:07:3e:ef:e2:ad:19:af:5b:
                    9a:02:27:2c:64:9a:eb:a4:bd:d2:62:3d:b5:1d:37:
                    62:03:f7:ff:20:f9:a9:83:b0:62:39:52:45:43:25:
                    0f:6b:ff:85:00:dc:b9:ea:b5:83:85:e0:ae:20:aa:
                    2a:70:06:64:3a:dd:1c:af:ef:95:11:de:b9:cc:93:
                    7b:4b:7f:52:3f:22:25:2c:09:2a:8a:7d:81:e4:e7:
                    34:52:50:5e:73:29:6a:8e:5f:11:34:a2:a8:1e:9c:
                    93:46:60:3b:c3:c0:46:dd:1a:0a:ed:c0:e0:0b:1e:
                    c5:ae:2f:b0:a1:cc:d3:fa:fd:58:15:80:ef:58:72:
                    30:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:0F:0B:B0:62:02:D7:F0:7B:DA:1B:0D:BF:31:F8:FE:E6:C7:4E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b97d1b9-7f99-38ae-81f7-03995cf891bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:52:14:9d:05:a4:dc:68:03:f1:66:ed:27:b7:c7:e6:9a:4b:
         20:31:f6:e9:e8:bb:5d:d4:7c:08:41:ce:a1:6c:5a:45:ff:22:
         52:9b:c9:4b:14:74:55:3d:d4:d2:d2:f6:9f:9a:2e:d8:9d:ac:
         5d:34:5b:17:66:87:73:f9:b1:f0:e0:f8:3a:8d:e2:1a:0f:0a:
         53:08:87:e3:a1:a9:41:0f:cd:32:8b:dd:95:81:25:51:b3:80:
         65:77:b4:d5:29:6a:45:cc:c4:96:d0:94:9f:c1:86:b8:3b:eb:
         0c:e8:2f:c1:40:35:d0:e0:ac:62:fa:9e:4b:b0:71:df:19:cf:
         11:f9:79:a8:de:d4:81:87:f7:82:32:b8:68:ea:73:7b:f0:3b:
         a3:79:0b:e8:ee:b6:7c:b4:48:5d:10:76:68:8e:3f:60:c6:11:
         91:91:2a:ae:fd:22:b6:d5:c4:c1:3c:20:0b:8f:7c:7f:eb:e8:
         ff:69:2e:97:c9:f9:b0:7f:c0:0c:72:9b:a8:fc:37:fd:63:bd:
         9f:38:c5:9d:d0:c8:99:ac:2c:11:39:fe:c1:c6:e0:d9:e0:42:
         b5:89:5d:57:9f:87:5d:f3:6a:da:32:41:57:c7:22:d1:ab:59:
         18:ec:d0:99:e5:64:ef:83:4d:3d:d3:a7:c9:7c:1b:c9:53:61:
         fe:82:d6:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuQEi4CABEF4nZuM+MwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MTAxODEzMDAzOVoXDTI2MDExNjE0MDAzOVowLzEtMCsGA1UEAxMk
OGMyN2ExMDAtMTJlMS00YjdhLWJmMDEtNzE5MWM2ZDViNWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9cIUQWtxI0/opWPjYFUbfaxJWDlUg+viQmo
Gvm4QBIrgOzt/C3GRIPyHHJACIyELV12o+OQqKBFEs/Ly3mCvMpgyXX8/Fh8dnjg
5/0XrqexIvpwbaFTD8Ge/DtlboLDt8FXxLdcTxBUS4XOB+EnJ8MjADOoo82qHiBf
sSY4Bz7v4q0Zr1uaAicsZJrrpL3SYj21HTdiA/f/IPmpg7BiOVJFQyUPa/+FANy5
6rWDheCuIKoqcAZkOt0cr++VEd65zJN7S39SPyIlLAkqin2B5Oc0UlBecylqjl8R
NKKoHpyTRmA7w8BG3RoK7cDgCx7Fri+woczT+v1YFYDvWHIwlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK4PC7BiAtfwe9obDb8x+P7mx04BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2I5N2QxYjktN2Y5OS0z
OGFlLTgxZjctMDM5OTVjZjg5MWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKSqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFRSFJ0FpNxoA/Fm7Se3x+aaSyAx9unou13UfAhBzqFsWkX/IlKbyUsU
dFU91NLS9p+aLtidrF00Wxdmh3P5sfDg+DqN4hoPClMIh+OhqUEPzTKL3ZWBJVGz
gGV3tNUpakXMxJbQlJ/Bhrg76wzoL8FANdDgrGL6nkuwcd8ZzxH5eaje1IGH94Iy
uGjqc3vwO6N5C+jutny0SF0QdmiOP2DGEZGRKq79IrbVxME8IAuPfH/r6P9pLpfJ
+bB/wAxym6j8N/1jvZ84xZ3QyJmsLBE5/sHG4NngQrWJXVefh13zatoyQVfHItGr
WRjs0JnlZO+DTT3Tp8l8G8lTYf6C1ms=
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:48:14 2025 by rpki-client