Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7c7607ad-8871-33ff-97ee-f7877105c8ba.roa
File:                     7c7607ad-8871-33ff-97ee-f7877105c8ba.roa (raw, json)
Hash identifier:          1s24ogdLz/DOXwNt9jEqmMLQ+p6zmJAFe5Zu1bO1Ttc=
Subject key identifier:   05:DF:3A:67:47:ED:E2:7B:AB:4B:F1:D5:DD:D0:C5:8E:CE:EA:1D:C4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B92DD8D57E7817B34D9B33940
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7c7607ad-8871-33ff-97ee-f7877105c8ba.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     18779
IP address blocks:        104.253.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:8d:57:e7:81:7b:34:d9:b3:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=0d751f15-f534-4e8d-a492-34ad8dbad27d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3f:75:51:37:db:98:a5:2e:ed:65:88:ef:79:
                    c5:60:d9:0c:a3:b9:1d:0c:d1:21:e3:46:b7:b5:ee:
                    b4:af:1f:bd:5f:40:12:54:de:49:ae:48:df:f7:21:
                    6b:50:2f:5d:b6:11:04:33:90:4f:66:fc:05:a3:73:
                    60:be:0c:2e:df:42:31:de:99:d7:f5:2a:64:ea:a4:
                    62:47:ba:94:8d:2a:c4:c6:c8:d1:8e:21:7d:97:87:
                    e1:a5:e8:8c:7e:3a:bb:33:78:05:a5:af:b6:c4:ea:
                    4b:38:26:74:43:d3:19:97:ab:65:da:83:49:29:eb:
                    ee:f1:b0:09:00:39:cf:1a:1d:29:b2:45:d9:f6:4a:
                    fa:72:26:f7:5a:d5:a3:0a:13:e6:c2:02:60:cc:bc:
                    59:1f:4d:10:b8:69:ab:c1:a8:55:03:df:04:05:f3:
                    0b:92:fc:a1:cd:54:d0:bd:49:15:ac:90:e1:b8:fb:
                    9d:42:4e:d1:08:8a:ff:64:09:26:e4:4c:4e:64:de:
                    49:75:5c:dc:51:1c:43:2d:ad:31:a9:73:f1:57:21:
                    9c:ca:a1:71:73:a6:e2:be:b9:d1:8e:91:f9:36:f5:
                    96:12:5a:50:19:e7:8c:50:9f:6f:92:1b:a2:dd:14:
                    46:2d:d5:ef:92:84:5f:f3:f8:fc:70:56:ba:ed:64:
                    cc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DF:3A:67:47:ED:E2:7B:AB:4B:F1:D5:DD:D0:C5:8E:CE:EA:1D:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7c7607ad-8871-33ff-97ee-f7877105c8ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:a5:f4:3e:c9:dc:29:d7:3e:59:e8:e0:89:d8:d7:af:bc:b9:
         91:49:58:91:0d:4b:55:4c:e2:b4:c0:b4:8f:11:9d:f3:df:37:
         dc:b8:8a:35:8d:d1:18:96:a8:58:17:e8:50:20:de:d7:41:4c:
         5f:8f:ce:99:eb:e0:d9:a7:35:53:a2:8d:e6:fd:3f:41:91:07:
         6d:55:99:ea:27:83:0b:f5:87:6b:8f:ef:89:be:5a:d8:a9:cb:
         57:d1:04:9b:ad:30:2f:b4:d9:59:e1:4b:c6:b1:95:26:74:1b:
         e1:87:95:7b:06:96:c7:18:5b:55:f4:b1:42:8b:87:ea:b0:d2:
         4f:a1:54:9e:1a:85:6d:d9:ea:a9:e5:9c:66:f6:df:66:c8:84:
         e1:ed:d4:c3:36:ac:f6:01:86:dc:f2:e9:1b:15:88:88:e6:fc:
         5a:6d:24:f0:8f:41:c4:c2:fa:6d:9b:c2:c6:ef:4e:73:bc:ec:
         72:fe:c8:09:48:aa:d2:7f:b3:1a:d3:36:51:b4:34:f3:00:e3:
         cf:3d:d3:c1:db:ee:36:7b:b7:7b:22:4f:ae:f8:b4:e9:11:ae:
         33:ca:4a:c0:c1:5a:21:19:26:ad:d1:8e:db:ef:43:da:f5:01:
         c7:09:00:29:03:9a:04:81:79:90:4d:5a:21:38:50:9f:fd:49:
         5a:d2:cc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:20:46 2025 by rpki-client