Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/f16f134d-17d8-31b4-8410-4a72975bc1c0.roa
File:                     f16f134d-17d8-31b4-8410-4a72975bc1c0.roa (raw, json)
Hash identifier:          U3BpN3g49YUD9+gA0yWaY5q57fbDh3GK+Nl8n0gczqk=
Subject key identifier:   79:1E:5C:8C:D3:92:7A:D9:47:DF:FF:A7:BC:DD:3F:65:E5:D5:43:5D
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584B004BF37DF67CE88018343680
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/f16f134d-17d8-31b4-8410-4a72975bc1c0.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        104.218.205.0/24 maxlen: 24
                          104.218.206.0/24 maxlen: 24
                          104.218.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:f3:7d:f6:7c:e8:80:18:34:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=7a8fbf4a-558b-4ed2-a0b9-2c7480c7f183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:80:0d:ae:b2:93:4c:ae:71:a8:fd:a8:90:66:
                    9d:70:27:fc:e5:61:ec:0d:55:4a:85:fa:31:d5:b5:
                    1a:41:ce:e1:4b:ea:8b:af:f6:d2:94:cf:81:c5:20:
                    63:85:2f:8f:57:81:a7:d4:14:f2:97:e4:08:90:cd:
                    7a:19:83:a0:73:da:c9:7f:eb:08:77:73:bf:5d:21:
                    cf:33:75:da:18:6e:dc:16:0f:4e:08:cc:91:83:56:
                    88:9c:e1:89:4b:23:c8:68:e6:f5:2b:a3:88:e4:02:
                    65:45:27:8b:f0:01:86:de:51:ea:7d:19:e0:38:2b:
                    e5:01:d2:ab:0c:d3:f6:63:55:09:ed:a8:ad:7f:0d:
                    5f:7f:f9:0c:9f:fc:f2:46:70:3b:bf:91:68:f8:76:
                    a9:cc:89:5e:04:89:82:b0:07:34:e5:cd:8a:b3:30:
                    b1:d7:1c:c6:1d:41:a0:62:55:3e:0d:b1:18:21:8a:
                    c8:17:55:05:7f:b6:40:47:27:50:a1:56:a8:8f:96:
                    80:7f:05:33:01:7a:a1:32:8c:8a:ce:ba:e7:a2:68:
                    1f:9b:59:bb:e9:85:cd:d6:a0:e2:0a:d5:9b:b1:7d:
                    dc:e0:f1:52:0f:86:d5:ae:05:d9:e0:f3:6e:09:4c:
                    64:f6:de:20:3c:74:a4:70:53:1a:64:58:55:5a:e5:
                    a1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1E:5C:8C:D3:92:7A:D9:47:DF:FF:A7:BC:DD:3F:65:E5:D5:43:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/f16f134d-17d8-31b4-8410-4a72975bc1c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.205.0-104.218.207.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:f8:f5:cf:5f:71:70:b5:c2:09:18:f7:98:15:b3:e3:a0:ab:
         dc:06:0c:78:31:d3:2a:e2:32:4f:21:3c:68:ba:29:8e:c0:d4:
         ff:04:c5:c7:d2:7b:45:35:5d:6e:64:08:a0:a1:1a:c1:7c:39:
         84:b1:f7:f4:d0:c3:ef:51:9d:9a:6f:1b:08:8b:e3:e9:b9:9d:
         8a:fe:36:5b:07:da:c6:4e:73:b6:30:ba:f0:fb:9d:a0:17:d6:
         78:37:31:0a:33:18:5f:24:65:9c:fb:31:fd:ef:a6:0e:b5:0c:
         49:7b:97:e0:70:61:30:ae:f7:3e:0a:a0:2b:6b:fa:31:e2:d5:
         bd:d9:75:46:0d:b3:14:25:37:50:10:56:a4:4b:5c:e9:01:b0:
         ab:27:54:fc:ee:8f:c6:45:ac:1b:9c:a3:62:b4:d4:36:a3:46:
         67:4f:38:f7:88:bd:57:9e:83:a2:33:e7:03:00:44:2a:dc:8d:
         75:91:93:d7:54:49:6c:ae:c9:b3:da:6f:41:76:f7:ce:5b:5a:
         2f:0a:4e:3c:52:32:bd:ae:d3:59:ba:0d:9e:5b:7b:75:82:f0:
         b3:45:86:06:d1:4b:de:44:a2:76:f5:7e:70:e4:77:4d:c6:10:
         64:34:f3:3a:ec:a0:00:f1:08:3a:b7:fd:38:44:53:1b:30:3a:
         ca:e8:d1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:17:24 2025 by rpki-client