Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5d236ec1-c105-3b95-a3ae-807c84595cf2.roa
File:                     5d236ec1-c105-3b95-a3ae-807c84595cf2.roa (raw, json)
Hash identifier:          NsMe3zrZvY+PjwcSHdKKXXxjimCgadSFyDNX1ii7jKI=
Subject key identifier:   CA:70:05:55:87:AF:02:1F:F7:6D:F5:98:5B:37:64:0D:6A:36:E3:63
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B758CA6B7AF1AEEE208B7C8E0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5d236ec1-c105-3b95-a3ae-807c84595cf2.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     400402
IP address blocks:        104.253.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:a6:b7:af:1a:ee:e2:08:b7:c8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=a1aa5b5e-1d4a-49d3-bcef-05a89f4447a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:db:85:7b:eb:d2:33:73:f5:6e:1d:cd:a5:f6:
                    ff:d8:75:c3:ce:c6:63:31:b6:f2:21:cb:1e:0a:4e:
                    44:9f:c8:e2:ed:ac:e8:ea:c0:f0:18:96:d6:ce:29:
                    36:18:df:8b:36:2c:44:52:63:3d:cd:4b:4b:66:84:
                    b0:63:14:61:f0:c2:fd:96:c1:b6:f5:21:d1:d0:a0:
                    d1:9c:95:cc:60:fc:11:c8:10:65:20:6e:95:95:85:
                    da:45:42:17:b1:66:7f:72:fb:da:8a:68:8b:a8:72:
                    91:76:76:87:5d:19:68:69:1f:66:a0:01:6d:08:50:
                    71:64:9b:84:da:aa:35:86:2c:98:8f:de:0f:d0:e2:
                    c0:fa:02:42:22:07:bc:29:84:6b:96:99:30:f1:40:
                    c7:c9:d4:2e:0b:8d:32:2e:b3:2a:1c:61:49:27:39:
                    91:14:dd:15:c6:39:5a:e5:64:75:18:e3:17:3c:9f:
                    d2:e1:fd:fd:d1:04:48:0c:7b:31:b0:55:22:1d:01:
                    56:ec:3d:83:fb:e2:17:05:f0:1b:88:67:c1:84:90:
                    14:f1:bb:4f:5f:88:a6:14:35:ab:e2:4d:bd:53:85:
                    ae:5a:96:62:bc:d7:11:45:76:21:4c:d4:07:d7:33:
                    92:99:e1:39:bf:48:3f:5d:b9:83:33:e3:4f:6a:d1:
                    3f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:70:05:55:87:AF:02:1F:F7:6D:F5:98:5B:37:64:0D:6A:36:E3:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5d236ec1-c105-3b95-a3ae-807c84595cf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:3a:14:0f:9e:41:db:1d:15:f9:33:e2:b6:10:c9:65:ca:de:
         3b:c6:e8:ea:e4:6e:51:0e:d2:8e:b8:27:1b:0f:f6:8d:1a:c9:
         af:48:4e:5f:53:dc:a2:0e:12:60:6b:0b:ce:26:78:08:71:d3:
         05:a9:8c:75:be:4d:95:be:8f:11:54:a2:bb:a3:f0:09:a7:e8:
         88:28:65:ef:14:c3:61:69:6f:e5:4b:fb:b6:1a:0d:1a:53:92:
         9b:84:b3:ca:dc:4b:05:44:84:78:e4:a1:50:10:18:f7:67:6e:
         cb:bf:15:cc:1f:98:1e:2d:4b:56:46:13:7f:10:7e:fd:6d:e5:
         24:07:0b:3a:1d:0b:66:a4:c0:23:63:f4:81:31:3b:ad:b3:74:
         04:fa:f6:6a:3e:e5:e7:92:b8:e0:05:8e:95:f3:54:f9:7f:f0:
         5a:d8:35:01:12:48:60:a2:a5:95:cc:06:bb:de:ac:cb:ba:43:
         86:cb:8c:6e:2e:a4:f9:1d:61:eb:db:d1:bf:65:fd:24:b4:f6:
         37:df:90:5a:96:33:40:eb:c9:18:40:79:b3:d1:61:55:cc:03:
         48:0e:ae:4f:49:6a:b9:df:8a:20:2a:4c:65:8d:76:c0:84:0e:
         a7:74:bf:b7:52:90:3e:4f:f1:37:18:36:d1:f1:3f:24:c0:d0:
         e6:9d:88:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:11:17 2025 by rpki-client