Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2485986d-0439-353b-b7ac-a36903ad53e4.roa
File:                     2485986d-0439-353b-b7ac-a36903ad53e4.roa (raw, json)
Hash identifier:          fSKERNzT8RHwxV2hCmWGsGYi69m+pg9hR8l5itqL6LU=
Subject key identifier:   1D:A5:35:44:C9:ED:34:80:72:36:D3:96:31:1D:AA:91:E9:AD:69:4A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B417C96BE51DAF3DDD4FF2500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2485986d-0439-353b-b7ac-a36903ad53e4.roa
Signing time:             Sat 20 Sep 2025 09:26:16 +0000
ROA not before:           Sat 20 Sep 2025 09:26:16 +0000
ROA not after:            Fri 19 Dec 2025 10:26:16 +0000
asID:                     42161
IP address blocks:        104.252.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:7c:96:be:51:da:f3:dd:d4:ff:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 20 09:26:16 2025 GMT
            Not After : Dec 19 10:26:16 2025 GMT
        Subject: CN=424f2834-d16c-4ca2-aeed-118d2245b786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:45:1c:31:1d:d2:65:2b:bb:35:fb:0f:28:f7:
                    3a:48:ba:63:fc:d8:d8:68:0a:84:6f:04:66:58:5b:
                    15:f5:8d:79:e7:52:b4:f4:df:bb:d3:5a:22:9e:5e:
                    ca:ad:04:65:5b:b8:8e:df:48:55:30:03:ba:51:63:
                    ff:a9:81:0a:7d:19:2d:46:8f:ff:de:f8:a3:73:21:
                    8b:74:66:ba:50:0c:2d:74:81:c7:88:08:ab:fb:b1:
                    3d:e4:d1:10:6a:2d:40:3c:29:2c:2b:08:a4:fa:fb:
                    b0:65:0b:9e:c0:ab:e5:d6:b8:d5:6b:0e:ed:32:4e:
                    b8:7e:de:a7:ce:63:f2:71:2e:b9:1e:89:80:65:61:
                    b9:36:98:1a:b0:a6:ad:88:58:de:84:35:0f:f7:b5:
                    98:31:df:f8:4a:ca:76:85:2e:f2:90:0a:90:57:66:
                    e2:bf:ae:a9:59:27:63:eb:a2:31:99:c5:bb:ee:81:
                    45:24:90:6c:46:11:75:12:af:dd:6b:68:95:9f:98:
                    bc:47:06:f5:65:59:38:30:e0:73:7f:e9:55:7d:e1:
                    49:73:cf:c0:64:cb:2c:07:0d:02:a3:56:b5:c7:c8:
                    ce:ed:67:06:14:18:c5:24:d8:f9:64:f0:26:e1:0d:
                    df:9e:c5:b8:d6:10:bb:e7:68:37:e3:87:07:b8:4c:
                    45:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A5:35:44:C9:ED:34:80:72:36:D3:96:31:1D:AA:91:E9:AD:69:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2485986d-0439-353b-b7ac-a36903ad53e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:09:7b:06:fd:9f:3c:fd:3a:38:15:53:1f:23:db:43:d4:f2:
         93:80:44:18:dd:12:65:95:4b:b2:c1:df:62:43:f8:b3:f8:59:
         a7:e6:2d:4e:0e:21:83:3b:d0:7d:fa:60:0a:61:10:fe:42:52:
         58:bf:91:e7:39:25:02:3b:73:59:b7:42:c6:0f:26:95:f2:72:
         6a:cf:3c:2b:2d:c6:62:c9:c9:38:e5:bc:3a:2a:43:0d:27:49:
         7d:20:9f:20:0e:84:b3:20:57:2a:0a:de:eb:43:4a:48:5c:99:
         3a:08:20:8c:fc:0a:a7:60:e4:54:de:be:d5:68:fd:8c:85:fa:
         61:24:ec:cd:70:02:b3:9d:19:8c:0d:c0:53:40:c5:29:bc:89:
         a8:64:d2:1d:95:45:1e:fb:f3:3c:36:47:55:32:7e:fe:ff:95:
         b7:a3:94:01:02:45:e7:4c:c3:90:da:70:c1:b7:07:76:ee:17:
         16:8b:57:e8:48:83:b0:d9:5b:df:be:3d:e7:2c:84:29:6c:2c:
         ea:18:4f:3e:46:e5:0e:57:66:11:b4:90:1b:20:7d:20:fb:70:
         c0:1d:ed:b1:d5:c6:8b:25:27:93:59:c1:21:13:ec:6e:e4:69:
         87:2b:78:72:51:b2:41:8f:dd:16:cf:2f:85:61:cc:12:dc:27:
         69:0c:10:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:07:48 2025 by rpki-client