Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/867afe79-3824-30cb-8822-158c538b151e.roa
File:                     867afe79-3824-30cb-8822-158c538b151e.roa (raw, json)
Hash identifier:          lScOldyKtjUmvRbnKPBLZuHTywEDwTdvaDbC6ZySEr0=
Subject key identifier:   9D:46:85:B4:4C:07:FB:22:51:07:35:3F:9E:C4:F4:63:A5:09:18:D2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B90122AA0D7BE2C610DCAEB00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/867afe79-3824-30cb-8822-158c538b151e.roa
Signing time:             Sat 18 Oct 2025 13:00:39 +0000
ROA not before:           Sat 18 Oct 2025 13:00:39 +0000
ROA not after:            Fri 16 Jan 2026 14:00:39 +0000
asID:                     18779
IP address blocks:        104.165.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:90:12:2a:a0:d7:be:2c:61:0d:ca:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 18 13:00:39 2025 GMT
            Not After : Jan 16 14:00:39 2026 GMT
        Subject: CN=3e96555b-ca80-4e73-bc5c-20c2ec641974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:79:11:78:59:72:95:e2:92:a9:ae:cd:46:b0:
                    87:40:db:23:85:71:a9:42:01:e5:c1:6c:f8:e7:05:
                    be:a0:a3:74:e2:8e:10:c4:bc:a2:45:56:99:0d:44:
                    0a:43:21:93:91:69:9c:b9:c3:ab:0c:1b:34:3e:65:
                    5b:f7:89:f3:a8:19:37:fc:87:b5:0e:4b:2d:30:96:
                    db:22:af:d3:4c:77:01:37:12:1c:e5:13:ad:38:50:
                    9f:da:e4:b2:fd:14:ea:15:46:71:15:02:17:56:d9:
                    ff:51:e4:1d:54:f6:a9:16:6f:50:b3:79:24:91:ac:
                    ad:f1:26:5c:38:b4:f1:3b:69:46:0a:cf:b7:cd:2b:
                    c3:aa:49:69:1e:ad:21:99:ff:d6:6c:6b:1d:ab:72:
                    a8:6c:84:59:6d:ea:cb:27:d8:0d:e9:7b:dc:4b:75:
                    8b:7c:5d:40:28:d7:db:d0:7f:bc:d2:85:f1:88:6f:
                    52:7b:11:ed:56:43:f1:64:ca:8f:a2:d9:b4:cd:47:
                    6e:05:06:3c:61:ce:ed:43:2f:c2:a4:4f:4c:28:bc:
                    19:ff:4c:1b:63:8c:24:3a:75:4b:73:b2:d1:b8:f6:
                    0a:4a:d0:66:b2:b9:ee:51:9d:a2:71:1a:5d:02:81:
                    66:75:d3:df:45:fb:38:3a:2d:54:9d:ea:3d:0a:7a:
                    88:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:46:85:B4:4C:07:FB:22:51:07:35:3F:9E:C4:F4:63:A5:09:18:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/867afe79-3824-30cb-8822-158c538b151e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:7f:66:2d:de:83:92:17:72:b6:8e:f1:d6:d4:64:f2:61:36:
         5a:9d:c6:b6:a7:a0:99:64:a1:ff:4c:09:40:63:2e:10:5b:67:
         38:fc:37:f7:06:0d:65:4f:78:de:af:96:cc:ff:67:73:0a:5e:
         4d:2c:64:51:86:86:ca:54:d2:39:fa:52:e8:7d:99:3e:c9:07:
         a3:9a:c3:5f:56:92:0d:e6:ab:09:b8:af:a3:0d:72:94:29:b8:
         35:99:0f:81:e9:3a:f1:e7:ea:60:8a:0e:3b:91:fc:fb:c7:50:
         70:34:be:a7:bc:97:a0:06:39:bd:29:f6:72:c0:d6:5f:20:d4:
         7b:f8:07:1b:22:ea:f6:0e:ac:0d:6b:7f:2c:2f:a7:27:60:c7:
         13:fe:c8:87:3c:59:88:6c:f7:15:dc:cb:8d:df:e7:8a:86:56:
         03:90:f4:cd:bb:a5:be:ef:ce:24:4f:a9:ae:76:de:3e:93:76:
         8f:79:bd:51:52:63:b2:e1:0e:b5:30:f6:f6:4b:b2:f0:1e:54:
         9f:63:97:d5:bd:0c:69:74:61:63:f8:f4:fc:67:ed:35:59:52:
         c0:b6:f9:85:39:85:57:fb:f7:79:cf:90:09:cd:48:8d:be:6a:
         fe:f8:88:41:43:81:8e:f9:13:ab:aa:70:d1:a6:8a:4f:2e:77:
         bf:cb:86:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:21 2025 by rpki-client