Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d55dbbf-de60-3eb0-9ede-444b415a49f3.roa
File:                     4d55dbbf-de60-3eb0-9ede-444b415a49f3.roa (raw, json)
Hash identifier:          zt5dEts36RhXKTJh6itv+sQa3Hsstc2uORmKbBfxepw=
Subject key identifier:   F3:02:8F:DC:FE:0D:33:79:84:BB:10:9E:B9:74:64:17:89:4B:11:E9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B901228C683B700624A9B7480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d55dbbf-de60-3eb0-9ede-444b415a49f3.roa
Signing time:             Sat 18 Oct 2025 13:00:39 +0000
ROA not before:           Sat 18 Oct 2025 13:00:39 +0000
ROA not after:            Fri 16 Jan 2026 14:00:39 +0000
asID:                     18779
IP address blocks:        104.165.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:90:12:28:c6:83:b7:00:62:4a:9b:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 18 13:00:39 2025 GMT
            Not After : Jan 16 14:00:39 2026 GMT
        Subject: CN=48b4579a-5598-4d34-b07d-70e892e41ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fb:ba:b9:bf:ab:87:ba:23:b8:a3:ec:3f:41:
                    03:2e:3e:01:07:63:c2:ba:5b:21:f3:d3:d5:18:2b:
                    23:5c:9d:c9:32:40:4b:bd:2d:60:0c:c3:fd:69:75:
                    69:01:8c:a2:9e:ea:30:65:5b:40:76:1b:10:0a:d8:
                    01:7b:64:7f:dd:36:8a:36:58:96:63:f3:06:67:ed:
                    de:9e:20:a4:3b:07:4f:91:cc:00:2a:42:5e:01:b0:
                    bf:7a:46:ee:f2:8e:f8:5b:5f:ca:7d:66:ed:9c:c7:
                    49:35:03:16:99:18:56:6a:d8:86:fa:96:3d:82:76:
                    27:96:9b:5f:75:98:8f:34:1c:ec:01:9d:f0:af:aa:
                    16:96:e4:97:9b:67:9e:0c:a4:0c:c7:ac:bf:f7:c9:
                    86:e4:ce:0b:fd:d4:01:97:08:aa:81:e7:81:4c:fd:
                    c1:f1:ab:05:89:bd:a7:c4:fb:82:e4:b2:d9:66:05:
                    81:b3:db:db:1a:84:84:ed:e2:64:1b:9e:4a:3e:e2:
                    d3:49:46:fd:c5:54:1d:2f:18:12:cf:17:8b:b8:7d:
                    8a:db:1f:1b:f6:a4:83:15:46:eb:08:b9:d3:d4:dd:
                    2d:70:a1:54:e4:de:33:34:7d:c7:b1:be:36:4a:86:
                    22:bf:c4:f3:d4:c7:fb:9c:7b:1b:9b:7c:df:3d:e3:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:02:8F:DC:FE:0D:33:79:84:BB:10:9E:B9:74:64:17:89:4B:11:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d55dbbf-de60-3eb0-9ede-444b415a49f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ce:57:a4:cf:d6:8a:bb:d3:6c:ac:7d:70:38:e5:a6:85:13:
         75:f2:5b:71:54:8f:2b:78:e3:54:07:cf:1b:0a:19:f7:84:81:
         6f:57:89:d3:80:7a:ee:1c:51:a1:b1:0f:16:19:be:7b:e8:b8:
         dc:79:ce:4d:27:73:85:45:e7:00:8d:d6:fd:65:98:36:3d:59:
         2a:d1:28:45:54:33:5e:dd:99:b4:43:83:53:8c:5c:c6:1d:3d:
         ec:3d:fc:db:ba:93:d5:35:a7:b9:66:ac:7c:06:92:bd:6d:a3:
         8c:48:a0:ae:e4:7d:f9:6d:a5:cc:82:c9:34:c7:d9:d9:5b:ae:
         c4:71:0e:cd:32:a6:aa:ad:18:a5:d1:4b:81:b9:19:99:19:47:
         3f:c1:c8:3c:bc:31:9c:58:44:a7:f2:6a:d8:64:1c:68:35:86:
         4e:d8:f5:d2:0d:af:98:67:c1:2f:14:78:6a:29:ed:94:f7:f8:
         13:7a:46:66:76:c4:1c:44:e5:94:ae:ec:34:f0:03:b0:29:58:
         c4:8f:80:28:db:0c:c7:01:0b:76:6c:25:09:45:d6:8d:a7:d6:
         51:38:8a:80:31:90:1c:2c:5d:6d:e5:39:06:a2:79:f9:fc:da:
         2b:12:8b:4e:54:d4:e7:3f:38:3a:f3:2e:67:2f:c8:d4:1a:0d:
         26:9d:20:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:17:52 2025 by rpki-client