Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d8e5304-8883-3b73-b315-3c46125ce885.roa
File:                     2d8e5304-8883-3b73-b315-3c46125ce885.roa (raw, json)
Hash identifier:          yoNF+VQ1BxSCKQYqp7OxiL93XbAPw626jaCe1w/lP2U=
Subject key identifier:   A8:6C:69:63:F5:19:B6:29:9A:56:38:49:D7:9F:4A:14:CB:D5:DD:DD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B7427C5EE1E6841A14C4BC6C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d8e5304-8883-3b73-b315-3c46125ce885.roa
Signing time:             Wed 08 Oct 2025 13:01:36 +0000
ROA not before:           Wed 08 Oct 2025 13:01:36 +0000
ROA not after:            Tue 06 Jan 2026 14:01:36 +0000
asID:                     212238
IP address blocks:        104.252.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:27:c5:ee:1e:68:41:a1:4c:4b:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  8 13:01:36 2025 GMT
            Not After : Jan  6 14:01:36 2026 GMT
        Subject: CN=c463b041-4fbb-4e0d-9632-699c56c56080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f9:cc:f0:11:f5:c2:3b:56:24:43:c5:64:b8:
                    0f:c6:ba:20:fa:73:04:8a:32:2d:fe:20:c2:56:b8:
                    19:d7:b9:52:e1:8b:4b:db:55:be:60:2a:5d:f6:94:
                    1e:54:20:aa:54:1a:86:e8:23:0c:37:26:71:01:91:
                    0d:85:6d:e8:73:e4:0f:e3:3d:b4:8b:21:a9:29:8c:
                    8b:6c:37:d6:13:f4:48:27:2e:2f:e7:2c:8a:50:0e:
                    53:9b:cc:55:5e:7b:6d:b1:32:0c:f1:a1:29:9a:69:
                    6d:7f:02:61:b5:fe:66:cb:f7:14:c3:9b:ae:1e:47:
                    e0:f4:26:8b:0c:8a:22:c0:24:1e:73:7c:dc:3c:33:
                    42:1b:08:35:fd:7c:f1:96:64:53:31:aa:cd:8c:ec:
                    d7:97:81:83:e3:d4:92:8f:ad:b1:88:5c:a5:86:92:
                    39:c8:3e:b3:70:78:e2:9a:2d:c2:2b:00:5a:b0:a6:
                    a0:d9:94:97:b9:d4:e0:16:e7:c2:32:7e:2e:4f:ec:
                    f7:12:d7:f0:0a:88:94:f3:85:21:ac:72:01:6b:ff:
                    16:8c:21:37:92:c3:50:3f:92:61:e4:fe:d6:3f:c3:
                    f6:bb:d2:d2:0c:2a:90:55:2b:3f:48:48:f2:81:cf:
                    a7:e0:f2:42:48:34:22:92:7f:1d:58:cf:42:32:17:
                    e0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6C:69:63:F5:19:B6:29:9A:56:38:49:D7:9F:4A:14:CB:D5:DD:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2d8e5304-8883-3b73-b315-3c46125ce885.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:c2:a5:87:a5:f2:63:b6:2f:2c:3f:c8:62:93:9e:76:c4:54:
         22:ca:22:55:f4:b3:2d:37:3c:6a:81:71:5d:49:b8:a6:ee:cd:
         24:0b:9e:e0:0f:ba:b4:37:2c:64:6b:9c:e4:e9:75:46:c2:38:
         5e:00:56:9f:b2:b7:fb:8e:99:7a:15:94:42:f8:5c:47:d3:05:
         97:6e:90:cf:47:94:74:cd:41:7c:e7:bb:1c:73:21:36:80:3a:
         41:81:89:f1:22:9e:7f:4b:1a:6a:a2:39:83:d1:39:89:06:45:
         83:19:d7:38:a6:64:61:97:5b:4b:4e:c9:dd:3b:9a:e9:1e:25:
         77:7b:26:bb:86:db:10:bb:96:68:41:28:19:ac:ad:50:15:66:
         54:02:93:e4:40:ae:16:5e:29:10:95:7d:f6:c8:ab:49:fd:8d:
         df:e0:e0:8f:19:a4:c3:12:aa:29:85:ca:04:fa:40:9e:0f:96:
         fa:fb:9c:1b:68:28:2e:89:98:c2:20:bb:f7:f6:8a:95:29:3b:
         a4:b1:f9:98:d6:03:e2:f0:85:45:10:0d:57:62:cf:a3:f1:4f:
         39:63:d9:98:23:20:7c:d3:9b:e0:83:c3:a8:1e:9d:42:55:9d:
         23:7a:02:19:45:9b:69:f1:5e:8d:d9:7b:2c:5a:3a:78:8b:fb:
         ec:7d:1f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:07:45 2025 by rpki-client