Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14ed442b-e9c9-3ad5-8b75-d3b881f12623.roa
File:                     14ed442b-e9c9-3ad5-8b75-d3b881f12623.roa (raw, json)
Hash identifier:          0T/Bfi00Nb0gssyoR3bseptMxdR1EshEm+7vkBMwy9A=
Subject key identifier:   DB:9C:0D:5D:6C:D7:D1:32:B5:07:DE:C7:15:51:15:CB:A2:4A:FF:C3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B0FA6BABF705D2D9E6A6A5160
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14ed442b-e9c9-3ad5-8b75-d3b881f12623.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     44477
IP address blocks:        104.164.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:ba:bf:70:5d:2d:9e:6a:6a:51:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=b05e9df5-2e87-4a14-b774-1cbe4129b681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9d:e4:43:0a:ec:fa:b3:80:3e:c5:a2:bb:09:
                    56:96:6e:f3:1a:75:12:7b:54:c6:6d:54:2f:88:9c:
                    e0:31:b0:a1:f5:98:fe:98:81:f4:8e:0c:c3:3e:8c:
                    55:4c:34:ca:29:fb:86:1d:f5:dd:d1:db:a6:ee:92:
                    01:98:1e:d2:ca:4a:a5:05:57:b2:21:a3:c2:e8:93:
                    30:09:e7:55:b5:a2:77:45:1e:b7:65:c7:c6:d5:38:
                    e1:07:7c:c6:05:f5:6e:ca:d2:3f:79:3c:59:72:f5:
                    cc:3b:70:55:93:f5:6c:1f:eb:3d:4d:08:55:9a:92:
                    85:2b:ba:f4:73:f4:32:9c:a0:b3:b1:38:89:69:f3:
                    3d:ad:7d:9e:36:dc:9e:ef:66:af:67:2e:01:67:42:
                    06:5e:cd:ec:67:d7:af:37:12:d7:c9:2d:a6:ea:84:
                    77:17:16:f6:34:07:0b:3a:53:50:b9:be:5b:d3:e5:
                    ae:14:59:b3:bb:25:2d:f6:fe:05:f8:b2:a1:dc:db:
                    bf:aa:35:f7:a2:3d:c6:12:fc:1b:49:a8:2f:91:aa:
                    0f:c9:8e:f4:35:24:32:59:9d:b1:49:29:18:8a:e0:
                    84:c7:3b:9c:1d:65:96:70:d7:5d:82:8f:c5:9f:2d:
                    df:f6:99:b3:84:dc:20:4d:a8:f6:4c:d9:7d:50:51:
                    f4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9C:0D:5D:6C:D7:D1:32:B5:07:DE:C7:15:51:15:CB:A2:4A:FF:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/14ed442b-e9c9-3ad5-8b75-d3b881f12623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:6d:fb:9f:59:f4:d1:d4:97:02:85:86:58:8b:2a:bc:bf:ca:
         16:2d:d7:6b:a7:f6:93:05:8a:cd:92:ec:e5:f4:62:d0:2f:b9:
         b7:4f:93:fc:3a:1d:09:54:ef:68:6b:27:f5:8c:bd:b8:a7:8c:
         83:73:0b:11:02:52:04:6b:81:47:9f:f6:1a:09:ed:98:f7:94:
         33:9a:c1:7e:fb:14:33:4c:d0:dc:73:90:12:0f:57:8a:29:4b:
         3d:ee:d6:e5:cc:4f:dd:a0:51:e8:fc:a5:9b:69:f1:46:7a:2a:
         5e:bb:0a:f5:d3:41:37:d6:8d:0a:5a:f4:4c:1d:a4:22:e4:a7:
         32:45:6e:1c:f6:86:f4:ee:a7:72:89:70:2e:54:f5:f6:3f:f6:
         44:99:b8:8d:c6:17:ff:c9:bc:b9:bc:68:91:cd:ae:bd:a6:2f:
         6a:06:c8:42:e7:7f:ba:43:a4:9e:f5:ff:dc:22:8a:1c:55:41:
         9b:d8:48:f2:0a:5e:9b:3d:7a:f4:dc:cb:f8:2f:08:15:7c:ab:
         0b:6f:a6:c5:5f:a9:67:6b:2c:17:1c:4b:30:38:7d:eb:fe:7a:
         66:83:86:18:fe:80:85:4f:9c:5c:e8:8a:76:d8:ed:42:f8:83:
         b3:d0:be:c5:c8:be:4b:3b:f4:4f:70:05:fc:bd:c6:27:4d:f0:
         cb:bb:2f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:09:03 2025 by rpki-client