Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af72e66f-28fb-3feb-8cce-ac867868e172.roa
File:                     af72e66f-28fb-3feb-8cce-ac867868e172.roa (raw, json)
Hash identifier:          ColR0D4JU+5/FZk2nL22guNZ8ujOD8QeXmtOi5jGMPA=
Subject key identifier:   1B:CC:BD:FB:9C:72:77:40:25:ED:69:2E:B2:D4:66:E2:74:36:16:5A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B758CA26775CB189E22922800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af72e66f-28fb-3feb-8cce-ac867868e172.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     54600
IP address blocks:        104.164.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:a2:67:75:cb:18:9e:22:92:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=ce4d6075-33e7-49a4-9705-f2dbf895708f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fe:99:2c:9e:c7:56:cf:c5:c1:e4:2e:e7:57:
                    c0:24:a9:a9:1b:32:38:4d:0d:e1:c9:1d:a5:11:92:
                    10:5b:57:dc:36:9c:3a:4c:79:51:e1:dd:62:2f:95:
                    3e:bb:17:5b:5c:dd:95:c7:dd:0e:4e:40:37:45:9f:
                    eb:bf:78:58:e9:d5:5a:12:e0:7c:ca:92:f2:37:f8:
                    ed:7b:85:65:73:c9:93:c3:d5:e1:bd:70:f1:37:51:
                    ef:7d:10:0d:7e:b4:15:59:8c:0f:55:08:02:a4:cf:
                    48:9d:12:83:ce:0b:e4:49:b4:bd:db:e5:e2:f2:a9:
                    b5:11:d6:f1:73:e6:5e:5c:38:6b:0c:5f:b8:50:5c:
                    73:dc:bf:d3:c2:25:82:35:83:44:89:a8:47:b9:21:
                    e7:b2:01:f0:91:0f:d0:11:cb:11:64:c9:29:a3:25:
                    77:96:fc:c6:78:ad:ef:58:a3:8e:01:34:c3:6b:ed:
                    e8:33:d6:53:2f:36:5e:9b:3b:ba:e6:09:df:b4:12:
                    5c:4a:f1:1f:b1:cd:b3:43:f4:c7:46:d1:c9:02:9a:
                    f8:26:f3:f9:9e:65:46:a3:0a:e6:1c:ec:2e:dc:d2:
                    33:40:69:77:7e:9d:61:83:4c:23:0d:39:88:d0:b9:
                    05:2e:f8:57:63:19:83:f0:2d:06:10:df:53:10:6e:
                    f2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CC:BD:FB:9C:72:77:40:25:ED:69:2E:B2:D4:66:E2:74:36:16:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/af72e66f-28fb-3feb-8cce-ac867868e172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:d9:6e:2f:3c:6f:63:50:fa:3b:25:73:0e:02:eb:77:be:e7:
         c2:29:15:de:f0:74:c5:22:a1:d3:c2:fb:90:c0:08:ed:1a:8e:
         77:9b:3d:d9:27:6e:74:2d:8d:4b:a9:74:20:13:2e:3c:3b:cc:
         cc:6f:5a:27:5c:94:bd:f1:bc:6c:41:81:02:37:62:63:6d:c3:
         c3:c6:d3:bc:3c:bf:87:57:12:24:ba:b2:b4:ea:b5:4f:ec:1a:
         f5:af:fc:cb:f4:83:45:2e:c5:14:a2:a9:ea:94:84:94:26:c9:
         a6:c5:02:cb:8a:73:cf:a0:55:5d:3b:3f:78:84:d2:9a:a4:9a:
         c7:12:46:3a:41:5e:e1:53:5e:4f:89:58:de:a2:01:e1:f7:e2:
         1a:ec:61:22:74:26:93:32:b4:7d:cd:01:3e:a2:95:7d:ed:fe:
         d5:ba:c5:77:1d:01:58:37:06:30:94:6f:d6:ba:59:86:f6:bd:
         3d:85:7b:c4:68:40:91:d6:ef:6c:22:d4:b9:34:7a:26:20:7e:
         4d:1a:a7:bf:11:4e:e2:81:35:b0:83:3c:89:b9:17:32:70:b4:
         6b:c8:48:ee:94:09:cd:66:24:24:ef:f0:5b:5c:1b:07:a9:ce:
         b8:0e:f4:30:9a:2d:fe:5b:f7:cd:09:7f:ae:36:80:c4:86:fd:
         af:89:21:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:53:00 2025 by rpki-client