Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c3f46ec4-3812-3c6b-825c-9902c2820f3e.roa
File:                     c3f46ec4-3812-3c6b-825c-9902c2820f3e.roa (raw, json)
Hash identifier:          Mb7wmFH1kf5r6q/kgdMW4Lv33S8p6m+vDBurO84YnHc=
Subject key identifier:   B5:29:09:F5:08:86:BE:5E:E2:36:3D:7E:B7:43:32:77:F0:C5:4A:CD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE7470C56670854AA3C080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c3f46ec4-3812-3c6b-825c-9902c2820f3e.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        104.165.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:74:70:c5:66:70:85:4a:a3:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=9b66d9f5-0674-4767-a087-e4b01936143b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:10:3a:30:f7:6d:fb:97:a0:14:57:1d:f6:
                    60:6c:21:e1:6a:7e:d1:20:93:f1:a9:0f:ab:83:ac:
                    7c:eb:07:9c:df:30:b4:db:99:93:c6:b7:9e:db:48:
                    b9:38:27:92:56:64:97:ba:0c:b3:bc:eb:6a:12:45:
                    67:ee:73:db:5b:85:7f:49:cd:32:4d:b2:6e:b8:52:
                    c9:2c:cc:16:1c:88:31:d5:53:e1:4b:37:08:94:9c:
                    1c:ab:7f:fa:2d:67:16:21:ae:4a:6c:b3:c6:c5:62:
                    b8:25:4f:c2:d8:7d:7e:60:d5:8f:17:3c:9c:2d:cc:
                    7f:be:7d:6f:67:dd:98:2b:1a:4a:e1:14:b8:ad:bd:
                    5b:ff:8b:dd:7c:b4:7f:4b:0e:f3:04:e6:fa:bb:cd:
                    9d:fd:8f:3f:6f:cb:13:76:ce:bc:62:79:d3:24:f4:
                    25:2a:e9:fa:1d:84:15:8a:02:45:57:35:62:42:e8:
                    c1:ce:ec:4c:dc:75:2d:ad:3d:ee:0f:38:88:67:e2:
                    e6:50:48:d4:eb:f7:e4:61:21:7e:20:8f:94:1e:92:
                    ee:08:61:85:f7:5e:08:8e:64:fc:82:c7:e0:1a:25:
                    88:95:2d:9f:4c:a8:59:c7:af:1d:1d:04:e1:fa:b8:
                    8e:20:fd:8c:6a:c4:f7:09:8e:94:08:37:4c:5e:e9:
                    26:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:29:09:F5:08:86:BE:5E:E2:36:3D:7E:B7:43:32:77:F0:C5:4A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c3f46ec4-3812-3c6b-825c-9902c2820f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:b1:93:03:51:ae:73:c3:99:10:ec:04:4d:e0:17:6b:66:55:
         ae:c5:a7:77:3f:39:92:ba:d6:af:1b:11:08:cb:f2:18:e0:23:
         98:75:f4:a1:6d:9d:a6:5e:c6:f9:ee:2f:62:9b:c3:7b:03:a5:
         bc:e1:d3:4d:9d:11:87:2c:fc:fb:01:d3:eb:fc:86:66:b4:46:
         1a:98:85:12:31:d7:d6:e2:04:01:f0:fc:c0:b8:9f:46:7a:34:
         e6:13:ce:59:a1:b2:09:68:8f:79:bd:29:f4:60:5b:cb:17:2a:
         e8:45:af:0b:9c:c5:b0:95:1f:90:85:22:9c:7e:4a:dd:dc:88:
         89:86:3e:31:ae:69:09:a1:43:df:64:a1:b5:35:4c:a0:45:c6:
         09:7a:80:ef:76:f9:74:d8:c7:1b:58:85:64:4f:25:52:ad:51:
         89:7d:78:0b:36:81:ad:93:6e:6a:b0:06:8b:b3:74:64:94:9b:
         e4:d2:07:97:d4:d7:a1:71:52:2b:4b:60:75:a5:49:d6:43:d5:
         0c:7b:52:01:f6:ee:1d:bf:71:21:1d:5c:ff:ec:a3:c1:31:5b:
         53:c4:e5:89:16:0e:38:d7:35:25:81:f8:37:6f:87:bf:25:8a:
         21:5a:7b:e7:e5:37:17:5b:a6:d9:cd:c6:4d:18:00:b7:64:38:
         74:d9:8b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:21:08 2025 by rpki-client