Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1cf002f3-1b4d-3af7-bc47-c0dbccd7f64d.roa
File:                     1cf002f3-1b4d-3af7-bc47-c0dbccd7f64d.roa (raw, json)
Hash identifier:          sxxuFrvuQilw56ypxFp1kgwG7ALlGdEJG9ABKmQgC3E=
Subject key identifier:   02:73:29:F0:F0:E5:82:CD:D1:1F:E1:1B:78:71:95:22:87:F0:A1:23
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B0FA6BB4AC3927FD1F88DF080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1cf002f3-1b4d-3af7-bc47-c0dbccd7f64d.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     400536
IP address blocks:        104.164.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:bb:4a:c3:92:7f:d1:f8:8d:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=4ea2d0e2-cd2f-46da-b506-d55255ee861a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1f:a8:b8:45:b0:36:96:3a:37:35:65:ff:fb:
                    9f:78:f5:a5:9d:9a:ae:73:ff:53:73:21:71:10:f9:
                    8a:7c:1e:16:36:9c:14:0f:4e:cd:02:30:cb:c7:bd:
                    e0:05:1e:ce:c5:9a:7f:ef:83:23:48:2b:d1:4d:f5:
                    2c:de:de:d2:b6:df:75:4f:71:52:87:94:b9:96:c3:
                    2f:7e:27:7b:26:0a:66:a5:bc:a0:52:91:5a:1e:40:
                    27:54:a2:35:fc:cf:6c:f7:cc:4e:f1:0f:bc:c2:b1:
                    9b:db:3e:53:f0:4a:bd:74:f0:00:46:40:bb:f7:90:
                    2b:ae:2b:ce:ce:b0:dd:44:6e:ab:3d:03:23:7d:c9:
                    d3:49:6a:1a:0a:a1:16:6f:45:92:a7:02:6a:44:f3:
                    84:01:00:22:83:aa:8b:ef:f5:49:64:87:03:01:ef:
                    8c:17:31:24:1c:49:2b:93:85:c9:e3:06:d6:32:c7:
                    c4:3f:bf:e0:89:e4:a4:d2:bc:b3:88:c3:bf:34:81:
                    ae:74:ca:6c:f8:fd:f9:05:76:56:af:02:30:0a:87:
                    75:93:a6:8a:90:5b:2c:f2:dc:4c:28:cf:19:1b:31:
                    19:b9:dc:3d:50:e4:fc:1e:cf:46:c8:b2:3e:4c:3a:
                    e8:5d:5c:73:72:51:68:54:0e:1f:e5:35:59:ed:ca:
                    ed:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:73:29:F0:F0:E5:82:CD:D1:1F:E1:1B:78:71:95:22:87:F0:A1:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1cf002f3-1b4d-3af7-bc47-c0dbccd7f64d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:69:25:3e:d0:d9:80:2e:d9:4c:28:80:a8:f5:de:60:e4:52:
         4d:58:68:37:e3:17:70:58:2f:93:60:b2:8b:a5:f5:c1:eb:b9:
         e9:dc:2f:2c:52:18:08:53:38:2c:e4:7e:8c:60:2e:a5:9c:a1:
         9f:e4:ec:b6:4d:21:54:72:d6:44:7a:41:92:07:49:bf:a6:54:
         ae:82:57:23:70:ec:ea:9f:0e:fd:65:6d:3c:69:a0:63:c5:43:
         de:61:fc:eb:26:bc:37:1c:cf:81:5e:e7:3f:50:7b:a0:82:e8:
         ae:74:53:36:40:94:9a:22:f1:72:35:8a:ce:39:e3:1d:28:9b:
         2c:f1:02:9b:b3:99:d3:db:93:45:a4:7c:f1:7e:be:cd:e4:18:
         eb:70:e2:8a:84:26:e0:dc:d1:2a:7e:62:45:a7:b7:df:a8:ca:
         8e:50:ec:a6:35:9f:bb:13:3e:de:55:7b:9b:4d:60:f2:f8:44:
         bf:73:f8:81:af:27:61:8e:03:fa:15:ab:2b:92:f2:9b:b0:89:
         9a:45:cd:68:ed:2e:e4:51:91:89:db:73:77:4e:31:7a:dd:21:
         00:08:23:e1:a1:70:4b:03:2e:28:7a:1e:37:72:f5:75:38:85:
         16:4b:ee:26:b7:0d:27:2a:f1:eb:69:71:b6:85:22:45:30:b8:
         4f:86:c5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:17:57 2025 by rpki-client