Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1f9892f5-d182-3769-8b6b-6348b54094c1.roa
File:                     1f9892f5-d182-3769-8b6b-6348b54094c1.roa (raw, json)
Hash identifier:          K+4agREhOnK4vqEhaSi1k5sO7jKKtAPkBjZMafiCFoE=
Subject key identifier:   6C:EB:3A:24:50:55:EF:98:2C:57:D9:9E:8C:50:CB:46:F0:10:5E:41
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CBF146F954D26A69A9600
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1f9892f5-d182-3769-8b6b-6348b54094c1.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     6939
IP address blocks:        104.252.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:bf:14:6f:95:4d:26:a6:9a:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=8745768f-ef6f-4eec-bd33-d9436ef574ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b8:f5:75:4a:08:a4:fb:0f:3f:2e:04:d7:bf:
                    30:ac:71:b7:91:cc:6d:e9:8d:51:b8:b6:f0:e1:f8:
                    31:71:64:87:1b:4b:42:cf:55:67:74:71:80:27:70:
                    a9:25:85:35:92:31:ce:ca:72:f8:9f:00:e5:81:d7:
                    42:5f:19:8c:b7:71:67:91:de:44:97:21:41:6a:64:
                    a7:a8:9c:32:c5:b5:17:4f:65:dd:b0:22:ce:95:23:
                    80:b7:b0:01:c0:97:0d:b8:2c:81:3e:4a:41:e4:b1:
                    23:61:d0:fa:60:8f:31:1f:44:2f:13:1f:a9:76:1b:
                    2e:71:78:62:81:6b:ac:3a:0e:cd:bd:fc:6b:63:d0:
                    e7:6d:f0:46:43:6e:72:4f:51:7f:1f:22:78:65:25:
                    94:f0:67:94:41:96:15:2b:88:3c:d9:52:0d:f9:fd:
                    89:6f:76:89:4c:0a:3d:68:73:04:f6:dd:32:9b:89:
                    dc:83:64:a6:7f:7c:5d:b4:70:a0:8a:22:9d:da:fe:
                    a8:2f:60:0c:9e:36:47:ac:e7:35:55:f1:e1:c6:ce:
                    f6:f2:70:e0:ae:ae:4b:1e:57:44:21:5f:55:0c:4b:
                    ed:3b:97:d4:81:4c:88:ce:f0:ac:59:37:20:c3:1b:
                    ad:37:cf:8d:b7:34:b9:e2:5f:12:a8:40:b3:1c:7f:
                    6a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EB:3A:24:50:55:EF:98:2C:57:D9:9E:8C:50:CB:46:F0:10:5E:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1f9892f5-d182-3769-8b6b-6348b54094c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:6e:da:e5:c9:44:3c:3e:19:78:bd:a4:77:94:73:72:cb:89:
         ed:91:32:9d:70:c0:80:28:8d:20:5e:16:92:84:00:cf:c9:f9:
         72:c9:cf:7f:d6:6c:44:33:e2:f7:bb:aa:03:d2:7a:ef:89:3e:
         10:41:3f:98:b9:29:74:e8:b6:55:a0:f4:1a:a4:c8:66:ff:2f:
         da:8d:48:5d:42:28:c3:ae:3d:c7:15:58:76:25:27:60:5e:b3:
         f3:ee:bc:72:ce:b2:30:94:c2:fb:26:70:e6:15:85:18:32:3b:
         8d:69:e6:e5:2a:cc:5e:5c:7f:f5:ee:cc:1a:a0:e8:79:d3:6a:
         e5:66:7c:22:48:6e:d5:9f:92:49:32:dd:07:18:72:fa:ca:7b:
         29:e6:47:c8:45:34:c9:19:be:de:78:c5:20:35:57:12:5f:42:
         17:ae:93:a5:f3:ae:65:db:f7:56:56:33:d0:b9:81:c3:f8:70:
         4c:5c:66:64:24:22:0f:a0:78:b7:9c:6f:65:3d:0b:cc:56:00:
         f0:50:1c:6c:99:06:65:51:af:b8:6f:d3:87:fd:de:89:a5:a4:
         76:6d:d1:53:71:b5:6d:cf:ff:8f:4b:f4:54:4b:22:1c:60:15:
         38:e0:c7:35:79:66:89:0c:ad:28:7d:79:fb:b7:4f:12:4f:ee:
         60:f8:b6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:11:10 2025 by rpki-client