Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9490fcc1-4aef-33f3-92c2-57cc1b7e20cd.roa
File:                     9490fcc1-4aef-33f3-92c2-57cc1b7e20cd.roa (raw, json)
Hash identifier:          PeWzx7kSuUraZ/AsY/EsYnUyj043oP28cZA6OtkwyoU=
Subject key identifier:   92:35:D2:C2:0D:6E:8E:22:40:20:D8:89:10:D0:AE:95:78:66:7A:90
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CB5C788C56AC2BD2AE000
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9490fcc1-4aef-33f3-92c2-57cc1b7e20cd.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     16509
IP address blocks:        104.252.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:b5:c7:88:c5:6a:c2:bd:2a:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=7abd7abd-8fee-4051-8305-d42e3d27475f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9b:4a:57:c0:d8:5b:b7:12:81:c7:fa:d9:74:
                    ea:96:77:78:9e:18:de:b8:08:e5:bd:94:d1:49:f8:
                    ea:17:ed:e1:b9:b2:48:6e:ff:ea:68:43:ca:a6:c6:
                    b9:fc:20:1f:c4:bb:03:e4:70:12:76:8a:60:b2:cf:
                    69:26:55:46:af:9f:02:98:80:67:9d:90:c4:b3:ff:
                    66:e5:7d:76:04:40:cb:9f:f8:3a:23:74:b1:15:6d:
                    67:47:ce:5b:f3:fa:57:68:22:4b:c5:4a:f6:d6:a8:
                    32:79:f5:97:c7:1a:70:d8:7a:71:70:5f:26:27:47:
                    3b:53:b7:78:0b:08:36:df:d0:3a:c2:e0:a4:74:79:
                    95:91:36:5c:8e:34:2c:4b:19:d5:e9:34:32:23:a7:
                    3c:44:a8:cb:c5:07:da:d3:8e:34:8a:94:32:fa:67:
                    98:5c:27:16:51:4f:3a:a6:55:d2:84:4f:5f:18:21:
                    39:8f:b9:b8:a2:a2:d5:62:41:79:71:0c:98:f7:0d:
                    8f:50:19:d1:24:e8:ef:36:af:90:2c:30:d5:c4:b5:
                    2c:02:6c:bb:bd:83:3a:f3:88:1c:7f:16:bf:60:5a:
                    69:1d:3a:9b:a7:fd:9e:a9:bd:e9:c0:76:1e:db:6f:
                    ab:ee:59:04:18:14:fa:c9:9d:21:da:41:c0:42:2d:
                    93:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:35:D2:C2:0D:6E:8E:22:40:20:D8:89:10:D0:AE:95:78:66:7A:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9490fcc1-4aef-33f3-92c2-57cc1b7e20cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:01:1a:34:75:ca:36:be:0f:38:ae:fb:26:c0:27:0b:a3:1b:
         d5:8c:ca:98:e9:89:d9:3e:e3:28:42:14:f2:01:a7:6a:22:fb:
         17:a1:21:47:e0:70:7c:68:04:a7:26:1e:68:3e:0a:d6:08:37:
         ec:38:a4:8a:9d:88:6c:a7:e6:ea:c6:0a:dd:c6:08:61:d9:a9:
         c7:4b:3a:1f:81:83:46:57:05:3b:e2:fd:4e:5a:26:19:a6:72:
         65:4e:21:eb:cf:2d:b2:06:ec:76:ee:56:69:ef:47:a4:b9:e7:
         2c:02:41:b3:9b:03:fd:fe:86:bb:81:72:eb:51:2a:b1:48:b4:
         b7:72:ea:45:f6:d2:fa:0b:8e:e8:f3:dc:b8:51:97:e0:4b:35:
         b1:71:4d:a7:89:37:d3:47:52:a0:ee:e6:3b:6c:5c:28:54:0e:
         7a:87:ec:ca:d2:4c:10:c3:96:24:63:07:9c:c6:ce:00:c1:79:
         4c:81:e8:0a:fd:2a:10:29:38:c0:6a:6d:00:82:7d:97:ea:a5:
         5e:79:9e:d6:3e:d9:ba:0e:57:09:dc:78:90:d4:f9:c1:78:bf:
         e9:5b:85:c1:5f:05:e5:21:7e:83:97:b3:12:a3:4b:59:8f:21:
         41:14:67:0f:90:85:74:10:3a:da:f4:08:51:ab:d3:8f:69:0a:
         ab:d1:78:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:14:58 2025 by rpki-client