Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b2630225-1ec3-31f1-80fb-860438670e43.roa
File:                     b2630225-1ec3-31f1-80fb-860438670e43.roa (raw, json)
Hash identifier:          rHk2yHnKOSw73Z8S+koNSCicaIdwqbaNVyO1HVylSAo=
Subject key identifier:   61:F8:1C:A5:FD:7F:7E:6E:F6:D2:A3:6E:E6:D2:B3:CE:AE:43:17:FF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B92DD8D89419480AD04D5B080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b2630225-1ec3-31f1-80fb-860438670e43.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     18779
IP address blocks:        104.252.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:8d:89:41:94:80:ad:04:d5:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=d4e13d4f-5019-490a-ac40-ae4daf4f4563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:88:97:9c:77:37:93:de:82:c5:b8:38:4c:97:
                    2d:36:56:7e:cd:b9:51:77:90:c0:c9:ab:78:ab:e9:
                    bd:5f:35:7d:c9:4a:bb:da:32:59:1f:7f:4c:3c:2f:
                    f9:d8:f9:e4:78:02:f0:eb:2b:ff:2f:aa:9f:83:bb:
                    ed:7e:1b:7f:18:7b:6c:6d:99:6a:b8:97:4d:5b:f2:
                    92:8a:62:01:d5:a6:e1:08:f0:70:34:4e:a2:25:73:
                    ed:0a:32:d0:2c:7f:07:6c:2e:dc:e7:fd:45:61:02:
                    e3:b1:93:7c:22:36:41:ae:06:b6:d6:f1:a1:0f:d2:
                    e3:5b:30:83:25:2d:9f:69:1e:29:df:ad:d4:2c:49:
                    8e:1d:68:08:8d:55:0e:73:fb:c8:b2:d7:a5:0a:d6:
                    03:0f:56:f9:c8:c6:5e:62:90:2d:04:30:74:1b:72:
                    71:9b:82:36:d3:a8:01:23:34:18:42:59:78:2b:e2:
                    79:e6:77:3a:fa:03:80:4e:c7:bf:66:90:94:d0:4b:
                    cf:73:fe:0a:76:a3:64:c8:b0:9d:bc:d3:ef:53:f1:
                    64:fb:48:b3:cc:ec:8f:a4:df:b5:14:32:aa:e4:aa:
                    5d:40:81:a9:84:ae:ac:5b:ec:b8:94:2f:6b:0b:89:
                    be:4a:21:1c:ac:ec:a6:06:33:20:9e:15:d2:e7:65:
                    58:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F8:1C:A5:FD:7F:7E:6E:F6:D2:A3:6E:E6:D2:B3:CE:AE:43:17:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b2630225-1ec3-31f1-80fb-860438670e43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:d5:a7:27:1c:16:1f:e6:95:6a:49:37:f9:62:2d:7a:01:6f:
         99:eb:f3:16:03:bd:6e:4c:fc:be:97:89:dd:d0:93:2c:02:27:
         33:c5:94:b0:68:6c:93:7a:ad:71:7f:24:4f:42:3e:7e:64:73:
         a8:75:f6:69:2d:70:fa:87:11:e3:c4:1a:8e:a0:c6:77:5d:86:
         ca:40:9d:ec:92:2b:35:67:1c:ba:e6:95:2d:2d:22:d6:b4:86:
         b4:1a:8d:90:c5:bf:b6:e2:ed:6e:24:3b:0a:42:2e:2c:ff:4a:
         b6:cb:aa:f6:7f:bf:e5:a8:a1:3b:85:7a:24:db:0c:91:d1:a4:
         44:09:5e:04:9d:bd:9f:5e:66:24:c0:3d:42:73:a9:de:69:ec:
         3c:0b:5d:d6:fd:74:02:68:bc:4a:2e:d3:56:53:90:d4:0f:c3:
         43:6f:64:15:75:80:27:45:fb:69:85:6e:6b:2d:7f:7d:63:57:
         f8:ef:ab:bc:6c:36:b0:d6:c1:97:bd:b0:30:51:2f:55:f7:a3:
         b4:cc:ec:bf:f5:de:1a:42:86:03:b1:b2:64:26:4c:ad:3a:92:
         5c:cb:7f:da:6b:97:0f:58:08:61:82:b4:f5:20:e5:12:72:4a:
         0e:09:c7:71:18:b6:fe:b3:1b:92:46:e1:17:68:be:44:37:9f:
         f8:d1:20:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:20:46 2025 by rpki-client