Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/740a1b47-19cc-3da5-b4d9-d233a0413e0b.roa
File:                     740a1b47-19cc-3da5-b4d9-d233a0413e0b.roa (raw, json)
Hash identifier:          0OOlEjAcXE91YDjl0EhcQY8HwzJMa/fkYKqW4zP3myE=
Subject key identifier:   31:8C:66:3F:E0:30:DB:DC:63:0A:4C:FE:2B:79:44:75:1B:16:FF:7A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CB5D7C506DE05DAF1BC40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/740a1b47-19cc-3da5-b4d9-d233a0413e0b.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     16509
IP address blocks:        104.253.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:b5:d7:c5:06:de:05:da:f1:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=9244f33d-c673-4c39-9dc8-9fd9f5834239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e5:86:e1:0d:15:cd:90:2f:8c:bb:39:75:02:
                    6a:4b:0f:de:c4:47:63:b5:67:ed:c5:67:b2:64:c4:
                    48:b4:6c:c3:91:12:b5:92:de:07:6c:67:70:dd:0a:
                    ae:ed:3e:a6:c8:74:5b:8f:47:2d:26:cf:34:a9:eb:
                    ff:8e:79:bb:74:02:f5:7a:b9:a5:64:76:93:20:f5:
                    85:5a:c6:4b:25:9e:ec:e3:cf:db:ed:41:fa:50:1e:
                    78:01:55:0f:3c:02:bb:42:44:c0:5f:fb:f2:a8:85:
                    a7:68:ab:93:60:f0:83:2a:43:71:a8:73:ab:a8:3b:
                    67:9d:44:ea:a1:fa:09:dc:b5:fe:9f:28:fa:16:1d:
                    65:14:aa:77:7f:ab:22:92:2b:fd:ce:21:a2:e9:3a:
                    d4:b9:3d:bb:06:53:8a:4c:c7:80:d6:a6:7d:f6:77:
                    ae:75:ac:b8:14:40:f7:42:7f:c7:ac:7f:65:bc:21:
                    c1:a1:fd:1c:70:16:d3:7d:2d:26:09:4c:b7:ae:b9:
                    7c:c7:ac:cc:f8:a7:e1:fb:17:05:e6:c5:3e:81:42:
                    dc:fb:91:9e:02:bd:70:cf:87:87:53:05:60:e1:60:
                    66:61:67:4f:d1:26:a7:ea:60:19:26:97:f1:06:b3:
                    3d:c6:e4:63:38:59:81:47:81:1d:f4:ef:36:8a:57:
                    89:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8C:66:3F:E0:30:DB:DC:63:0A:4C:FE:2B:79:44:75:1B:16:FF:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/740a1b47-19cc-3da5-b4d9-d233a0413e0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:46:d5:44:4e:b0:52:83:1d:b6:92:fe:50:68:8a:73:e8:b8:
         dc:3c:46:99:f1:39:39:f5:43:c9:ad:7e:48:6d:bc:a3:40:7e:
         ec:bb:80:d6:68:fb:37:93:95:c0:fc:3b:6f:f1:a8:76:3b:7b:
         8a:4f:80:53:8d:30:31:32:08:59:73:ea:69:46:a9:72:dd:cd:
         16:98:fd:1c:38:95:90:c6:0d:b2:dd:54:e4:5c:71:41:08:04:
         5a:36:93:08:cf:67:81:6e:a6:00:f9:67:fb:b9:ac:7b:93:b7:
         e2:12:fe:75:10:e2:67:3b:c5:29:14:fa:18:70:46:ca:5b:32:
         f7:cd:9d:ca:60:f3:07:78:31:98:c7:45:05:61:4f:bc:dc:e0:
         c9:13:4f:4a:ac:16:5b:61:bd:31:2c:22:39:b0:00:27:28:e3:
         5d:8d:91:fd:a3:6f:36:e6:9a:43:2e:83:ee:7d:53:fa:66:b4:
         f9:1f:80:ad:bf:94:c0:f5:1e:67:71:be:8b:b3:0d:38:16:13:
         b5:e5:7e:40:3f:7e:da:a6:00:ad:c3:90:3c:36:0b:2e:c6:dd:
         93:a5:3b:dc:76:f3:e1:d5:dd:82:82:84:53:37:dc:ff:11:93:
         e4:7e:6b:f6:4e:6f:7f:9d:b6:4f:eb:da:3d:5b:8a:de:97:75:
         bf:dd:54:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLLXXxQbeBdrxvEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
OTI0NGYzM2QtYzY3My00YzM5LTlkYzgtOWZkOWY1ODM0MjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuWG4Q0VzZAvjLs5dQJqSw/exEdjtWftxWey
ZMRItGzDkRK1kt4HbGdw3Qqu7T6myHRbj0ctJs80qev/jnm7dAL1ermlZHaTIPWF
WsZLJZ7s48/b7UH6UB54AVUPPAK7QkTAX/vyqIWnaKuTYPCDKkNxqHOrqDtnnUTq
ofoJ3LX+nyj6Fh1lFKp3f6sikiv9ziGi6TrUuT27BlOKTMeA1qZ99neuday4FED3
Qn/HrH9lvCHBof0ccBbTfS0mCUy3rrl8x6zM+Kfh+xcF5sU+gULc+5GeAr1wz4eH
UwVg4WBmYWdP0San6mAZJpfxBrM9xuRjOFmBR4Ed9O82ileJOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDGMZj/gMNvcYwpM/it5RHUbFv96MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNzQwYTFiNDctMTljYy0z
ZGE1LWI0ZDktZDIzM2EwNDEzZTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP3AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEJG1UROsFKDHbaS/lBoinPouNw8RpnxOTn1Q8mtfkhtvKNAfuy7gNZo
+zeTlcD8O2/xqHY7e4pPgFONMDEyCFlz6mlGqXLdzRaY/Rw4lZDGDbLdVORccUEI
BFo2kwjPZ4FupgD5Z/u5rHuTt+IS/nUQ4mc7xSkU+hhwRspbMvfNncpg8wd4MZjH
RQVhT7zc4MkTT0qsFlthvTEsIjmwACco412Nkf2jbzbmmkMug+59U/pmtPkfgK2/
lMD1HmdxvouzDTgWE7XlfkA/ftqmAK3DkDw2Cy7G3ZOlO9x28+HV3YKChFM33P8R
k+R+a/ZOb3+dtk/r2j1bit6Xdb/dVFA=
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:08:43 2025 by rpki-client