Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6368b0d6-54dc-3e14-9c96-ef9992a53554.roa
File:                     6368b0d6-54dc-3e14-9c96-ef9992a53554.roa (raw, json)
Hash identifier:          BijMTi2+OnnKdb0lGuSSHcfOsGSUz/6iw2c7SpcBOMg=
Subject key identifier:   CD:EE:BB:48:A7:56:3A:0D:FC:33:34:89:C2:5D:DB:82:58:21:8D:9D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE73D86BD97E42697BB280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6368b0d6-54dc-3e14-9c96-ef9992a53554.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        104.165.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:73:d8:6b:d9:7e:42:69:7b:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=6198ab81-ad93-4353-b6e9-a365b905901b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:09:11:18:b0:d8:26:91:a8:dc:28:d3:5c:2b:
                    47:3b:f9:6e:1d:02:60:55:2b:9f:12:79:05:0f:3d:
                    99:8e:78:fd:2c:7b:e7:d0:65:33:d0:ad:be:d6:96:
                    26:33:07:8b:a8:0d:4a:b1:23:37:fa:5a:ea:5b:39:
                    a2:89:12:ea:a2:62:95:ec:81:dd:1a:a2:77:10:a9:
                    06:c6:51:d7:ed:e5:ae:a9:2c:91:1e:19:c3:75:89:
                    29:c2:51:4f:70:0e:77:0f:94:7a:77:d4:6b:87:5f:
                    15:8a:71:f8:44:47:bb:a8:78:b7:c1:f5:ab:57:12:
                    64:ec:4a:0a:9a:a0:e6:7b:b7:8c:87:75:df:e4:01:
                    32:95:9e:6e:0d:a2:40:e0:aa:6a:7b:e2:ff:1c:e0:
                    9b:d0:07:44:6c:90:05:35:55:a4:68:c1:57:11:50:
                    38:71:3b:64:3f:51:7e:8e:ed:0e:d9:56:1a:b1:11:
                    3c:4d:7d:e4:73:ac:6c:06:45:41:d2:7a:2a:22:01:
                    1d:5e:eb:76:33:76:d5:ed:5e:7c:d5:e3:d3:20:52:
                    73:68:ca:68:6c:e8:20:2f:4d:80:e6:21:c9:79:6c:
                    60:98:0a:b5:62:db:7b:21:2c:b0:23:5f:cc:ef:84:
                    df:fc:03:47:f6:7d:fb:e6:48:27:f7:77:f1:11:6f:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EE:BB:48:A7:56:3A:0D:FC:33:34:89:C2:5D:DB:82:58:21:8D:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6368b0d6-54dc-3e14-9c96-ef9992a53554.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:95:11:4a:52:4a:7a:86:f7:18:ba:8c:85:d1:8c:9b:0f:95:
         64:87:95:61:86:3c:02:f5:58:71:30:05:87:f5:ee:75:b4:5a:
         b1:11:05:7c:43:83:30:96:dd:b7:74:21:86:ad:a6:db:c8:a4:
         5f:9f:df:1b:9a:86:2e:00:0a:df:54:f0:8f:9d:21:d6:7d:10:
         09:a6:c9:2a:49:ea:14:d1:18:8f:03:78:c9:43:96:7f:3c:4f:
         64:a6:5f:26:67:70:ee:f6:15:6c:74:3a:ee:5d:c3:f9:c3:d4:
         c3:44:b5:54:e9:17:98:47:2d:c1:81:47:b7:98:b5:e9:45:a6:
         31:0d:c2:c8:f3:f8:ff:fc:bc:7b:02:e1:17:13:41:6f:20:fb:
         6f:40:03:d3:25:c8:6f:01:e1:cd:74:72:c7:e1:4a:7d:8e:59:
         20:ff:be:d3:e0:a9:d5:66:df:8c:cf:74:c2:59:a8:56:a0:99:
         7d:ad:ab:eb:60:68:67:e8:65:75:54:4e:f9:67:e0:86:ab:ed:
         d5:31:25:89:35:e2:24:56:28:2f:c0:ca:6f:5d:52:d4:4f:10:
         08:ce:05:da:65:98:c4:0c:37:cd:ea:25:b5:44:c7:7d:0c:f9:
         eb:f8:75:3b:63:99:db:8f:8a:72:90:5c:37:c4:1e:ba:02:2f:
         f2:67:dd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:25:52 2025 by rpki-client