Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dffa439e-722b-3c23-9514-dd75ce24c820.roa
File:                     dffa439e-722b-3c23-9514-dd75ce24c820.roa (raw, json)
Hash identifier:          FKF/ThR1xFuqcGKSHGivgzal/RPqMJ9Jxvw13GqeJhg=
Subject key identifier:   CF:81:EF:AC:72:32:90:0D:D5:33:D0:BB:CD:1C:A7:80:4E:8D:E5:FC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B89175EC1BAD1FE8C63D07600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dffa439e-722b-3c23-9514-dd75ce24c820.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     812
IP address blocks:        104.164.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:5e:c1:ba:d1:fe:8c:63:d0:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=f7f2c029-50be-465d-9c09-2d167d67cbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9f:67:ac:77:36:f6:74:d7:85:72:ca:37:49:
                    19:f3:4c:a3:50:d1:b6:57:6c:1f:11:f4:96:43:ac:
                    b9:c6:43:ad:c5:20:70:4f:b6:0d:b7:57:cd:84:ba:
                    8b:4a:71:4a:8c:23:c3:2b:ed:f8:af:e1:9f:6e:5c:
                    2c:52:ba:d0:1e:59:67:c4:ad:e0:b2:93:3b:27:7a:
                    fd:e2:b9:ee:3c:2d:80:d7:5e:f4:bc:3d:25:84:82:
                    4f:e7:11:2f:e4:4b:11:66:fc:28:18:48:6f:74:82:
                    fc:be:12:df:50:3e:75:01:cb:d0:22:cd:f5:3f:9e:
                    01:df:d7:da:35:4b:85:71:4d:fb:d3:6b:f2:c7:b5:
                    fe:3a:67:a2:39:76:da:82:db:2f:67:af:65:25:04:
                    49:09:02:fc:32:8b:fc:76:56:2e:b2:4e:52:52:82:
                    25:bd:a6:0e:67:d8:71:4e:d0:15:2f:93:02:51:c6:
                    dd:94:38:a0:69:c1:30:25:d6:ef:68:58:1b:54:3e:
                    d2:c8:27:21:a9:9e:78:a1:cc:c4:72:5f:2f:64:34:
                    8a:6e:cd:ee:7a:28:cd:23:e4:92:85:47:3d:b7:7c:
                    1c:3c:b6:79:e5:c7:44:12:1a:b8:84:5a:e5:a3:78:
                    eb:84:15:95:7b:71:9f:06:96:b5:7e:da:12:d0:de:
                    7a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:81:EF:AC:72:32:90:0D:D5:33:D0:BB:CD:1C:A7:80:4E:8D:E5:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/dffa439e-722b-3c23-9514-dd75ce24c820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:de:06:2a:55:7f:4e:e2:e2:1a:c5:23:5d:6e:71:a5:9b:3c:
         ad:70:2b:ff:6c:7d:77:96:1e:ea:09:44:3e:13:6c:3d:1a:2f:
         7b:ba:54:8f:c3:1d:69:3b:3c:e8:21:8f:7c:47:77:63:05:7f:
         4c:e6:00:ff:77:31:83:15:5e:00:0d:01:f1:ad:80:5d:a2:0c:
         78:80:ce:37:f3:e6:63:25:11:9c:93:36:01:36:fa:6e:ab:ec:
         ba:6b:4a:b7:2f:6d:fe:06:e4:ff:be:8e:c8:31:9b:c7:a0:89:
         b7:96:fd:f5:97:a2:9b:9b:13:1e:62:2e:8e:09:77:da:01:bd:
         0c:41:63:a5:8f:3b:d3:bb:5a:5c:d3:26:ad:f7:d6:a5:67:86:
         ee:53:0d:25:b3:20:e0:c0:4c:6f:f3:06:b6:1f:ae:42:8e:85:
         bf:89:e5:e6:eb:86:c4:cc:f4:d2:cd:2a:0a:40:5d:6e:64:f8:
         57:eb:5d:2e:83:d4:d7:4b:85:2c:4f:f4:bd:9d:ef:6d:63:5a:
         cb:00:2d:52:76:92:1a:f0:fe:54:ac:86:1c:46:fe:d2:1f:14:
         bd:81:f0:1e:2e:07:fb:99:53:b5:82:a8:6f:af:2a:c7:6c:96:
         74:ad:67:4c:73:b8:5f:fc:5c:9c:22:3a:6b:c4:e8:70:75:c7:
         3c:a8:88:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuJF17ButH+jGPQdgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk
ZjdmMmMwMjktNTBiZS00NjVkLTljMDktMmQxNjdkNjdjYmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp9nrHc29nTXhXLKN0kZ80yjUNG2V2wfEfSW
Q6y5xkOtxSBwT7YNt1fNhLqLSnFKjCPDK+34r+GfblwsUrrQHllnxK3gspM7J3r9
4rnuPC2A1170vD0lhIJP5xEv5EsRZvwoGEhvdIL8vhLfUD51AcvQIs31P54B39fa
NUuFcU3702vyx7X+OmeiOXbagtsvZ69lJQRJCQL8Mov8dlYusk5SUoIlvaYOZ9hx
TtAVL5MCUcbdlDigacEwJdbvaFgbVD7SyCchqZ54oczEcl8vZDSKbs3ueijNI+SS
hUc9t3wcPLZ55cdEEhq4hFrlo3jrhBWVe3GfBpa1ftoS0N56vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM+B76xyMpAN1TPQu80cp4BOjeX8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZGZmYTQzOWUtNzIyYi0z
YzIzLTk1MTQtZGQ3NWNlMjRjODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKRhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB7eBipVf07i4hrFI11ucaWbPK1wK/9sfXeWHuoJRD4TbD0aL3u6VI/D
HWk7POghj3xHd2MFf0zmAP93MYMVXgANAfGtgF2iDHiAzjfz5mMlEZyTNgE2+m6r
7LprSrcvbf4G5P++jsgxm8egibeW/fWXopubEx5iLo4Jd9oBvQxBY6WPO9O7WlzT
Jq331qVnhu5TDSWzIODATG/zBrYfrkKOhb+J5ebrhsTM9NLNKgpAXW5k+FfrXS6D
1NdLhSxP9L2d721jWssALVJ2khrw/lSshhxG/tIfFL2B8B4uB/uZU7WCqG+vKsds
lnStZ0xzuF/8XJwiOmvE6HB1xzyoiDk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:37:38 2025 by rpki-client