Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e5b3fb85-51de-3375-b8ed-039683e0d583.roa
File:                     e5b3fb85-51de-3375-b8ed-039683e0d583.roa (raw, json)
Hash identifier:          r6j2khjabGJvfRM6cKSeWLSBg/WCvzMp8wPpjq4djWk=
Subject key identifier:   8D:83:4F:1D:00:05:1F:91:A2:43:33:E4:2D:9F:EB:3D:64:D0:83:7E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B90122DA809E3BC717EF9C0C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e5b3fb85-51de-3375-b8ed-039683e0d583.roa
Signing time:             Sat 18 Oct 2025 13:00:39 +0000
ROA not before:           Sat 18 Oct 2025 13:00:39 +0000
ROA not after:            Fri 16 Jan 2026 14:00:39 +0000
asID:                     18779
IP address blocks:        104.164.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:90:12:2d:a8:09:e3:bc:71:7e:f9:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 18 13:00:39 2025 GMT
            Not After : Jan 16 14:00:39 2026 GMT
        Subject: CN=eb834a28-f78b-40ae-9cae-336a9345d7b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:73:7d:7d:57:30:8c:4c:b1:aa:78:37:59:d0:
                    ce:67:57:3a:3e:ba:c6:09:ed:68:a9:ef:0a:08:04:
                    c1:a0:3a:54:0a:dd:2e:e5:ac:cb:be:c1:56:cc:bd:
                    df:45:37:e9:4e:ca:91:d0:1e:c3:13:ea:46:f4:46:
                    02:aa:ed:02:c0:92:7e:e8:2b:db:17:f4:7a:6c:6b:
                    57:0e:22:f3:cb:4b:fb:f8:70:4f:59:86:14:6e:04:
                    10:46:1a:a4:ca:65:00:ad:35:62:22:82:48:1a:57:
                    9d:7f:6f:d4:d7:ac:c8:60:c3:fc:89:85:c4:69:57:
                    51:dd:78:4c:13:e8:71:05:cf:a3:49:e2:1d:f9:96:
                    cb:e6:3a:c3:5a:cb:a8:47:8a:c0:22:71:3e:e9:c7:
                    ff:2f:4a:f3:95:2e:cf:a7:25:0a:78:db:d1:a1:b9:
                    e8:61:4a:64:5a:39:16:21:05:42:bd:74:80:4a:5a:
                    78:b7:c6:bf:e3:47:83:66:7c:ef:47:1a:86:64:77:
                    bf:d1:6c:84:b7:f1:8e:18:44:7b:a1:7e:1e:25:35:
                    d1:fa:80:04:53:dc:52:41:f7:39:31:92:4c:93:58:
                    7c:03:fe:e4:b7:90:9e:e2:8c:47:41:ee:ac:64:a0:
                    cb:d2:e2:13:d0:43:21:31:e3:9c:eb:db:a6:d5:07:
                    4e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:83:4F:1D:00:05:1F:91:A2:43:33:E4:2D:9F:EB:3D:64:D0:83:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e5b3fb85-51de-3375-b8ed-039683e0d583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:c5:b8:cd:e6:86:45:7f:ce:08:45:5b:d1:3a:b7:63:e6:7b:
         24:06:81:4a:cd:3d:4b:9c:2a:07:e3:cc:c2:03:66:c2:a2:0e:
         bb:5a:30:ce:49:67:7b:a5:0b:43:93:8f:bc:53:bf:5a:06:3b:
         ea:ce:f0:18:ab:6d:4e:08:45:07:c6:02:8a:e9:77:d8:fa:2f:
         dd:16:c6:a3:cb:5f:4a:64:8e:56:58:2f:e6:57:ee:1a:d7:62:
         e4:46:f7:00:85:51:0e:4c:7d:7a:4f:84:45:3b:91:44:23:c9:
         7e:2a:07:4f:55:6b:98:d0:f9:e6:ab:23:7f:0c:d7:8d:3d:59:
         28:81:3c:ad:ac:bb:e6:0b:b7:4f:dc:46:7a:0a:1f:4f:de:de:
         c9:8e:74:85:86:5b:24:0c:04:1a:81:ec:0a:f8:4b:fa:af:8c:
         be:b7:9a:cf:92:05:c0:47:35:67:e3:2d:d8:c8:fc:a0:96:ba:
         d5:a2:d7:f3:f9:a5:59:9c:82:c3:13:b2:7b:30:5c:61:98:50:
         ab:00:94:71:fd:0c:98:fd:c7:09:c1:eb:33:98:b4:f6:c0:00:
         b6:d2:39:88:1b:90:56:a8:a1:10:5d:1b:df:de:39:c7:93:20:
         69:fa:f2:22:3b:65:56:b6:16:2e:44:52:c2:d6:d7:56:cb:4e:
         28:59:17:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:19:05 2025 by rpki-client