Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cb83fa65-d00c-346a-94e3-fb0ca8b4520b.roa
File:                     cb83fa65-d00c-346a-94e3-fb0ca8b4520b.roa (raw, json)
Hash identifier:          KG1F8IxHstX/eZBYTUs5r1j3/Ht2Xp+WDOGZnTzpVjo=
Subject key identifier:   D8:E6:D7:1C:60:4F:70:F2:99:09:C7:E3:E7:D4:4F:77:2A:45:41:B2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B64CE765D895F760A9E6DE500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cb83fa65-d00c-346a-94e3-fb0ca8b4520b.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     44559
IP address blocks:        104.252.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:76:5d:89:5f:76:0a:9e:6d:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=626c443d-5aed-4bfd-b835-c226491be6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:97:90:7a:18:9c:e7:84:0e:95:b2:1d:c6:
                    0f:29:93:de:b8:89:9c:81:ea:38:95:96:81:b1:1d:
                    a4:62:2a:1f:f3:fb:b3:15:98:f0:9b:f2:f6:b5:85:
                    f7:82:0f:cc:3a:79:80:4e:3f:81:e1:b4:fc:3b:94:
                    be:60:2c:06:b1:76:4d:40:be:c5:58:16:55:8a:b0:
                    cb:2c:86:33:1b:68:3a:8a:54:61:e4:7a:8b:b8:ae:
                    17:57:af:d0:b7:fb:99:38:9a:61:00:51:5e:d1:44:
                    d0:81:fb:09:69:d5:c3:3d:8a:94:6c:c0:e3:0f:18:
                    29:0f:65:6c:3f:61:55:26:4f:81:ef:e3:48:07:fd:
                    55:d6:48:ab:b0:e5:ee:16:b3:fc:11:84:4d:9d:a2:
                    5a:59:79:79:85:c3:6f:c9:03:90:dc:84:95:78:70:
                    02:70:cf:fa:e7:f7:4d:5e:69:e7:44:96:70:bf:36:
                    26:33:4d:0d:5e:80:ff:ec:9b:12:1f:2c:2c:97:47:
                    10:d6:86:87:b8:e9:b4:65:05:b9:34:84:65:c6:6e:
                    58:e9:39:d7:57:51:68:bc:9b:8b:ce:6a:e2:00:dc:
                    22:93:c3:21:80:02:92:06:78:0f:89:c7:bb:2f:f6:
                    de:25:da:4d:b2:f2:bc:34:90:a1:f5:06:68:f1:08:
                    93:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E6:D7:1C:60:4F:70:F2:99:09:C7:E3:E7:D4:4F:77:2A:45:41:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cb83fa65-d00c-346a-94e3-fb0ca8b4520b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ff:ba:57:70:fc:be:a3:7a:90:ab:d9:95:4f:45:03:ef:1b:
         5e:15:c7:f5:2b:56:79:13:72:15:50:07:2b:da:7d:86:dd:be:
         99:16:5e:f1:d7:6d:ea:60:03:15:9e:6b:af:40:8b:b2:f2:13:
         c7:13:c4:2d:f6:51:cf:53:d6:19:dc:30:20:a1:f2:03:93:cc:
         93:9e:57:40:ae:65:64:bc:56:30:e0:d8:6f:7a:8b:2d:4a:8d:
         ff:e6:48:09:8f:d3:cf:80:ee:da:2f:e5:b8:15:b7:aa:d2:34:
         a5:9f:ca:2a:bc:d9:8f:e0:84:aa:3b:1f:8c:d8:34:3c:92:6d:
         f2:9f:1d:5d:24:42:69:23:c7:3c:7a:01:29:3b:73:9b:75:9f:
         3f:00:c5:59:55:5c:5b:d1:6b:ca:61:32:08:a5:28:17:45:f6:
         07:e9:75:8e:38:b7:3d:ad:60:44:2e:58:f0:0d:d9:71:1a:54:
         1e:2a:ff:6e:da:37:16:4d:7f:80:07:f1:c2:83:0c:c7:20:08:
         fd:44:99:3e:37:5b:52:87:83:0c:92:6f:15:da:d2:27:00:98:
         85:3c:2f:a9:83:70:f8:28:ef:38:9d:10:8f:9d:02:86:ff:4c:
         6a:3d:99:4c:5a:08:f1:fc:d6:1f:08:f2:82:3c:c3:78:10:9d:
         b6:de:f7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:59:36 2025 by rpki-client