Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c070f1a2-9aad-349a-b790-94d2613252a1.roa
File:                     c070f1a2-9aad-349a-b790-94d2613252a1.roa (raw, json)
Hash identifier:          0HqFgqpfa0FLKHG4X6D362r3m7G3HqJGDuVMdTViqOA=
Subject key identifier:   77:3A:A4:60:57:DF:87:61:A3:D6:3D:57:94:A1:30:4E:42:76:54:01
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B540C984F2BF6DE3064C5FC80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c070f1a2-9aad-349a-b790-94d2613252a1.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     213035
IP address blocks:        104.164.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:98:4f:2b:f6:de:30:64:c5:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=427890bb-ae87-453b-bbba-65a8c9c43265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2b:da:41:bc:4c:38:22:08:6d:0e:66:ad:96:
                    bc:ef:9d:51:e2:20:52:ae:e9:f2:c1:bf:a1:9b:23:
                    c9:99:8d:7d:91:76:b6:81:6e:d6:cd:aa:05:43:3f:
                    18:5f:80:ba:02:a7:95:a7:d5:f3:d2:97:bb:29:d6:
                    4e:54:ec:0d:5a:16:38:a2:79:5d:18:c1:80:f6:98:
                    17:e3:6b:93:62:28:dc:e2:32:e0:1c:4c:e7:b5:bb:
                    19:49:35:91:42:fa:27:89:cb:bf:63:71:77:0c:4f:
                    d3:e8:21:2e:e4:5a:e0:45:73:75:f0:e7:d7:e9:dc:
                    b7:bb:e9:e1:90:ba:eb:76:d1:f8:b9:e8:a1:23:8a:
                    2c:18:5b:2d:9b:f8:25:f8:fd:81:75:01:ff:d2:da:
                    f1:64:11:79:9f:0d:6d:27:0b:27:7c:f0:ab:00:e7:
                    2b:45:df:65:3e:99:61:49:af:96:f2:b9:d0:e9:31:
                    a5:fd:39:fc:30:cc:29:fb:8e:d9:85:4a:88:26:66:
                    03:a4:7c:cb:af:f4:35:7e:72:f2:e2:c5:03:b2:8a:
                    76:33:7f:8d:b8:66:e3:02:25:ea:2e:0b:5e:46:16:
                    66:6f:93:c7:d0:2e:5c:bb:51:76:42:f3:3f:85:9a:
                    ef:84:61:88:1e:3d:3c:63:30:51:48:c5:8c:b4:94:
                    7a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3A:A4:60:57:DF:87:61:A3:D6:3D:57:94:A1:30:4E:42:76:54:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c070f1a2-9aad-349a-b790-94d2613252a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:b9:78:14:25:55:8c:b1:bd:b1:98:5a:2c:4d:a0:3e:df:05:
         39:21:91:09:3f:71:71:92:f8:71:c9:45:12:b8:e7:82:60:24:
         c9:07:58:f9:63:d7:7c:88:e9:e0:97:46:a5:2f:ad:c8:e4:e3:
         b6:f6:93:cf:1a:ef:39:11:f1:4d:e0:11:43:5e:96:95:92:24:
         2e:05:17:6f:89:b7:95:11:89:fb:8e:c1:5a:f5:f8:ee:10:fb:
         21:ea:4b:d9:71:b4:73:fb:2f:b7:04:9c:8a:09:53:c5:9f:df:
         52:11:97:cf:4c:de:a8:b1:fb:19:bc:86:33:f8:35:ac:2b:ec:
         55:71:cd:9e:78:91:f7:cc:e1:b1:6a:42:45:3b:e0:d6:62:ec:
         4e:9d:77:7e:2b:2b:4a:0d:8c:cc:10:25:86:21:cb:8e:39:6c:
         5c:f2:f0:3c:91:8a:1e:93:1f:9f:d9:3d:e5:a3:e5:15:47:be:
         f2:69:ab:d4:6f:95:41:95:7f:d9:7d:0b:8c:0a:97:06:9d:b3:
         15:21:7e:65:5b:97:3b:10:a9:bb:24:95:8d:64:9f:fb:8d:f6:
         7d:91:31:8f:83:40:51:9a:66:d2:15:ad:be:6d:88:7f:00:82:
         12:c3:c5:ee:10:7f:2f:a7:da:09:d0:93:3b:6b:ce:57:37:f9:
         88:67:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:15:06 2025 by rpki-client