Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bffd10e7-049f-3a65-bda0-64e48230724b.roa
File:                     bffd10e7-049f-3a65-bda0-64e48230724b.roa (raw, json)
Hash identifier:          slsYSdgAnLYb+64zzzTxI5BobvTjwwl5XJ7MnNhaux4=
Subject key identifier:   A7:C3:29:83:7F:E1:CC:52:46:3F:72:D5:64:E0:41:A9:30:29:91:62
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B8BE237AC14CD5273A48B5EE0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bffd10e7-049f-3a65-bda0-64e48230724b.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     6830
IP address blocks:        104.253.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:37:ac:14:cd:52:73:a4:8b:5e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=74ccd5f5-4ac1-4ccc-bb9c-91b157a24196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:16:a4:24:da:1e:70:7d:37:a3:20:38:8d:f9:
                    74:a2:72:ec:33:6e:c8:b8:2a:c1:90:0d:82:f6:e1:
                    13:21:28:69:da:0e:7a:57:fb:ad:35:6c:79:c0:49:
                    ac:1d:30:b2:22:4e:49:00:8b:f8:25:23:f6:e6:62:
                    56:1b:cd:44:d4:52:14:2b:ac:aa:0c:98:c7:5c:a1:
                    b5:34:c0:a0:5f:64:64:94:21:69:d6:4e:f9:90:f2:
                    95:c1:f7:e6:19:0a:02:76:87:4d:07:be:70:33:6c:
                    88:a0:d2:da:d9:64:f1:64:11:6b:d0:1d:79:ca:a5:
                    4c:8b:33:be:dc:35:61:9e:b2:f2:c3:08:fb:0d:e5:
                    86:ae:77:74:83:7c:38:e9:a9:17:1e:ee:8f:f6:7b:
                    a1:1e:8b:43:e4:ea:48:f1:ed:52:45:d6:7f:7f:b7:
                    3e:6a:0b:70:d2:99:11:a8:d9:a6:c3:b6:eb:bc:4e:
                    2a:53:03:52:01:a9:57:dc:09:78:71:e8:97:72:e6:
                    ef:93:88:21:8b:ea:18:17:5f:83:f6:fd:47:97:cb:
                    ef:15:b9:ed:12:e1:0a:1e:bc:76:29:6e:34:9a:1e:
                    bd:ee:0c:84:52:72:32:7d:d1:0d:eb:6e:77:2f:78:
                    b9:7d:82:d1:7e:24:41:38:f4:63:33:6c:72:60:9e:
                    d8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C3:29:83:7F:E1:CC:52:46:3F:72:D5:64:E0:41:A9:30:29:91:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bffd10e7-049f-3a65-bda0-64e48230724b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:07:a1:77:bf:40:54:b0:35:23:b7:ca:2b:de:9c:7b:0d:2c:
         e9:22:de:53:8f:eb:8e:1c:68:8f:9e:a6:0a:49:d9:a1:40:8d:
         9b:ce:d6:06:6f:66:95:27:ac:b9:cf:9a:96:61:c8:3f:68:6a:
         3c:81:3d:49:01:72:d0:a4:8c:14:65:a8:01:6e:a3:3f:20:11:
         8e:61:b8:25:0e:9c:ca:91:fe:1d:89:b3:51:4e:e6:69:79:69:
         43:59:3c:1e:e5:f3:9d:68:f2:d8:af:09:a9:29:e5:67:9e:3d:
         f8:6a:0e:9f:22:33:49:ff:49:00:a8:ce:65:96:0f:63:34:03:
         8f:a2:bd:91:14:c3:e0:ea:5b:a3:6c:4d:4d:1c:8f:10:9c:b4:
         c8:8e:b6:88:9d:96:bf:de:2b:c4:38:65:ac:52:e1:2a:2d:78:
         82:9d:b8:40:1a:66:78:d0:f9:4e:0d:d7:44:5f:91:da:c0:a1:
         4f:f8:91:e4:63:27:e1:b7:8c:56:14:a7:a0:d0:23:3d:60:c2:
         17:21:d1:7f:e5:4e:82:4d:df:36:8f:37:e5:32:13:32:4e:bc:
         85:23:40:be:70:ef:e4:00:a8:cd:21:bc:cf:07:6a:f5:12:3a:
         6c:0b:14:9c:2f:c2:3e:6d:d1:a3:eb:cd:cb:ea:47:0d:3e:b5:
         10:da:34:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:08:13 2025 by rpki-client