Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0c4dd39e-df86-32f2-8dcb-df75bd138459.roa
File:                     0c4dd39e-df86-32f2-8dcb-df75bd138459.roa (raw, json)
Hash identifier:          vEBOYhrZ/b+L8rOZ5nJdJv7T29UREDuObV6icyhMx1c=
Subject key identifier:   16:8E:B8:25:C7:6C:11:6A:41:A5:72:65:E4:42:07:EB:A7:B1:BF:C2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B3B469E32AA5742816DEC4E80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0c4dd39e-df86-32f2-8dcb-df75bd138459.roa
Signing time:             Thu 18 Sep 2025 04:02:41 +0000
ROA not before:           Thu 18 Sep 2025 04:02:41 +0000
ROA not after:            Wed 17 Dec 2025 05:02:41 +0000
asID:                     25198
IP address blocks:        104.253.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3b:46:9e:32:aa:57:42:81:6d:ec:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 18 04:02:41 2025 GMT
            Not After : Dec 17 05:02:41 2025 GMT
        Subject: CN=210da00c-8e14-4e01-8013-9bdedc73ecd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:65:1b:a2:20:3b:8d:d5:bc:18:da:fa:52:fd:
                    91:e9:c4:17:36:e1:f3:23:dd:18:10:db:f2:18:54:
                    76:c3:ff:82:0f:84:3a:9d:88:91:2d:60:31:41:21:
                    a8:36:52:ac:5d:62:2d:c0:46:70:5a:80:13:9f:af:
                    90:f4:0a:eb:0c:bb:da:f0:bb:18:6b:f2:61:2f:81:
                    6d:aa:da:a9:db:b7:07:84:dc:8a:38:ea:7d:e1:ea:
                    2e:bd:40:5a:85:ec:e2:86:8f:0e:ca:f0:1c:7a:b7:
                    1f:55:4b:21:1e:21:92:8a:2e:85:13:58:91:4e:82:
                    91:9a:5b:2a:6f:2e:5b:ed:5d:85:9e:c2:03:02:40:
                    ae:cb:b5:20:34:69:64:ad:1b:94:af:af:83:10:a8:
                    b9:15:04:02:fa:83:3b:ac:83:4a:c4:e6:c7:3d:f9:
                    f5:83:43:a7:0a:e9:ef:bd:fa:67:46:f4:3a:60:73:
                    b0:ff:0a:94:c5:87:e2:1a:19:71:01:9d:39:b5:a5:
                    de:b2:6e:ea:3f:5e:36:ea:fe:1b:90:02:6d:4b:28:
                    73:6a:4d:15:7f:42:30:4b:ad:f1:17:46:7c:b7:11:
                    1d:34:2d:8c:05:ff:47:08:da:d1:22:7d:03:97:ea:
                    98:8a:5c:2f:cb:d5:a0:f0:96:a1:cd:94:f5:f4:20:
                    2d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8E:B8:25:C7:6C:11:6A:41:A5:72:65:E4:42:07:EB:A7:B1:BF:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0c4dd39e-df86-32f2-8dcb-df75bd138459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:2b:da:b5:2d:bf:01:cd:8c:64:5e:50:68:19:ba:a4:5b:dc:
         12:36:10:ad:11:de:ea:a9:c5:e2:d0:45:6b:25:f2:be:88:9d:
         d6:85:18:30:bc:82:da:1b:88:4c:5c:c3:59:f9:62:81:6d:7a:
         38:f9:41:1a:0e:e6:01:25:ba:37:e6:eb:db:21:91:79:62:d9:
         4f:c4:f6:5f:c5:90:aa:00:bd:c0:7e:63:99:6a:4b:6a:a3:16:
         68:71:e0:2b:89:8f:04:3f:ef:3d:66:ad:50:94:5d:13:ae:a2:
         fb:b7:7b:93:fd:77:3e:0d:a2:1d:37:3f:4c:b7:89:14:2a:3d:
         69:ca:47:56:1a:4b:52:92:f7:00:9e:9a:b9:e8:78:2c:d8:a4:
         b9:8d:26:62:77:0d:c4:48:82:78:38:ce:56:66:83:37:58:ab:
         5f:20:22:d9:04:bc:f2:66:93:94:f3:58:00:c2:1a:45:88:75:
         6e:78:c7:06:1e:72:66:43:b5:56:56:c2:a5:62:46:5c:85:d8:
         54:e0:c6:a1:8b:c2:e2:c1:1e:21:88:2d:ce:7c:13:18:db:3f:
         b0:81:b5:e2:42:05:cc:7d:34:e0:e2:5f:68:c7:0e:3a:d6:61:
         ea:03:7a:59:47:27:1c:4a:18:3a:8b:61:df:52:b0:a5:11:50:
         a0:09:c5:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs7Rp4yqldCgW3sToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDkxODA0MDI0MVoXDTI1MTIxNzA1MDI0MVowLzEtMCsGA1UEAxMk
MjEwZGEwMGMtOGUxNC00ZTAxLTgwMTMtOWJkZWRjNzNlY2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02UboiA7jdW8GNr6Uv2R6cQXNuHzI90YENvy
GFR2w/+CD4Q6nYiRLWAxQSGoNlKsXWItwEZwWoATn6+Q9ArrDLva8LsYa/JhL4Ft
qtqp27cHhNyKOOp94eouvUBaheziho8OyvAcercfVUshHiGSii6FE1iRToKRmlsq
by5b7V2FnsIDAkCuy7UgNGlkrRuUr6+DEKi5FQQC+oM7rINKxObHPfn1g0OnCunv
vfpnRvQ6YHOw/wqUxYfiGhlxAZ05taXesm7qP1426v4bkAJtSyhzak0Vf0IwS63x
F0Z8txEdNC2MBf9HCNrRIn0Dl+qYilwvy9Wg8JahzZT19CAtTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBaOuCXHbBFqQaVyZeRCB+unsb/CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMGM0ZGQzOWUtZGY4Ni0z
MmYyLThkY2ItZGY3NWJkMTM4NDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3nMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHIr2rUtvwHNjGReUGgZuqRb3BI2EK0R3uqpxeLQRWsl8r6IndaFGDC8
gtobiExcw1n5YoFtejj5QRoO5gElujfm69shkXli2U/E9l/FkKoAvcB+Y5lqS2qj
Fmhx4CuJjwQ/7z1mrVCUXROuovu3e5P9dz4Noh03P0y3iRQqPWnKR1YaS1KS9wCe
mrnoeCzYpLmNJmJ3DcRIgng4zlZmgzdYq18gItkEvPJmk5TzWADCGkWIdW54xwYe
cmZDtVZWwqViRlyF2FTgxqGLwuLBHiGILc58ExjbP7CBteJCBcx9NODiX2jHDjrW
YeoDellHJxxKGDqLYd9SsKURUKAJxeA=
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:08:02 2025 by rpki-client