Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d01a1817-60c4-37ed-bebc-592983a6455d.roa
File:                     d01a1817-60c4-37ed-bebc-592983a6455d.roa (raw, json)
Hash identifier:          Cbq1JlOhPuy5bZgaczpzogS0T0ZtrphNM68vrqerRNA=
Subject key identifier:   84:7B:34:16:8E:D7:CE:F1:F7:2D:A3:BF:D9:83:E1:D5:65:14:4F:60
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B2380A96C394F07093812A920
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d01a1817-60c4-37ed-bebc-592983a6455d.roa
Signing time:             Tue 09 Sep 2025 15:40:14 +0000
ROA not before:           Tue 09 Sep 2025 15:40:14 +0000
ROA not after:            Mon 08 Dec 2025 16:40:14 +0000
asID:                     9304
IP address blocks:        104.165.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:80:a9:6c:39:4f:07:09:38:12:a9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  9 15:40:14 2025 GMT
            Not After : Dec  8 16:40:14 2025 GMT
        Subject: CN=ee708569-e08e-449b-82c1-b90ea2c8b485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:63:c6:d0:91:6d:3a:a9:ad:60:73:79:4c:48:
                    e9:a4:91:fb:e8:0f:6b:f3:62:31:22:4a:68:17:62:
                    62:e4:6a:8f:8c:a5:33:95:51:60:f4:95:dc:f3:f1:
                    6a:09:bd:c4:43:d1:1a:71:c5:98:4b:47:38:69:51:
                    d0:ea:4c:79:b3:ca:09:de:b4:da:50:c5:d4:e7:62:
                    91:7f:72:fb:9d:e1:ce:78:7a:06:88:af:da:3c:b0:
                    8e:40:9c:36:61:4d:8c:f3:7f:99:93:93:0d:c0:9b:
                    51:ea:06:76:81:ce:57:a7:c6:ff:4f:2e:41:58:8b:
                    f3:fc:31:42:b4:08:df:1a:c2:12:39:01:8a:b8:1c:
                    99:77:cb:8f:fe:be:b3:f6:e8:49:3c:2f:99:a6:16:
                    43:f8:ee:30:84:dd:74:53:21:7d:29:ba:4f:9d:17:
                    06:22:41:1f:aa:28:4a:e0:3a:f9:2e:cf:b2:d7:b0:
                    e1:05:6f:dc:30:ce:59:e6:72:44:e3:b4:17:d7:95:
                    10:cb:84:a3:e1:b0:a2:fa:97:dd:c7:09:47:ab:d8:
                    da:6f:42:be:a1:98:30:e1:78:b0:34:b2:20:69:28:
                    0d:d1:c9:15:3a:44:f7:7d:45:b3:23:13:45:9f:c1:
                    3a:71:6a:85:fb:8d:ad:9b:37:54:a1:44:5d:ac:cb:
                    6a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7B:34:16:8E:D7:CE:F1:F7:2D:A3:BF:D9:83:E1:D5:65:14:4F:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d01a1817-60c4-37ed-bebc-592983a6455d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a8:ef:dc:a5:a1:ed:9a:bf:7c:d8:df:6c:90:82:1a:ed:a5:
         a0:b8:19:8f:02:76:8d:c1:27:07:91:d6:44:f1:90:c3:65:1f:
         cc:8a:0c:0f:81:7d:cb:03:91:32:7b:e5:81:7d:18:fb:8b:5e:
         ab:ed:01:8c:ef:94:d1:8d:72:b7:9c:55:6b:41:01:b8:72:3d:
         f3:bd:02:d7:66:d6:93:a9:58:9d:ff:bd:06:3c:d2:1d:2c:30:
         5d:0c:84:ab:80:21:9f:cb:1c:e8:d2:fd:e1:ad:0d:24:af:61:
         b4:a6:e9:ab:7f:5f:4e:f3:3e:6b:b1:7e:fa:da:61:72:8f:43:
         b6:42:a0:6a:8f:d7:15:91:11:2d:56:80:3c:56:83:23:2a:e3:
         10:13:8b:00:23:98:16:c9:3a:65:00:ef:8f:bf:c2:28:77:74:
         4b:9e:b6:aa:f6:1c:85:f9:56:e8:5c:6c:07:ce:56:69:ba:06:
         a5:e2:ba:23:a2:d0:67:7c:7e:da:66:76:68:30:37:d4:c4:fe:
         58:40:84:fd:6d:e8:e5:47:2c:54:76:45:f9:ad:ec:b0:5b:f7:
         a7:2e:b4:c3:1a:64:d2:48:7b:43:55:37:86:95:df:06:8d:40:
         03:ae:49:df:89:d2:03:db:8d:27:a7:7a:28:f8:bf:70:b1:ad:
         97:e8:d1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:07:43 2025 by rpki-client