Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d08715b3-6835-3c30-ad43-74686a075e4c.roa
File:                     d08715b3-6835-3c30-ad43-74686a075e4c.roa (raw, json)
Hash identifier:          5tIbcaS5BAiYoaV8TZp0/jrQeJ9CxZZ5HxAyGDjOtEM=
Subject key identifier:   B8:85:5C:89:A1:31:52:DA:87:21:95:41:E6:A9:B1:C0:19:66:E0:2C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B44B1B8B640787D8F39ED2F40
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d08715b3-6835-3c30-ad43-74686a075e4c.roa
Signing time:             Sun 21 Sep 2025 13:00:42 +0000
ROA not before:           Sun 21 Sep 2025 13:00:42 +0000
ROA not after:            Sat 20 Dec 2025 14:00:42 +0000
asID:                     3561
IP address blocks:        104.164.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:b1:b8:b6:40:78:7d:8f:39:ed:2f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 21 13:00:42 2025 GMT
            Not After : Dec 20 14:00:42 2025 GMT
        Subject: CN=ffc7fe9d-5888-4e65-913b-a54a163c57aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:56:9b:83:4f:84:10:89:de:b3:ff:92:c7:1d:
                    d0:75:ff:8b:ec:52:76:45:44:96:25:af:e2:d1:01:
                    9c:af:1b:30:e6:08:fa:6e:80:78:0a:09:a7:a0:a8:
                    79:dd:c3:10:3c:17:9b:fe:4e:c8:bf:d3:57:5c:d6:
                    c7:04:79:48:ee:05:63:ad:34:51:e9:05:75:f8:39:
                    c6:90:8f:51:1d:b7:c0:6f:0c:81:f3:b1:e5:02:dc:
                    86:00:ea:05:6b:f7:f3:94:60:43:b8:fd:00:c3:b3:
                    80:90:0b:b7:aa:98:e7:2a:05:b0:8f:df:c6:d3:39:
                    6c:62:43:16:73:98:ce:36:db:a2:32:98:28:b2:a7:
                    c9:aa:59:cf:c9:7a:71:42:73:be:c3:57:57:db:90:
                    29:b2:a6:2e:d4:76:29:b8:eb:2a:99:58:50:b4:c5:
                    6a:dc:76:9a:1b:7f:fa:49:49:49:1e:e9:54:b8:f8:
                    68:63:fe:6d:28:7f:8d:24:67:58:ee:7c:af:8c:6c:
                    04:b6:29:8e:6e:a3:64:83:d6:2a:e2:39:68:2c:1f:
                    46:f9:7f:fd:9d:55:18:28:e8:85:fb:82:a7:24:c4:
                    49:bd:0e:af:6d:76:ab:2b:ee:51:4e:4a:c9:31:cc:
                    18:3b:a5:f6:d3:0e:14:80:21:ab:66:9b:4a:fd:3b:
                    de:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:85:5C:89:A1:31:52:DA:87:21:95:41:E6:A9:B1:C0:19:66:E0:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d08715b3-6835-3c30-ad43-74686a075e4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:9b:d5:17:30:e8:5b:28:60:d5:8c:0f:17:a9:7a:cc:74:a7:
         56:b6:5a:4d:18:3a:ce:34:82:31:18:a3:d1:8d:58:fa:e4:10:
         21:a3:90:c2:b0:81:70:a4:ef:aa:8d:8a:95:bf:70:72:73:3e:
         0c:1a:13:7a:33:b6:87:c2:9e:7d:ba:73:62:d9:9b:c1:df:68:
         27:1d:8b:fd:95:4d:cc:fe:2f:97:d6:6b:93:d8:fc:e0:27:af:
         dd:35:0b:8c:b6:ac:72:13:77:db:17:66:13:12:72:2e:e7:2a:
         38:5a:9f:e0:91:ce:98:2e:89:1e:9c:29:ec:75:8c:0d:df:d9:
         f9:0e:27:1c:fd:eb:02:e7:29:97:6f:8c:94:cf:f8:ae:a4:d6:
         69:a8:5b:24:46:c6:a1:3f:42:fe:2f:ca:1e:26:bb:21:e8:b9:
         3a:6c:53:05:43:f1:f6:f3:fe:c3:f2:9d:6a:b8:96:7e:bb:e1:
         7f:61:2c:fc:f3:7b:b0:ac:d6:34:3e:01:12:75:bc:11:f6:e5:
         a1:db:65:0c:2b:4a:fd:c5:1c:fc:b7:ad:d4:99:13:27:b1:be:
         4c:59:46:c8:6a:19:00:15:6d:e2:94:0f:12:02:25:18:62:ef:
         b7:c5:12:24:a1:ab:12:1f:98:b0:76:0b:68:f0:d3:a8:0a:94:
         59:23:fa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:14:47 2025 by rpki-client