Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0357508-e20b-3679-b9c0-2187c9afdee5.roa
File:                     d0357508-e20b-3679-b9c0-2187c9afdee5.roa (raw, json)
Hash identifier:          RrKZSBwsS4L5y1Wdek7Sd0l0+WBPKaZqeSPuftUpHLg=
Subject key identifier:   6F:BD:D7:64:AE:1B:22:0B:D1:92:D1:85:DE:32:6D:76:6E:D8:5B:3D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584AD23C35D53484D09CF4D76E80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0357508-e20b-3679-b9c0-2187c9afdee5.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     214238
IP address blocks:        104.165.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:35:d5:34:84:d0:9c:f4:d7:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=98fbf0db-ff26-42c8-8d53-b9daf3dfd3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:bd:62:c1:27:a1:05:67:b4:64:8c:f0:eb:6f:
                    bd:a6:f1:77:d1:63:6f:9b:6e:18:5a:2a:39:d4:5c:
                    c3:2c:4a:95:9c:b8:4e:8b:25:3d:17:ca:83:41:97:
                    71:ef:1b:e6:24:3a:f9:c2:36:2e:f4:8c:b4:e2:ed:
                    46:c5:57:51:22:46:17:91:c2:e2:9c:c0:27:32:24:
                    c7:d3:20:1c:4b:1d:7c:84:9a:ee:2c:c8:7f:63:3f:
                    22:7c:de:40:e0:4b:96:49:23:89:6d:17:e5:b9:06:
                    4f:ba:dd:56:1c:2b:79:1c:0f:83:d3:87:74:c4:e8:
                    ba:c8:71:24:9c:1a:89:9f:25:b0:c9:38:83:9e:3b:
                    a6:aa:a9:4a:f5:89:df:5a:48:14:cb:0d:46:46:36:
                    5a:c5:ed:d3:ff:8f:ac:ba:bd:12:61:be:e0:34:6e:
                    97:48:8a:9b:bd:91:a9:91:71:b0:bf:40:94:0b:c4:
                    7e:18:a9:1f:6a:c8:c4:48:7e:92:d8:d3:b6:fa:a5:
                    2d:13:5b:9d:51:39:64:f8:8f:f5:ab:a5:d4:7b:e3:
                    0e:df:0b:73:5f:7f:50:a1:f2:ff:1c:0a:02:da:bd:
                    12:b1:c6:fd:cb:89:f0:db:d1:6f:b1:9b:a1:54:bc:
                    71:45:47:29:a0:17:07:79:9b:b7:5e:1c:51:51:14:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BD:D7:64:AE:1B:22:0B:D1:92:D1:85:DE:32:6D:76:6E:D8:5B:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d0357508-e20b-3679-b9c0-2187c9afdee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:80:76:e1:67:be:42:4a:41:7b:9c:e5:87:ff:08:c4:dc:29:
         49:62:6c:cb:d4:a4:38:42:17:d1:03:c6:6f:a0:dc:45:af:a0:
         59:eb:82:49:58:46:53:2f:23:5f:94:ae:68:cc:e4:87:f7:4b:
         37:8e:5a:48:b0:03:fb:67:e5:b6:21:a4:43:f7:0d:7d:40:a6:
         fa:d0:04:e9:74:d7:7b:93:2a:d0:cc:9f:b8:ad:11:f3:40:e3:
         3e:d2:37:1a:04:0b:63:bd:df:a3:f5:fe:90:2d:fb:82:6e:ba:
         72:a4:b1:ed:7f:96:19:31:52:13:45:3c:ae:13:43:ed:90:e7:
         b5:e5:2c:12:57:ba:0c:29:a8:8f:84:f0:54:11:46:d4:21:33:
         9f:3f:15:00:24:ba:89:b2:fb:5b:62:04:e6:b5:6b:2c:3f:3c:
         13:21:ce:51:09:b3:34:0a:fa:c5:39:8e:b8:d5:96:24:37:4a:
         c5:f5:ff:bd:16:ee:68:ce:e4:e4:ef:56:fb:58:a5:de:42:3a:
         d7:50:d2:ce:37:2b:51:c8:30:bb:1a:de:b5:88:0f:57:34:aa:
         7f:32:14:25:86:9a:bb:ed:94:28:18:f5:ae:cf:d3:2a:09:a8:
         31:41:9f:b4:12:0d:77:3b:14:24:c7:04:4f:bf:07:06:d5:ed:
         8a:0a:d2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:21:53 2025 by rpki-client