Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/494c489a-868a-3fbc-a887-13fa2207df65.roa
File:                     494c489a-868a-3fbc-a887-13fa2207df65.roa (raw, json)
Hash identifier:          iy9EARZqtN7fUXlEPZ2vxyY6l//s3lmHVq1YBBN7lok=
Subject key identifier:   C4:55:D4:15:06:3C:41:48:53:70:F3:AE:0B:6A:37:5E:C2:AF:6D:D4
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B636745A220B9E108DDF34080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/494c489a-868a-3fbc-a887-13fa2207df65.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     7922
IP address blocks:        104.165.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:45:a2:20:b9:e1:08:dd:f3:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=b9164a67-dbab-4052-a920-38961cf087d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a3:72:63:f5:04:b2:19:e8:8b:55:d9:f2:66:
                    14:2d:c2:4f:f1:f3:42:72:0b:2d:6b:b3:79:52:66:
                    aa:e2:8c:e6:af:33:02:a5:b2:fc:89:22:8b:9c:e0:
                    56:1b:2b:b0:86:b9:19:ec:73:e6:ff:0e:53:71:d1:
                    f5:ec:c4:09:33:de:9c:73:5b:a5:13:6a:4d:98:2c:
                    96:b3:02:8e:c3:35:b0:9f:8f:27:f6:97:b2:c4:39:
                    8f:6a:ba:8f:fe:9a:9d:ed:d2:d1:a6:79:32:c7:a4:
                    e8:65:e4:c4:ea:69:87:04:70:2d:33:01:76:a1:95:
                    ad:de:f3:66:80:6f:e7:d5:a4:1d:ed:bd:33:3c:49:
                    96:ea:9f:08:20:f1:ae:9c:ff:c9:77:c4:44:b8:ff:
                    d2:f2:9e:89:c8:de:e8:a6:73:4b:7f:2f:0b:ec:c0:
                    ad:bd:85:cc:50:ee:5b:60:8c:95:2a:a6:c2:43:b7:
                    c4:9b:c0:3c:bb:90:ad:74:30:a8:08:c4:e9:a1:57:
                    64:7f:66:c3:19:ee:e1:d2:5b:25:69:32:9f:47:4f:
                    01:f6:75:85:4e:9d:5a:14:ed:09:cc:57:ca:59:ee:
                    a7:d8:a5:77:d4:cd:3f:a4:c7:ea:74:65:6c:dd:c7:
                    db:87:2a:f3:5a:d5:f4:2c:fd:c4:20:ff:36:fa:03:
                    91:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:55:D4:15:06:3C:41:48:53:70:F3:AE:0B:6A:37:5E:C2:AF:6D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/494c489a-868a-3fbc-a887-13fa2207df65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d2:7d:a5:6f:06:98:ef:82:6f:22:21:6d:5c:61:cb:a6:16:
         3e:61:78:ce:d8:40:3a:50:db:5d:e1:3b:64:d8:3e:54:7d:e0:
         df:a5:20:ac:1e:de:6d:38:b7:2e:88:2f:5c:0d:98:14:f0:f9:
         64:05:01:d7:28:dd:53:a2:2c:58:5c:6d:3f:91:ac:9a:28:01:
         b4:a3:e6:b6:af:9e:e5:a2:49:c9:c8:62:c1:a0:d4:db:7c:28:
         c6:8c:2e:81:68:36:d0:e1:12:1d:e0:fe:1e:ab:85:53:38:bd:
         56:ae:c5:f5:6d:68:93:18:ae:5b:bf:2c:32:fb:6b:b4:31:f1:
         55:a8:be:91:d1:dc:2f:c6:d3:8d:bf:7a:28:c0:88:3b:46:79:
         f9:01:d4:0f:76:31:e8:8f:bc:7a:5c:02:e2:65:97:aa:68:cf:
         de:9a:da:39:6e:fd:55:c3:04:e2:17:d1:b4:ff:37:26:be:c6:
         07:48:0c:90:43:fe:11:f9:75:cc:4f:5a:e7:28:d6:63:2a:b5:
         87:66:19:52:87:46:4a:ca:e0:96:e0:03:72:31:f2:59:b3:90:
         f2:b8:34:2d:31:ab:44:a8:67:7f:65:c1:82:0a:c1:31:f6:03:
         e9:56:ab:85:cf:e2:12:82:71:5f:86:54:d2:9a:38:ba:f9:d2:
         55:03:1b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:27:08 2025 by rpki-client