Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d2d7ec3-e87e-31d7-93a7-fee4357e1d4e.roa
File:                     4d2d7ec3-e87e-31d7-93a7-fee4357e1d4e.roa (raw, json)
Hash identifier:          QNzbJ9PMZ59ZqnodkGMyr/2rS2bcbXSee9Nza3PX1vM=
Subject key identifier:   D3:55:ED:A3:5F:D2:36:A8:1B:66:AA:67:BC:75:E8:DB:D1:2C:60:5C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B28C6EC3DE40C56A072826080
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d2d7ec3-e87e-31d7-93a7-fee4357e1d4e.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     400536
IP address blocks:        104.165.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:ec:3d:e4:0c:56:a0:72:82:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=f372db3a-d5f5-424a-b494-45330a2549f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:8a:f8:ae:bd:87:a6:69:16:5f:88:22:f3:
                    5c:8a:fb:98:24:b6:3b:cf:3a:a1:3b:7f:93:9d:32:
                    e5:f2:1c:47:eb:dc:86:d8:08:fc:17:f7:56:31:6c:
                    81:06:92:fe:0d:de:76:70:b4:68:ae:fb:fd:25:3e:
                    f0:1a:15:4c:a9:62:7d:45:1a:a1:1b:74:03:a6:b9:
                    a8:29:e3:07:e1:23:41:09:1a:32:f8:fe:60:19:7c:
                    54:e0:69:91:50:7e:97:a2:8c:91:1f:b3:ea:02:f2:
                    0a:c3:17:51:1d:f5:56:6e:99:3b:70:4b:03:e3:ad:
                    e6:65:d2:48:d1:15:d8:c0:4d:80:9c:3f:f4:1b:79:
                    f8:fa:83:68:ea:c4:db:da:cc:1a:6d:0c:91:ce:be:
                    2c:61:31:6f:b2:b1:73:eb:46:c5:b9:88:12:6b:f5:
                    06:53:6b:c6:f4:8a:ea:92:3d:4d:bf:65:8e:2e:a3:
                    b0:91:42:86:1b:65:a9:d0:01:6c:d6:de:ee:e4:e2:
                    27:0d:2a:7d:27:da:98:b1:e7:8b:fe:2a:79:27:05:
                    a8:50:2b:0e:12:fb:42:6c:92:2c:09:f5:e5:4c:1e:
                    be:2f:65:ba:c0:90:e9:40:26:4b:c4:d3:69:93:43:
                    d9:15:d2:13:ed:a0:eb:77:4d:00:2a:87:b1:0f:e1:
                    0a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:55:ED:A3:5F:D2:36:A8:1B:66:AA:67:BC:75:E8:DB:D1:2C:60:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4d2d7ec3-e87e-31d7-93a7-fee4357e1d4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ce:cf:20:97:df:ef:86:e3:5d:f4:25:29:76:23:50:a9:a6:
         d9:bd:15:e3:3f:1b:cb:f2:92:e1:a8:11:7c:55:7e:8e:87:56:
         f8:6d:31:21:bd:80:8e:11:10:e7:60:f2:81:04:6e:87:8e:79:
         ef:d1:4d:1f:b8:ab:e5:1b:68:4e:c4:34:6c:fe:3c:56:9e:6a:
         67:09:17:86:82:d4:7e:1e:a0:8c:21:f2:5a:23:aa:bb:e8:51:
         8c:d6:66:ee:0e:89:96:b5:ad:3e:db:1d:ea:92:2c:04:ef:64:
         96:d0:de:12:02:06:ce:c9:52:92:6b:db:4f:94:83:b9:f2:0c:
         67:ca:03:11:d0:e7:7a:33:92:65:ab:28:2d:cf:ed:6b:e5:11:
         75:57:5d:7e:54:03:a4:1e:f1:aa:c2:4a:87:f1:a7:73:49:cb:
         52:78:0d:1c:d1:a1:93:2e:be:36:dc:4d:ed:14:63:b4:15:e6:
         38:45:c2:00:6a:e0:f7:b0:41:ea:4b:ec:ff:fe:6a:62:54:9d:
         ec:4a:64:6f:4a:16:f0:bb:dd:99:ce:57:ba:b0:95:ff:6c:4c:
         81:09:2a:d1:37:b2:4c:e2:c1:ff:d1:e3:60:b4:f1:61:11:63:
         7d:f7:e9:cf:fd:e5:d4:88:95:25:43:07:67:2e:00:a2:c3:e2:
         65:10:5a:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxuw95AxWoHKCYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk
ZjM3MmRiM2EtZDVmNS00MjRhLWI0OTQtNDUzMzBhMjU0OWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZKK+K69h6ZpFl+IIvNcivuYJLY7zzqhO3+T
nTLl8hxH69yG2Aj8F/dWMWyBBpL+Dd52cLRorvv9JT7wGhVMqWJ9RRqhG3QDprmo
KeMH4SNBCRoy+P5gGXxU4GmRUH6XooyRH7PqAvIKwxdRHfVWbpk7cEsD463mZdJI
0RXYwE2AnD/0G3n4+oNo6sTb2swabQyRzr4sYTFvsrFz60bFuYgSa/UGU2vG9Irq
kj1Nv2WOLqOwkUKGG2Wp0AFs1t7u5OInDSp9J9qYseeL/ip5JwWoUCsOEvtCbJIs
CfXlTB6+L2W6wJDpQCZLxNNpk0PZFdIT7aDrd00AKoexD+EKrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNNV7aNf0jaoG2aqZ7x16NvRLGBcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGQyZDdlYzMtZTg3ZS0z
MWQ3LTkzYTctZmVlNDM1N2UxZDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKXZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/OzyCX3++G4130JSl2I1Cpptm9FeM/G8vykuGoEXxVfo6HVvhtMSG9
gI4REOdg8oEEboeOee/RTR+4q+UbaE7ENGz+PFaeamcJF4aC1H4eoIwh8lojqrvo
UYzWZu4OiZa1rT7bHeqSLATvZJbQ3hICBs7JUpJr20+Ug7nyDGfKAxHQ53ozkmWr
KC3P7WvlEXVXXX5UA6Qe8arCSofxp3NJy1J4DRzRoZMuvjbcTe0UY7QV5jhFwgBq
4PewQepL7P/+amJUnexKZG9KFvC73ZnOV7qwlf9sTIEJKtE3skziwf/R42C08WER
Y3336c/95dSIlSVDB2cuAKLD4mUQWno=
-----END CERTIFICATE-----
Generated at Sat Oct 11 13:07:25 2025 by rpki-client