Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea1ce3d3-be4d-332d-b22b-acfbf90589fd.roa
File:                     ea1ce3d3-be4d-332d-b22b-acfbf90589fd.roa (raw, json)
Hash identifier:          5P87aEwHGi+8HLxnWanMkou3zHmvEKtR+7gt+iPkvO4=
Subject key identifier:   70:3A:BE:9B:26:8B:2C:D1:10:01:AF:FB:FB:48:88:20:66:D5:9B:FA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B16A15A0FAEC48658E2DCF400
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea1ce3d3-be4d-332d-b22b-acfbf90589fd.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     13213
IP address blocks:        104.252.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:5a:0f:ae:c4:86:58:e2:dc:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=bcef757c-6a08-4d0c-a65e-ada7b8928829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:64:46:ba:d3:12:f5:db:eb:53:5a:0e:c7:57:
                    69:52:2d:76:da:46:38:1c:d0:f1:58:f2:fa:3e:cc:
                    bc:18:bf:f7:51:70:aa:7e:6b:41:bb:c7:2f:d3:4a:
                    3d:f9:d5:7e:4c:c5:c5:18:60:ac:d7:3c:dc:63:9e:
                    66:7f:d4:02:91:48:7e:fb:90:12:f2:0d:99:df:d2:
                    51:06:0b:d6:d2:86:4e:67:bb:65:57:c1:93:63:a2:
                    ba:63:ba:7f:a9:09:24:b4:23:72:6b:50:9a:02:0a:
                    13:58:82:96:1e:0f:3a:34:f8:96:b5:18:fe:b2:83:
                    52:e9:07:22:a1:5b:70:79:8e:d1:ac:35:06:53:d0:
                    19:4d:2c:8e:51:02:5c:45:97:ab:66:8a:d9:a9:64:
                    3c:a0:2a:0b:9b:17:86:ed:88:87:d9:ba:6b:2b:5b:
                    d4:1c:29:d2:dd:d1:9b:74:7a:60:03:2c:cf:1c:c7:
                    14:64:c0:53:ae:bb:b1:5c:05:88:b9:36:16:0c:1c:
                    6d:3b:35:63:8b:da:85:5f:e6:8e:ee:98:e5:09:39:
                    1f:24:41:09:89:e7:aa:b0:6a:4f:a0:fe:d4:20:0f:
                    8b:91:71:88:5b:64:89:3d:54:eb:07:5e:6b:5d:b2:
                    b5:03:fe:46:db:a7:82:83:0f:c9:53:da:64:f4:72:
                    e3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3A:BE:9B:26:8B:2C:D1:10:01:AF:FB:FB:48:88:20:66:D5:9B:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea1ce3d3-be4d-332d-b22b-acfbf90589fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:5d:a2:59:81:bf:ae:70:6d:48:5a:2d:aa:ee:04:f6:c7:86:
         b6:64:9f:a6:22:f3:95:0a:7e:ea:29:09:bb:af:c5:10:9d:cf:
         82:1a:b3:2f:38:3d:bb:2f:c5:dc:f8:79:39:49:14:0d:b3:f4:
         f9:f0:5d:80:d3:b3:5a:6d:dc:3e:19:39:10:e3:53:6d:ba:83:
         9d:80:40:36:6c:04:26:3f:36:fb:70:be:31:6e:c2:96:ff:56:
         fc:d3:20:49:ff:a8:7d:0c:6c:48:f2:3b:2c:19:f7:3b:8c:d7:
         e5:3e:a8:a0:ea:78:93:be:4c:a5:ab:cb:2d:da:94:86:c0:bf:
         98:ae:e8:69:5d:a6:14:c6:b4:e5:81:1a:2b:42:e8:e4:02:41:
         77:72:f8:66:af:5f:ac:4f:24:65:23:d0:2f:f7:5f:7c:7d:55:
         7a:98:ba:47:4b:fc:c7:59:1d:e0:85:0f:f1:dc:44:bf:d5:6b:
         7c:5c:62:9c:0e:37:02:c9:4d:1e:e2:71:7c:50:3c:3c:f4:96:
         8f:c5:7d:7d:af:54:c7:40:89:9e:c8:49:52:9c:11:98:82:35:
         c3:a1:84:a3:67:35:a3:d2:78:33:37:82:22:9b:85:8a:f9:5d:
         fe:23:aa:6a:53:bc:6e:df:53:bd:47:0c:06:ff:33:ea:dd:20:
         7a:df:0b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:08:47 2025 by rpki-client