Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f428a724-9582-318b-96c5-200db32c1cd2.roa
File:                     f428a724-9582-318b-96c5-200db32c1cd2.roa (raw, json)
Hash identifier:          /UTYCyQjpYUTyH+0KD+x59EmxSa8/XxC9KPCrygJZp8=
Subject key identifier:   DF:FB:26:95:E3:FD:55:AD:0F:EA:49:24:1F:06:AE:13:F7:42:CE:E7
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B90122CD52A6020011505CD00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f428a724-9582-318b-96c5-200db32c1cd2.roa
Signing time:             Sat 18 Oct 2025 13:00:39 +0000
ROA not before:           Sat 18 Oct 2025 13:00:39 +0000
ROA not after:            Fri 16 Jan 2026 14:00:39 +0000
asID:                     18779
IP address blocks:        104.164.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:90:12:2c:d5:2a:60:20:01:15:05:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 18 13:00:39 2025 GMT
            Not After : Jan 16 14:00:39 2026 GMT
        Subject: CN=1e4ca6b5-b19d-4e00-b740-84c275669ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6e:40:1b:b5:f0:17:35:af:40:ff:f4:40:04:
                    ab:bc:2d:cb:e2:da:56:67:55:dd:a1:00:86:a1:05:
                    30:ee:05:80:9c:ec:f8:d7:27:fe:b0:1c:94:f0:91:
                    be:9c:4e:58:aa:bc:dd:f9:4f:81:b7:00:ad:37:2f:
                    6f:ff:cb:09:94:c1:c0:f2:cd:ee:4b:72:1f:87:d7:
                    bb:67:c9:ef:7a:ba:b1:0a:43:6b:84:78:60:12:c6:
                    66:d2:4e:76:66:db:9a:66:a3:20:1e:14:9c:15:6b:
                    76:84:2d:fb:bb:82:17:46:6b:8b:2c:db:5a:71:17:
                    ec:cd:f5:8e:d0:25:63:d0:c5:1b:5a:3b:b8:87:ff:
                    c4:16:b3:d0:4c:3f:e6:61:7a:ee:1a:05:51:4c:4c:
                    e6:eb:cf:c4:1f:56:77:07:8e:46:11:76:15:9f:02:
                    91:b3:36:98:9e:fd:3d:ee:05:56:02:8b:16:ba:cc:
                    9d:1c:84:86:dc:90:2a:64:77:78:8c:0b:83:77:7e:
                    22:40:df:d4:9f:18:77:fa:df:48:52:ad:87:0f:1b:
                    c4:87:af:3b:2d:75:7e:d7:6b:6d:a5:bc:16:0a:13:
                    ff:e8:37:57:c2:22:48:af:0d:f6:26:c3:bc:db:77:
                    f3:2d:ad:28:b4:d9:a0:c1:ce:be:68:65:a1:4e:c6:
                    75:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FB:26:95:E3:FD:55:AD:0F:EA:49:24:1F:06:AE:13:F7:42:CE:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f428a724-9582-318b-96c5-200db32c1cd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:88:4f:12:9b:7a:9d:46:e3:b3:52:cc:e1:d0:4f:6a:7b:2f:
         43:9c:b8:61:83:b5:e6:d7:66:00:6a:ff:3c:29:46:a9:e9:4d:
         2d:a3:00:13:36:8b:d8:bc:a6:f7:c6:5d:db:34:5e:62:df:6e:
         d3:06:9f:5e:8b:e3:dd:29:65:54:5b:87:4e:69:b0:ec:52:f6:
         7f:03:1d:b4:d9:a4:65:33:2a:34:d4:91:52:26:f5:92:1a:db:
         30:82:29:0f:41:a9:23:65:ae:20:e9:14:20:f3:ee:3d:56:18:
         da:84:40:d4:ca:8c:ab:60:b9:97:b2:5e:fc:2d:23:b6:af:91:
         bc:3a:09:88:75:68:3a:f7:bf:6a:88:3a:e9:77:21:3c:4f:89:
         06:c6:d8:ca:2f:9d:8b:62:cb:ee:e7:aa:19:db:2c:9b:55:49:
         fb:3d:04:76:bf:e9:36:15:6f:fe:65:57:82:b3:88:04:c2:88:
         6c:39:01:1b:10:d9:af:d6:9b:a4:fa:b3:74:47:09:9b:8a:b7:
         d2:2c:c6:85:2e:98:15:91:9f:2b:68:b6:71:90:4d:20:6d:c1:
         ad:56:50:d9:a6:a9:82:b6:66:66:a8:8b:6f:cf:d5:0e:8a:40:
         22:f5:e0:ae:c0:19:8e:04:d2:fc:b9:fb:8a:9e:a3:d0:21:0f:
         d2:da:3d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:20:42 2025 by rpki-client