Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/973d0c52-3316-33ed-9e24-c8a98da079c4.roa
File:                     973d0c52-3316-33ed-9e24-c8a98da079c4.roa (raw, json)
Hash identifier:          hcoJONbdDwsUMrhF7tTH/83iF5jCZctBmDva/F43fL8=
Subject key identifier:   FE:87:DA:E7:ED:6D:F5:3B:FB:1B:F1:AF:BD:4E:60:DD:D1:4B:E4:45
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B2A2C4D24035DFB99FAB9A700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/973d0c52-3316-33ed-9e24-c8a98da079c4.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     44133
IP address blocks:        104.253.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:4d:24:03:5d:fb:99:fa:b9:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=173bff55-f0b6-403a-a37c-72e2c5678960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:11:8f:2d:1d:88:88:84:ee:18:fd:3d:3d:
                    6a:a5:52:c2:60:0d:c9:8e:e2:ed:59:47:7f:8e:c2:
                    56:a2:52:c6:10:dc:1c:8f:a4:56:57:8f:14:57:3e:
                    c1:86:18:17:58:04:34:34:af:52:30:33:54:11:96:
                    7f:32:a9:0b:f1:74:05:b7:8f:f7:26:84:c8:96:d2:
                    38:ff:5a:d4:91:07:1c:78:34:76:80:80:eb:05:b2:
                    eb:5a:7a:84:12:02:34:d8:e8:32:e6:96:21:26:9f:
                    b5:31:5a:68:b6:48:1b:10:6d:02:5d:be:13:e2:80:
                    30:1b:35:0a:55:e9:74:b1:06:88:22:da:10:1c:44:
                    44:97:d1:49:90:1e:1f:20:2a:88:36:38:f9:f7:93:
                    12:1b:cd:45:f1:58:c4:29:47:d8:46:c7:94:b8:c1:
                    5c:f8:e3:95:a1:12:21:b5:fc:29:84:60:4e:53:da:
                    5f:47:21:2f:83:bc:e4:36:94:28:64:ff:7a:0c:55:
                    66:84:20:39:11:3c:a6:81:88:e8:01:aa:da:dd:e9:
                    bb:69:38:de:00:7a:b1:05:4d:3f:9a:b9:f9:d4:33:
                    92:76:ba:50:0f:5c:34:11:a2:68:f2:22:e1:9d:0d:
                    9b:69:06:70:fb:23:d9:66:e4:25:99:7a:8f:10:90:
                    35:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:87:DA:E7:ED:6D:F5:3B:FB:1B:F1:AF:BD:4E:60:DD:D1:4B:E4:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/973d0c52-3316-33ed-9e24-c8a98da079c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:4b:7e:0c:91:6d:d2:72:f1:28:99:cb:3d:c5:99:c0:3b:e2:
         41:e2:37:cb:29:4b:e5:b1:a6:20:90:ab:6f:fc:b4:ae:c8:1b:
         10:6c:70:ef:19:be:75:47:4e:05:30:8d:84:af:cf:a1:6b:a6:
         68:b7:8c:ac:42:b5:38:15:4a:d2:e5:56:2c:e7:18:98:58:cc:
         cc:ee:a3:88:38:06:b5:af:ee:e4:c0:26:db:d4:c1:c3:ca:63:
         46:c8:22:9a:ee:b5:a7:f3:38:95:9d:ed:b8:c2:64:a9:e0:9a:
         67:5c:b6:c6:5e:dd:9f:d5:90:e0:e7:7c:0d:cd:30:9d:e2:40:
         04:15:02:d0:45:6b:18:1f:15:a0:f3:60:9d:95:fd:21:33:12:
         d5:f1:3f:26:fb:9d:72:27:e1:ce:d4:7a:a1:8d:e5:7c:e6:0a:
         e6:6c:c2:90:0b:35:bb:9d:94:89:13:a8:3f:6e:d6:67:a3:ee:
         a9:48:85:2a:79:39:b1:a8:e6:2d:4f:4a:09:05:04:da:26:9a:
         e9:23:b9:95:a5:4e:aa:3b:39:58:90:e6:a3:da:1f:62:00:0b:
         4c:b7:62:b1:fb:6b:cf:c8:fa:a3:ca:d0:cb:f6:9b:ae:27:66:
         e4:3e:67:4d:51:92:bd:bf:ee:69:c8:d4:0d:10:03:46:7b:51:
         57:98:d2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:14:53 2025 by rpki-client