Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/101d0896-aa2b-3b5c-aa64-3b7f753a8182.roa
File:                     101d0896-aa2b-3b5c-aa64-3b7f753a8182.roa (raw, json)
Hash identifier:          9EAX6dqEJDJi06lnMxrPS4BSU09lQFDV4qgsrV/yDPA=
Subject key identifier:   0C:DC:E6:0A:3C:96:7B:35:63:3E:7D:EF:EE:8D:CA:C5:9B:4F:F1:34
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B23884B1779820D219524BB80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/101d0896-aa2b-3b5c-aa64-3b7f753a8182.roa
Signing time:             Tue 09 Sep 2025 15:55:36 +0000
ROA not before:           Tue 09 Sep 2025 15:55:36 +0000
ROA not after:            Mon 08 Dec 2025 16:55:36 +0000
asID:                     9304
IP address blocks:        104.253.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:88:4b:17:79:82:0d:21:95:24:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  9 15:55:36 2025 GMT
            Not After : Dec  8 16:55:36 2025 GMT
        Subject: CN=feb77381-0c23-46fe-9ed8-f28b5b22a501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:81:e1:c5:0e:5b:98:f4:d9:ca:f3:4e:17:84:
                    28:d5:57:f7:e8:81:f2:ca:46:f8:40:ac:0a:4a:6e:
                    aa:c8:c8:85:4c:a4:9c:8f:9f:d4:67:b4:e5:59:da:
                    11:4d:5e:3d:bd:f4:25:5e:be:4d:aa:b9:42:f4:68:
                    87:36:01:c6:3a:d4:61:21:c8:ad:10:ec:54:2c:db:
                    fa:7a:93:7f:c0:4f:26:85:3f:58:b9:9a:ae:44:03:
                    7f:e6:9f:79:7e:63:75:a6:34:4e:78:93:d9:d0:9f:
                    1b:ed:da:2c:a0:a0:bc:59:7a:b0:d9:89:e7:78:87:
                    99:ff:4c:b7:a2:92:54:a1:e0:8a:cf:16:58:5c:0e:
                    8d:de:2c:e0:fa:e8:44:00:b8:86:a7:39:c7:a4:2d:
                    79:ea:4d:1d:7a:f0:80:a2:b0:c2:c3:2b:ac:8f:da:
                    e7:4c:7c:90:4b:b4:fb:d1:b8:30:53:e5:68:94:06:
                    10:c0:1d:19:2a:45:91:5c:07:c9:3f:aa:22:7b:61:
                    3d:5a:22:79:97:46:65:9c:b1:92:66:88:3a:e6:20:
                    36:d7:bb:4b:f8:75:e4:2c:94:7c:22:d8:91:f9:7d:
                    f5:7f:5b:6c:e3:5e:69:81:6f:10:41:55:86:d9:e2:
                    2b:d7:b3:3c:54:21:d0:b5:d1:b6:d6:6c:9f:f9:7d:
                    8c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DC:E6:0A:3C:96:7B:35:63:3E:7D:EF:EE:8D:CA:C5:9B:4F:F1:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/101d0896-aa2b-3b5c-aa64-3b7f753a8182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:4d:72:ab:c8:07:4b:b5:cb:c8:3b:4f:67:e0:a4:e1:10:ca:
         db:db:e9:ad:0c:f0:ab:44:ff:e4:2b:e5:9d:fa:14:5a:f7:b6:
         a9:7f:5b:f8:28:e8:94:75:e3:e9:c9:9b:6c:a4:9d:ec:cf:71:
         9d:24:99:70:6f:29:56:a7:ea:e2:2d:ec:4a:3c:1c:4d:27:18:
         d1:76:6a:b6:65:ba:e4:8d:ee:f3:d6:76:88:9c:94:19:e4:2b:
         be:ca:58:e3:e6:48:8a:9d:b8:e8:6b:2a:19:8b:97:67:b3:c8:
         39:c2:a2:e7:1f:06:e8:17:e7:ec:bb:e3:1a:88:e6:80:78:2d:
         92:6f:8e:4a:65:9f:22:d5:12:ca:d6:d0:f8:35:53:2e:9c:e7:
         3c:4a:1e:6f:09:49:23:ef:7b:d2:12:e5:df:0d:3a:c8:ac:0e:
         a1:5f:80:8a:c3:a4:d6:4b:03:64:6f:93:40:26:2f:85:0e:0d:
         3f:93:ef:57:56:10:23:85:2d:3f:e4:69:16:46:6f:63:e7:cc:
         50:1d:16:4b:c0:75:2a:e6:fd:61:2b:a4:94:08:b1:69:92:6c:
         25:e7:57:f2:db:06:34:03:78:ba:6a:cf:ac:f8:cb:0e:97:a4:
         e7:21:75:6d:21:fb:e5:8e:c0:04:e5:c0:1c:50:93:cc:6c:99:
         64:60:f8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:07:54 2025 by rpki-client