Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b239042f-6cca-3a35-9586-e97dc457062e.roa
File:                     b239042f-6cca-3a35-9586-e97dc457062e.roa (raw, json)
Hash identifier:          BukeqcGHpyc4r6+gtBqUGY6sQewOOYfGZ6DJ0IYu3Mo=
Subject key identifier:   80:0E:7E:07:83:CB:95:58:E8:5B:41:EC:36:54:5D:7B:EA:D3:F4:9D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B715D0ED401714CAF8ECAAC20
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b239042f-6cca-3a35-9586-e97dc457062e.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     48031
IP address blocks:        104.164.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5d:0e:d4:01:71:4c:af:8e:ca:ac:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=c61f536a-425a-435f-911c-4e628deacae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:28:09:1e:a7:f4:79:f6:90:b1:74:f5:46:6a:
                    7d:22:c7:19:19:7d:ba:d3:c0:46:be:3a:70:8b:5a:
                    8b:36:c0:a5:58:94:27:72:89:45:ea:af:36:7e:57:
                    2e:86:7c:fb:f5:5e:fe:6a:69:1e:6b:84:38:ee:c2:
                    fb:fe:56:60:00:0b:75:15:21:9c:0f:57:a6:9c:06:
                    62:b4:fd:23:61:15:0d:09:92:49:d0:d4:3a:bf:18:
                    99:b4:d0:fa:e5:ef:66:a8:da:80:dc:33:32:bd:13:
                    66:41:6f:67:9c:ed:ee:b4:4a:c0:66:12:a5:ef:0e:
                    87:ef:cd:cb:79:25:37:7d:1f:59:ef:a9:c7:68:88:
                    1f:cd:fd:ab:29:02:f6:d4:2d:1d:de:66:c6:e3:ec:
                    d2:a1:fe:9c:89:3d:54:ed:b9:4d:27:cf:cd:30:51:
                    90:54:09:6b:b2:ee:12:f9:9c:a6:09:05:2e:78:f8:
                    56:fb:db:6f:3b:d0:f7:6a:46:96:0b:63:5f:88:da:
                    a6:7c:42:4a:99:76:be:7c:39:06:e8:04:3e:9e:80:
                    2c:94:86:04:12:5d:fa:6c:5b:c3:01:f2:c3:a5:9e:
                    b2:78:cd:12:82:4b:89:8f:d6:b9:09:ed:3c:3d:be:
                    a0:1f:25:4e:b2:d6:15:f9:3f:8d:17:b2:89:72:33:
                    b9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0E:7E:07:83:CB:95:58:E8:5B:41:EC:36:54:5D:7B:EA:D3:F4:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/b239042f-6cca-3a35-9586-e97dc457062e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:64:f5:f3:f0:1e:99:67:1c:2e:4f:db:09:a6:eb:b2:21:9f:
         8d:91:ff:ac:db:9e:4a:a6:67:02:84:10:ee:c2:11:61:7b:0a:
         77:07:fd:5c:8d:77:d3:7a:67:91:5d:6e:b0:7a:47:cc:03:a8:
         dc:89:3d:f5:61:57:5c:85:58:a1:c8:52:c5:45:ea:04:dc:1f:
         22:76:b9:1c:6b:41:bc:ad:d3:cf:98:bd:05:e7:af:41:b0:73:
         5c:72:ac:a6:8b:23:e4:6c:44:2d:c7:c3:54:2f:18:de:e8:08:
         ca:67:7a:3c:77:bd:73:27:eb:b8:70:28:7a:2a:e5:e7:f6:62:
         06:e0:1e:3f:4c:e3:53:dd:5c:0a:83:40:75:40:9b:74:8c:e1:
         a2:97:51:04:c7:8c:42:a3:0f:1c:bf:5d:02:95:11:5f:c9:9b:
         ba:a8:19:7b:7c:0c:ee:3a:91:f0:5a:98:c4:fc:35:d6:70:d1:
         e2:7e:c8:ee:92:c6:2f:34:4d:e7:95:66:ad:d3:94:36:33:ba:
         11:d9:ec:2c:cf:dc:0f:ae:75:de:28:46:88:13:36:ca:6d:5c:
         1a:09:90:ab:65:f8:be:0b:11:c4:79:2d:df:d6:4e:84:c0:8a:
         e7:9e:59:aa:99:c0:09:94:6a:e8:f8:11:fa:1a:91:97:07:4a:
         b3:eb:ce:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:16:14 2025 by rpki-client