Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3ed5fccb-df0e-331f-9d37-17fbe74b5c7c.roa
File:                     3ed5fccb-df0e-331f-9d37-17fbe74b5c7c.roa (raw, json)
Hash identifier:          B7y2ahUF7NC8ar0bGGEHg2J6X22PHCoMZJJHiaZxQc4=
Subject key identifier:   2E:72:E3:01:79:17:B9:D0:B3:C2:4E:09:BF:AE:BC:0F:CE:7F:36:20
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B745FE6A76E4849920ED07DC0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3ed5fccb-df0e-331f-9d37-17fbe74b5c7c.roa
Signing time:             Wed 08 Oct 2025 14:54:42 +0000
ROA not before:           Wed 08 Oct 2025 14:54:42 +0000
ROA not after:            Tue 06 Jan 2026 15:54:42 +0000
asID:                     54500
IP address blocks:        104.164.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:5f:e6:a7:6e:48:49:92:0e:d0:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  8 14:54:42 2025 GMT
            Not After : Jan  6 15:54:42 2026 GMT
        Subject: CN=fbf58bbd-b973-4abb-87a8-119f0bbbca92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:e6:a7:fc:02:dc:10:f3:21:a6:69:d4:47:
                    98:56:f8:84:16:03:c6:ae:22:87:03:a4:ed:d4:ca:
                    69:35:de:45:c4:3e:aa:f2:bf:bd:1e:da:91:43:8d:
                    8e:d8:11:5b:38:d7:bc:e7:81:b1:f6:02:ce:f6:da:
                    50:5a:4a:a8:cf:76:27:a5:b5:21:a7:5a:d1:e1:51:
                    f6:1e:9c:a6:39:de:91:fa:49:4e:6c:8f:d0:b4:f5:
                    95:8a:6d:77:6a:cb:30:db:4c:d7:69:3d:68:64:c1:
                    ff:aa:63:01:6c:ce:ab:c3:02:06:11:fc:19:d5:86:
                    1b:03:c2:ad:d5:f2:d6:84:db:c3:0c:07:70:c0:76:
                    03:2d:0b:00:e3:e7:fa:eb:50:f2:6b:5e:4f:31:23:
                    d9:f0:3f:38:ef:3f:28:12:4d:b1:8d:cb:e4:e1:f9:
                    b6:58:0a:a9:32:ba:c8:1c:10:c1:20:84:ed:47:cc:
                    5c:80:da:f1:8e:c3:f3:10:0e:b4:5c:77:50:3a:b4:
                    b1:8b:77:87:77:7c:aa:28:92:e7:2a:0c:3c:90:ae:
                    f6:95:7e:d6:97:83:d8:f8:cf:91:db:90:e3:90:0c:
                    ad:a0:42:6d:af:83:5e:db:b2:e7:e1:89:6f:ed:3c:
                    7d:c4:da:ab:10:b4:5b:d3:5b:18:01:ff:b3:1f:3c:
                    f3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:72:E3:01:79:17:B9:D0:B3:C2:4E:09:BF:AE:BC:0F:CE:7F:36:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3ed5fccb-df0e-331f-9d37-17fbe74b5c7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:4c:c6:01:5d:3e:08:7c:cb:50:2e:ac:f2:ff:ee:fc:6a:37:
         b7:77:5c:43:aa:ef:5d:48:ac:ff:f8:de:e2:c2:cc:bd:b4:30:
         5d:48:18:35:fa:36:2e:56:58:34:b1:0c:56:65:e7:2c:d2:56:
         1d:2e:39:90:fa:d0:d3:86:d8:4d:15:a8:b9:47:cd:44:44:71:
         a6:75:59:f3:e8:b9:73:e9:40:9c:98:38:c2:85:9d:fc:62:fb:
         7c:c2:25:d2:81:23:63:58:85:50:c7:4f:c7:48:4c:eb:f1:6e:
         de:ab:09:97:d4:26:53:14:06:c9:66:37:df:f1:01:81:09:05:
         d0:c1:cd:85:82:40:96:53:a4:18:34:19:67:a2:e4:71:97:0b:
         b9:59:d5:b9:5f:8e:1c:14:92:1c:47:19:dc:eb:51:f6:89:1d:
         65:9d:3e:45:d9:a7:c5:43:0c:aa:3f:52:35:a8:0e:67:a1:26:
         6e:ae:95:03:13:d9:a7:df:eb:bd:16:65:7b:8b:35:50:59:77:
         fe:98:80:9f:c7:f4:d7:d8:6a:08:8d:4f:30:5d:cb:51:26:47:
         a0:75:89:ab:c5:d0:dd:e6:a7:e1:e3:64:e8:5b:a7:49:dd:35:
         d3:8f:88:f1:02:85:c3:d8:ec:6c:25:3a:0a:82:24:5d:67:2f:
         ad:72:9b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:08:04 2025 by rpki-client