Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/29494295-1b56-314c-82f8-91cd72045d88.roa
File:                     29494295-1b56-314c-82f8-91cd72045d88.roa (raw, json)
Hash identifier:          0LptmjIEX0S3wuEybu5pHCuzfojXJ1gaAOH0wDU8Wrc=
Subject key identifier:   AF:16:6B:39:10:97:8D:9E:A1:3F:A0:F5:A9:EC:0E:E9:8F:8D:0E:C9
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B36BC4967F8E8735DF8B8AC80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/29494295-1b56-314c-82f8-91cd72045d88.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     59711
IP address blocks:        104.253.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:49:67:f8:e8:73:5d:f8:b8:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=847891d1-fba3-4d32-8b3f-9accf5c394ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:50:04:f3:96:71:bd:65:ff:87:6c:d2:dc:c0:
                    24:78:8d:26:32:ff:0d:71:e0:e1:72:27:5a:fb:72:
                    00:1e:ac:42:39:85:cf:7b:7e:d1:30:73:95:3c:0c:
                    96:2c:cd:42:b4:29:f1:87:7e:df:89:d8:75:ad:cb:
                    bf:34:4f:f4:2c:15:49:8b:7f:a8:61:b8:a6:52:14:
                    06:6b:6e:96:28:95:f2:50:36:ff:90:73:37:0d:b4:
                    c5:df:93:4d:dc:2f:db:db:f5:99:4c:ea:61:bb:e6:
                    9f:8e:b4:0b:34:7a:da:15:7e:31:06:ab:4c:57:a7:
                    6e:cd:da:34:4a:95:48:64:b0:ba:c9:f0:a8:d3:f9:
                    28:82:40:b0:52:9d:d2:3b:2b:65:d8:7d:0e:ac:5f:
                    8a:a7:2e:a9:17:4e:a5:7b:5d:f0:80:9f:21:81:ed:
                    85:86:50:ae:23:f5:b9:1b:9d:99:df:75:c7:b6:49:
                    87:b4:4c:3e:56:b9:4c:85:43:41:44:ac:a4:39:d4:
                    57:17:13:7e:b7:69:90:99:d3:4e:55:34:55:15:80:
                    c6:60:9a:c2:31:7d:15:73:a4:c0:63:78:a3:8c:85:
                    a9:1c:40:7e:c6:e0:04:ea:b6:64:9c:31:0b:77:ab:
                    f0:29:ae:2b:11:f5:a8:96:6d:7a:90:a6:a7:41:3c:
                    9d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:16:6B:39:10:97:8D:9E:A1:3F:A0:F5:A9:EC:0E:E9:8F:8D:0E:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/29494295-1b56-314c-82f8-91cd72045d88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:0f:51:82:b3:b6:b0:97:d5:5d:7d:9d:32:21:25:eb:9a:eb:
         9b:29:06:95:8f:14:a3:7a:be:6b:1d:91:48:11:94:95:7c:d5:
         89:5a:7a:dd:77:e8:82:a0:1b:aa:02:fb:d9:bc:46:12:af:51:
         73:14:47:7e:53:c7:8c:00:cf:52:f0:71:18:19:af:9b:e8:9d:
         f9:56:b9:2a:95:7b:ce:81:56:78:28:09:f7:6f:3b:68:c3:16:
         5d:2b:4a:57:65:4c:54:25:9f:99:2e:8d:2f:46:8f:56:73:ac:
         67:28:58:a2:77:de:00:97:f0:b8:fb:b5:37:58:23:ca:5b:ef:
         a3:9e:fd:20:eb:d0:5e:70:68:ab:9e:06:79:bd:3a:1f:dc:fb:
         ba:27:e5:5d:24:28:a8:6f:06:67:92:b9:a9:cd:20:e7:2e:68:
         36:dd:6a:8c:8f:0d:4a:a2:3d:23:92:52:f0:29:f8:22:0a:aa:
         a4:69:71:7d:a3:a3:22:96:88:50:28:9e:aa:f7:a2:94:19:1d:
         14:9d:04:91:f2:b1:d9:79:ae:62:c0:14:0f:b0:9a:59:03:4c:
         bf:68:f2:d1:b6:6c:21:a4:80:91:ff:2a:d4:e7:53:a6:33:d4:
         c6:e1:5f:42:dd:48:48:e5:e1:a8:1f:75:e3:73:1e:65:48:e3:
         6a:0b:84:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:15:13 2025 by rpki-client