Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4df05836-7c4f-3978-90bf-0f1daacf804d.roa
File:                     4df05836-7c4f-3978-90bf-0f1daacf804d.roa (raw, json)
Hash identifier:          uV2r+iRFBygmEog7DlvSX1s3E08Q+PGiNFgQFeo6ZTo=
Subject key identifier:   D1:DB:A8:AC:B5:C2:C7:EE:28:AE:53:6E:0F:6C:71:1E:43:56:0D:62
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B663204DF7FAECC5B2A178480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4df05836-7c4f-3978-90bf-0f1daacf804d.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     10557
IP address blocks:        104.253.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:04:df:7f:ae:cc:5b:2a:17:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=6ad8a537-401e-4dc3-baac-6efee019413c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:30:7c:51:7d:c3:82:41:b3:d7:2c:9a:9b:27:
                    97:60:6a:3b:f2:75:55:77:c8:52:60:5e:b8:ca:2a:
                    2e:4c:cf:22:db:24:0a:90:ab:7a:08:24:9a:d8:fb:
                    88:a8:46:5d:64:44:3a:25:d5:cd:b2:50:68:b9:4b:
                    93:ba:ea:78:5f:6d:d0:47:e4:0a:18:57:88:ce:80:
                    05:84:15:7a:0f:be:6b:9d:ba:5a:9f:3c:73:25:d6:
                    14:6c:ec:c0:54:5e:37:06:36:28:ff:c7:11:82:a4:
                    5c:68:8b:82:8b:63:79:ec:1f:fa:a8:4b:1f:7a:96:
                    f8:28:92:96:83:a5:23:7c:45:f0:bf:d3:8d:f9:24:
                    42:a7:38:77:e1:71:e9:ec:10:f7:8f:5d:ee:7d:8e:
                    d0:42:e2:e7:7e:ce:0d:14:7b:67:7c:43:77:2b:14:
                    5e:6e:84:c1:41:66:e4:eb:d2:fa:3c:da:48:eb:15:
                    cb:55:1f:65:81:fb:2e:f2:01:a6:98:6a:1c:74:ea:
                    f2:60:c3:b2:0a:6c:a6:0a:aa:7f:f8:73:19:c5:ef:
                    b0:a7:fd:84:2d:c6:d0:b6:99:a0:50:a7:59:d0:52:
                    76:d7:2e:aa:a8:50:a0:6c:6b:31:2c:65:f7:92:d1:
                    12:d9:93:7f:04:0a:79:3b:f4:3c:ae:96:f5:26:fb:
                    1f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DB:A8:AC:B5:C2:C7:EE:28:AE:53:6E:0F:6C:71:1E:43:56:0D:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4df05836-7c4f-3978-90bf-0f1daacf804d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:9a:d9:c9:2f:2e:0f:3d:ec:01:a4:c9:cd:d6:36:07:37:9d:
         29:52:3e:31:7e:f4:2b:d9:49:88:e6:83:9b:23:f3:df:23:6a:
         c1:4e:b4:5c:15:7e:db:ac:37:c0:21:19:2f:55:cc:7a:99:96:
         7c:61:b4:e6:fd:7d:19:11:b6:d3:6b:b0:3f:1f:75:43:e0:32:
         04:42:ed:6f:07:40:27:32:c1:fb:a1:72:5d:ea:68:56:ef:3d:
         a0:ca:98:66:3c:39:9a:74:b0:ea:ac:3c:c9:18:4f:2a:af:c1:
         1e:80:e8:6e:fd:a6:39:61:83:f1:29:e8:2f:d7:4b:13:ba:43:
         1c:b9:ac:8d:13:2e:af:e4:d9:5a:35:52:ed:54:3a:d1:1c:d4:
         5a:28:1f:32:96:2b:03:0b:aa:98:b7:43:f8:d5:18:65:7c:ac:
         2a:f3:cb:fe:30:1c:5e:a5:84:65:aa:da:c9:14:aa:e8:72:8d:
         ec:61:11:fc:47:75:d7:3c:ea:70:ca:ad:d2:3f:8d:91:4f:24:
         a4:64:f2:cf:bb:dc:21:1d:54:44:13:e4:3a:d4:1f:ec:b0:16:
         c6:9d:bd:5a:46:0c:14:bb:35:e8:1c:3b:77:96:a8:bc:70:91:
         41:ed:32:03:e1:48:57:74:18:98:7b:67:48:6d:5c:0b:b0:79:
         49:20:68:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgTff67MWyoXhIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk
NmFkOGE1MzctNDAxZS00ZGMzLWJhYWMtNmVmZWUwMTk0MTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjB8UX3DgkGz1yyamyeXYGo78nVVd8hSYF64
yiouTM8i2yQKkKt6CCSa2PuIqEZdZEQ6JdXNslBouUuTuup4X23QR+QKGFeIzoAF
hBV6D75rnbpanzxzJdYUbOzAVF43BjYo/8cRgqRcaIuCi2N57B/6qEsfepb4KJKW
g6UjfEXwv9ON+SRCpzh34XHp7BD3j13ufY7QQuLnfs4NFHtnfEN3KxReboTBQWbk
69L6PNpI6xXLVR9lgfsu8gGmmGocdOryYMOyCmymCqp/+HMZxe+wp/2ELcbQtpmg
UKdZ0FJ21y6qqFCgbGsxLGX3ktES2ZN/BAp5O/Q8rpb1JvsfnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNHbqKy1wsfuKK5Tbg9scR5DVg1iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGRmMDU4MzYtN2M0Zi0z
OTc4LTkwYmYtMGYxZGFhY2Y4MDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP1rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE2a2ckvLg897AGkyc3WNgc3nSlSPjF+9CvZSYjmg5sj898jasFOtFwV
ftusN8AhGS9VzHqZlnxhtOb9fRkRttNrsD8fdUPgMgRC7W8HQCcywfuhcl3qaFbv
PaDKmGY8OZp0sOqsPMkYTyqvwR6A6G79pjlhg/Ep6C/XSxO6Qxy5rI0TLq/k2Vo1
Uu1UOtEc1FooHzKWKwMLqpi3Q/jVGGV8rCrzy/4wHF6lhGWq2skUquhyjexhEfxH
ddc86nDKrdI/jZFPJKRk8s+73CEdVEQT5DrUH+ywFsadvVpGDBS7NegcO3eWqLxw
kUHtMgPhSFd0GJh7Z0htXAuweUkgaCg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:35:16 2025 by rpki-client