Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d35314b-893a-39f7-9bbb-d00dc9c29923.roa
File:                     9d35314b-893a-39f7-9bbb-d00dc9c29923.roa (raw, json)
Hash identifier:          qq8RMt08/+gBCKCp3lGqDyzDI+qvIjqZc2+P3wZCoZE=
Subject key identifier:   FA:93:8C:29:62:09:AC:68:71:B8:43:DC:97:C7:5E:3B:48:49:00:CD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B8BE2351A8F47FEB6E6A72D80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d35314b-893a-39f7-9bbb-d00dc9c29923.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     50131
IP address blocks:        104.164.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:35:1a:8f:47:fe:b6:e6:a7:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=9fd5f8b2-45ec-4357-9d3e-1bb649e7dbf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9c:0d:dc:89:23:38:d8:cc:f6:75:14:0f:b9:
                    72:0f:a6:78:30:8f:c7:46:ae:ad:b0:2f:cb:13:5b:
                    de:5d:d7:9d:f2:4a:5b:be:79:4a:91:0b:66:4e:d7:
                    f7:47:b0:73:9b:56:83:50:0e:6f:7f:e7:ad:1a:17:
                    42:49:11:04:1d:ca:7c:a5:a3:c9:6d:8a:e5:85:ad:
                    f6:04:d7:9f:eb:ba:7f:c5:9c:a3:32:63:6d:3d:70:
                    a7:eb:04:6c:d2:59:6a:f7:e6:2a:ca:e2:0b:72:86:
                    91:11:73:c5:78:f8:c6:03:27:95:ad:5d:90:72:fd:
                    d8:1b:de:e3:ef:cb:bf:06:52:ee:a7:15:3e:cf:5d:
                    15:bd:a9:80:26:ec:dc:c1:54:f7:be:4c:2a:e1:c5:
                    d2:94:ca:5c:1f:e5:09:26:6c:8e:22:8d:33:12:2b:
                    25:10:ae:04:93:23:ab:ae:63:c3:44:42:e9:90:cd:
                    13:f9:08:d6:44:f8:7c:36:8e:f7:ba:0d:55:39:a9:
                    4d:91:f4:aa:58:08:ff:47:38:f5:d4:6b:98:17:52:
                    f0:ca:8f:98:3d:e8:3b:74:60:36:2d:20:e3:54:5e:
                    18:04:be:ea:94:70:a8:86:31:33:b3:ad:8b:6f:07:
                    4e:41:e1:91:d5:3e:eb:eb:68:c4:37:67:fb:e9:9c:
                    e9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:93:8C:29:62:09:AC:68:71:B8:43:DC:97:C7:5E:3B:48:49:00:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9d35314b-893a-39f7-9bbb-d00dc9c29923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:62:9b:7c:1c:0d:ac:c0:8a:cd:b4:0f:a8:6d:44:a3:da:65:
         1d:38:38:6e:61:76:ec:58:e0:f3:03:df:92:c7:4a:ff:b4:df:
         52:44:1c:3a:a0:20:11:a4:76:eb:d4:39:32:95:12:8b:73:e3:
         3b:96:68:db:3e:33:aa:ee:d1:78:a0:17:d4:d5:db:5f:44:f2:
         47:b3:a5:84:6e:cd:9d:29:21:a5:45:5a:4e:57:ca:93:29:bd:
         7d:c4:7f:ae:af:91:e6:ba:17:f8:60:ec:d3:14:3a:9e:f9:d9:
         ed:2e:8f:b6:d9:ba:07:53:3d:7e:02:71:e7:45:3d:b6:1e:6e:
         47:ee:d3:29:28:05:40:52:8a:a5:2e:2b:85:05:7e:e4:01:e7:
         88:33:9c:44:02:94:6f:49:d2:17:d2:37:8d:0b:94:c3:2b:61:
         6b:e6:2f:5d:f6:69:68:13:13:c2:f1:39:6d:b1:ea:43:e6:23:
         ee:48:d7:d6:a7:d3:c3:5f:a9:0a:41:fb:e2:c7:b4:44:af:cf:
         67:f9:e2:05:18:6f:9b:e8:ae:b0:39:eb:c2:6c:0b:63:ee:51:
         44:8d:1a:68:5b:03:70:17:5d:b1:9d:d5:d6:51:4a:a9:f4:e9:
         4d:11:9b:9b:15:fd:d5:38:3d:9b:db:cc:f9:0f:4b:7b:94:42:
         35:9d:55:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:52:03 2025 by rpki-client