Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e487f4d0-a693-3fff-bba3-8b7c7bfa0e4b.roa
File:                     e487f4d0-a693-3fff-bba3-8b7c7bfa0e4b.roa (raw, json)
Hash identifier:          Uniuam1nBhZUrh6v1NuWRnKQtPgYrPkRsnvrHdmGM6Q=
Subject key identifier:   76:65:9B:8D:FA:68:91:66:4F:D3:75:2C:BB:8A:DC:19:52:65:8C:F1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CBB7BED6CD480EFDCD240
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e487f4d0-a693-3fff-bba3-8b7c7bfa0e4b.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     6939
IP address blocks:        104.164.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:bb:7b:ed:6c:d4:80:ef:dc:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=ad28f9b5-4a0c-4e88-877b-0b3636081bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:82:00:36:e6:be:9d:32:89:52:19:3e:61:
                    a1:02:39:ee:cb:5f:6f:65:ad:7b:d9:bb:1e:52:fc:
                    b1:f1:d4:4e:45:44:e9:2b:36:13:3d:8f:24:12:1c:
                    43:b0:23:6b:4a:e1:47:89:f3:7d:5a:41:3e:50:2a:
                    72:26:b6:b4:8e:36:81:6e:db:23:57:9d:05:60:b1:
                    9e:55:01:a3:91:a9:6e:5a:e9:e0:1f:6a:20:91:f3:
                    4f:7a:3b:f3:60:4a:ed:8a:e5:27:3f:7d:65:cd:00:
                    95:7b:00:c8:d3:b0:5c:e5:e4:80:08:0c:1e:81:13:
                    58:cb:78:1d:63:96:7f:4e:f1:b3:af:46:a5:b5:f2:
                    20:09:09:6d:b6:65:d0:86:23:8e:7a:6f:2e:f3:0a:
                    db:fe:ee:48:90:63:38:d6:4c:17:ab:19:24:c0:71:
                    07:f1:7b:d8:ec:82:7b:a0:36:17:02:28:ec:84:30:
                    81:04:8e:e7:12:32:44:5f:5f:79:84:84:3b:89:35:
                    21:27:74:26:45:32:ab:1b:ca:07:7a:87:31:9d:97:
                    85:da:b3:a7:26:ad:de:95:4c:24:47:24:45:89:67:
                    17:d0:ab:c6:58:d8:f8:9d:67:e1:ec:f8:75:4b:6b:
                    83:b7:6b:74:44:0b:96:51:0f:b0:b1:39:3c:72:71:
                    58:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:65:9B:8D:FA:68:91:66:4F:D3:75:2C:BB:8A:DC:19:52:65:8C:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e487f4d0-a693-3fff-bba3-8b7c7bfa0e4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:48:85:c5:8f:76:ba:21:f8:db:78:6a:a9:d6:01:1a:6e:fb:
         db:30:fc:de:c7:fb:b4:69:c2:45:e7:1d:d5:5c:24:ff:9a:7b:
         19:44:df:ad:81:b3:0c:c3:8b:e8:ec:d0:cd:67:61:9f:00:55:
         8e:2b:ba:2b:31:83:21:a4:cd:09:fd:c4:c1:a7:f5:dc:5b:d3:
         b4:66:95:2b:8a:f8:3f:53:33:b1:f7:69:7d:67:1b:11:bf:7e:
         48:ff:91:04:ad:95:1f:d9:dd:83:6b:62:8c:87:cb:01:55:33:
         3a:39:6d:24:16:9b:dc:62:13:78:08:bb:e1:71:e9:cc:67:be:
         01:9a:c7:f9:7b:59:8a:80:e6:d0:06:90:ba:d1:4f:20:52:95:
         f2:f5:76:4a:34:22:66:76:82:bf:9c:33:c3:df:e7:08:19:54:
         96:e0:62:91:52:9b:e2:b0:82:35:00:0a:3a:e0:fd:91:43:df:
         bc:e9:f5:58:80:e8:c4:2f:e6:24:b5:8d:22:63:3d:e5:bd:60:
         63:97:d1:3a:3d:df:84:63:76:c1:96:84:8b:83:a7:58:a3:4f:
         22:a5:01:4b:d6:c8:5a:19:4f:16:fe:bc:b7:47:40:07:c2:e9:
         15:8a:25:a5:b7:cd:e7:6c:64:c1:7c:1a:6d:c3:26:55:67:9d:
         c7:49:bf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:09:11 2025 by rpki-client