Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c25f8df8-ddee-3027-9ca6-1039962ad615.roa
File:                     c25f8df8-ddee-3027-9ca6-1039962ad615.roa (raw, json)
Hash identifier:          gO/CGPb/gzL9t3befQLNEcvdHKhkN0J45/2tJ/5F3s4=
Subject key identifier:   45:85:A5:F3:7D:4D:86:95:32:74:F2:50:45:FC:62:97:43:BC:BB:9B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CBC2E4255D58E8B382880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c25f8df8-ddee-3027-9ca6-1039962ad615.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     6939
IP address blocks:        104.164.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:bc:2e:42:55:d5:8e:8b:38:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=803bda85-2a2b-4b9d-bd65-6796338d6a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:73:45:92:98:0a:6b:9b:b0:8e:f9:44:c0:4e:
                    32:c9:a6:a8:91:66:f0:5f:16:f2:41:1a:9f:82:45:
                    bc:13:eb:61:98:19:24:8a:a7:5f:a9:df:e5:2e:4d:
                    3b:84:89:d5:85:62:28:35:9f:89:22:f4:5c:e9:1a:
                    6c:e4:eb:a4:8e:d2:91:d1:0d:fa:f9:64:5c:20:7e:
                    8c:29:71:7b:00:8c:08:ae:fb:3d:1c:d7:6b:17:87:
                    fe:8d:2d:fa:b4:89:0f:7c:0b:fd:ea:7d:f3:35:1d:
                    20:85:ab:c6:fe:2d:d4:95:fc:6b:43:7c:60:08:1e:
                    c2:24:85:44:26:19:5c:eb:8c:06:1f:84:7b:17:10:
                    bc:f2:79:3e:f9:03:27:a5:30:e1:07:f4:ba:b1:2d:
                    f6:29:e1:a0:63:ca:7b:14:03:83:01:9e:87:17:f5:
                    44:3f:40:41:1d:10:fb:c4:11:47:7c:1c:c6:ea:75:
                    f5:f7:35:ca:52:d7:93:1d:56:b8:e7:ae:bc:3b:c2:
                    85:16:6d:92:f4:7f:83:f5:4b:b6:90:75:ee:c6:d6:
                    2e:78:61:a0:de:67:12:6e:98:85:ef:db:4f:bd:4d:
                    47:81:96:49:75:e4:f1:9f:77:f2:7a:e9:8c:a2:fd:
                    fc:1d:1e:94:e8:63:b0:90:c8:46:d2:9e:5f:63:35:
                    a8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:85:A5:F3:7D:4D:86:95:32:74:F2:50:45:FC:62:97:43:BC:BB:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/c25f8df8-ddee-3027-9ca6-1039962ad615.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e8:de:6d:a8:73:d3:d9:f9:ff:3c:47:0e:6d:35:50:b8:9f:
         26:36:95:3a:db:b0:0b:83:6f:99:ff:19:c5:32:3e:dd:b8:96:
         cc:9a:0c:61:76:df:32:7c:43:6d:e4:17:51:bb:28:68:bc:cd:
         ba:32:a0:ec:3d:c8:ee:72:c8:1e:ae:88:7c:8a:83:8b:15:1d:
         96:b1:69:a8:eb:ba:21:d5:45:64:75:e9:af:ca:8f:bf:90:1e:
         6d:ef:7b:da:71:88:58:38:4c:5d:dd:c5:34:55:6c:b8:58:82:
         1a:40:fd:a4:77:61:83:b2:6a:a0:de:57:b2:cf:95:6f:16:ca:
         9e:56:77:e7:88:9d:87:45:58:32:e9:6e:d1:72:94:2a:67:44:
         26:27:4f:96:6f:5c:96:a4:5d:da:bd:a5:82:f5:66:5d:22:b3:
         27:c2:3d:97:0b:f9:23:20:e5:09:86:35:21:7e:6d:63:c2:7d:
         ff:75:bd:c4:37:57:99:6b:3a:2d:20:a0:e6:86:96:ae:b2:ce:
         6b:17:0b:9b:23:a4:36:c4:96:13:56:b6:b4:33:d0:cb:3f:80:
         1d:87:46:81:c6:32:7e:08:ea:c9:e1:b0:48:7a:46:23:67:f8:
         31:0a:f7:87:b6:3f:b6:4b:44:4b:6c:7f:6a:6f:0e:22:04:87:
         96:88:b1:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEttLLwuQlXVjos4KIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
ODAzYmRhODUtMmEyYi00YjlkLWJkNjUtNjc5NjMzOGQ2YTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHNFkpgKa5uwjvlEwE4yyaaokWbwXxbyQRqf
gkW8E+thmBkkiqdfqd/lLk07hInVhWIoNZ+JIvRc6Rps5OukjtKR0Q36+WRcIH6M
KXF7AIwIrvs9HNdrF4f+jS36tIkPfAv96n3zNR0ghavG/i3UlfxrQ3xgCB7CJIVE
Jhlc64wGH4R7FxC88nk++QMnpTDhB/S6sS32KeGgY8p7FAODAZ6HF/VEP0BBHRD7
xBFHfBzG6nX19zXKUteTHVa45668O8KFFm2S9H+D9Uu2kHXuxtYueGGg3mcSbpiF
79tPvU1HgZZJdeTxn3fyeumMov38HR6U6GOwkMhG0p5fYzWoDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEWFpfN9TYaVMnTyUEX8YpdDvLubMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYzI1ZjhkZjgtZGRlZS0z
MDI3LTljYTYtMTAzOTk2MmFkNjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKTCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHvo3m2oc9PZ+f88Rw5tNVC4nyY2lTrbsAuDb5n/GcUyPt24lsyaDGF2
3zJ8Q23kF1G7KGi8zboyoOw9yO5yyB6uiHyKg4sVHZaxaajruiHVRWR16a/Kj7+Q
Hm3ve9pxiFg4TF3dxTRVbLhYghpA/aR3YYOyaqDeV7LPlW8Wyp5Wd+eInYdFWDLp
btFylCpnRCYnT5ZvXJakXdq9pYL1Zl0isyfCPZcL+SMg5QmGNSF+bWPCff91vcQ3
V5lrOi0goOaGlq6yzmsXC5sjpDbElhNWtrQz0Ms/gB2HRoHGMn4I6snhsEh6RiNn
+DEK94e2P7ZLREtsf2pvDiIEh5aIsUk=
-----END CERTIFICATE-----
Generated at Sat Oct 11 11:09:18 2025 by rpki-client