Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c8b8fbe-61a2-3913-940d-baf97c7153ef.roa
File:                     3c8b8fbe-61a2-3913-940d-baf97c7153ef.roa (raw, json)
Hash identifier:          GWSHs+CsOHdPf4sPG/HAFVa9ZuarQSRlOISdRp2Juf0=
Subject key identifier:   CF:92:B0:CD:12:FF:8F:AC:3A:54:76:CF:46:14:C0:A0:0E:B6:98:44
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B90122A71A9F913D61F884040
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c8b8fbe-61a2-3913-940d-baf97c7153ef.roa
Signing time:             Sat 18 Oct 2025 13:00:39 +0000
ROA not before:           Sat 18 Oct 2025 13:00:39 +0000
ROA not after:            Fri 16 Jan 2026 14:00:39 +0000
asID:                     18779
IP address blocks:        104.164.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:90:12:2a:71:a9:f9:13:d6:1f:88:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 18 13:00:39 2025 GMT
            Not After : Jan 16 14:00:39 2026 GMT
        Subject: CN=7903c921-5d55-41a0-a56c-f8cbec50dd99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b1:e3:ee:96:f5:6e:1b:3b:b8:7b:3b:97:93:
                    35:f2:de:44:1c:41:6e:5a:b4:f2:e3:0f:cb:74:ab:
                    40:5e:cc:1b:1b:32:58:e7:9b:27:a7:32:0b:5d:61:
                    3b:0c:0e:45:11:82:45:c8:44:e0:07:f3:74:11:5c:
                    7a:85:0d:38:4f:c9:0b:22:9f:5c:b6:42:92:6a:7d:
                    fe:c4:1f:71:97:3b:dc:f3:ff:35:69:d3:94:61:36:
                    d6:e9:5b:65:93:da:7a:0d:2f:fe:58:b8:f5:16:bb:
                    66:d1:6c:01:db:bf:a7:70:e1:1a:93:00:f0:3b:a2:
                    3a:ad:d2:79:a6:2a:ee:f1:2b:ef:fc:43:b7:9d:57:
                    47:0d:4a:4d:df:33:28:4d:f2:d3:83:98:27:87:44:
                    7d:ee:e7:27:d2:92:4c:c0:50:55:fd:6f:ca:5b:59:
                    70:24:95:93:27:c1:61:03:e4:60:b9:d8:c5:de:58:
                    33:e3:6f:34:36:14:18:a5:1a:0a:e8:c7:64:b6:b5:
                    e2:00:13:39:5c:be:f8:00:c7:4e:8a:50:0f:e4:2e:
                    a2:73:73:32:1f:f7:fa:b0:b5:b5:48:dd:1d:f9:52:
                    c0:3e:93:18:9c:da:1a:bb:c5:70:3f:4e:0e:8e:52:
                    69:96:91:cf:b9:d9:bd:44:07:b8:10:3a:b8:62:c2:
                    b2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:92:B0:CD:12:FF:8F:AC:3A:54:76:CF:46:14:C0:A0:0E:B6:98:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3c8b8fbe-61a2-3913-940d-baf97c7153ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:ab:c3:9e:80:c7:65:f3:3f:57:89:9d:a2:1a:86:58:b6:82:
         c9:14:50:0b:69:58:fc:bb:21:07:35:85:a5:ed:b1:99:ef:61:
         a4:36:36:81:20:46:3a:8d:ff:fc:60:88:b8:a9:a0:de:81:7c:
         0d:57:71:eb:f5:7c:d9:31:a4:8c:52:5b:48:7c:65:b1:b9:0c:
         5a:a0:20:ff:4c:6d:ce:69:79:05:5b:8e:0c:b5:3e:01:4f:86:
         fd:2d:47:28:0e:62:bc:c2:1d:ba:f7:51:4c:9c:59:ee:61:5e:
         60:5c:ce:11:90:61:bb:89:27:8f:2c:04:69:7f:17:a2:5a:db:
         69:1c:80:65:76:68:e4:a6:70:97:ab:12:73:7e:07:da:8d:55:
         98:01:d7:dc:f6:ec:7f:52:d1:cd:bf:0b:46:c2:d9:16:9c:20:
         ef:98:56:e2:1e:b1:e3:1b:4c:33:36:f0:89:a8:ed:c0:f2:23:
         62:fd:8f:4d:5a:0f:ed:57:a4:64:cd:03:ad:12:d6:1b:c8:25:
         b5:2e:bf:34:2b:08:6a:31:c9:d0:a9:f7:0b:04:c4:9b:b8:74:
         c1:fa:ea:90:24:c7:1a:86:5c:f6:bc:b4:54:5e:03:26:69:f2:
         64:c8:72:52:8e:da:b7:6c:42:8c:0a:fc:1d:7a:98:31:c7:00:
         d7:3d:3c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:28:31 2025 by rpki-client