Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f534f028-7c2f-3caf-b6ba-aeb7c265b82c.roa
File:                     f534f028-7c2f-3caf-b6ba-aeb7c265b82c.roa (raw, json)
Hash identifier:          GOJ1dK3xiOZ/P+WaGCR+6rXimsLR+rvKhNgrHR+UGq4=
Subject key identifier:   14:DC:B3:BB:78:62:F4:F0:7B:B7:39:09:B8:3A:0B:02:F2:F2:CE:ED
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B6D2CC019B3010C8B2F0EC3C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f534f028-7c2f-3caf-b6ba-aeb7c265b82c.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     6939
IP address blocks:        104.253.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:c0:19:b3:01:0c:8b:2f:0e:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=a16fe0b2-e0b8-41d2-91b6-a46219f45740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:62:68:bf:39:24:13:1e:91:6f:02:b6:d7:4a:
                    36:e9:64:fd:b1:a7:f9:1f:66:5a:54:19:42:c4:74:
                    39:20:ed:b4:73:e9:fe:00:e7:1f:11:7b:63:ea:29:
                    7b:a1:37:9d:2e:9a:b8:83:69:60:15:6c:a3:21:29:
                    f9:87:a5:ea:eb:b6:73:ac:8c:67:d2:0c:1c:71:57:
                    84:df:12:f7:16:13:eb:8d:02:7e:f2:e9:6a:b8:22:
                    05:a5:82:d5:0e:dd:db:cb:1a:36:19:a9:d5:bc:e4:
                    6e:10:4d:d2:95:1a:e3:be:8f:8c:55:23:e0:12:77:
                    37:ca:d0:5e:68:76:c1:c0:0e:00:a1:88:e1:82:9f:
                    2e:53:7c:f6:11:58:29:10:0b:97:12:ec:70:a7:77:
                    72:8e:7d:59:4e:90:15:67:91:1e:c7:d7:99:e7:95:
                    4d:1c:5d:b8:34:eb:a7:e3:56:a7:0c:09:55:2d:d2:
                    41:33:03:d0:ef:8f:d0:85:ad:18:3d:b1:de:6d:1d:
                    22:7f:2b:67:71:97:c3:59:92:bd:d6:2b:e1:6e:87:
                    ce:67:77:8d:b9:c7:d0:65:67:10:d9:1c:5d:6d:f4:
                    a2:d8:1f:80:86:c1:8a:01:3f:88:4f:72:41:b1:9d:
                    bc:e4:32:b9:49:01:69:a1:eb:77:64:64:b6:4b:3d:
                    4b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DC:B3:BB:78:62:F4:F0:7B:B7:39:09:B8:3A:0B:02:F2:F2:CE:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f534f028-7c2f-3caf-b6ba-aeb7c265b82c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:0f:1d:41:9d:8d:10:2a:89:f0:3d:ba:f2:78:c1:a9:12:ef:
         6d:0d:df:5d:fe:d5:46:8f:4e:7c:b8:24:a1:48:6d:fb:c4:31:
         2c:5a:73:a3:5b:eb:e3:6e:a0:29:19:ab:42:dd:41:0a:70:d7:
         95:01:ca:14:ae:dc:40:bc:01:1e:a8:f4:99:be:7f:56:75:ec:
         90:29:db:8b:5f:20:a0:de:d5:63:97:d3:c4:a1:ec:81:53:c6:
         6e:85:e9:7d:43:89:e8:43:00:f1:27:5b:b9:c1:20:08:2c:28:
         bf:ab:4a:ac:15:dd:b6:db:11:87:c9:a4:cf:92:a2:4d:93:e8:
         f0:e5:d1:a2:d3:19:05:1e:2b:13:2e:81:10:6c:f9:9d:e0:a1:
         21:8d:e4:69:2b:5b:07:fd:6c:9c:81:c3:7f:a5:53:9b:47:6e:
         d9:1f:3c:a4:7d:8e:3e:0f:bc:21:3f:5c:50:37:43:73:41:6a:
         cf:06:50:15:e1:f5:64:87:c8:49:23:3c:ad:91:87:12:7d:9e:
         cb:00:f5:61:a6:8f:5b:85:c6:00:dc:d1:15:f4:10:01:42:94:
         53:64:c3:9a:1e:7e:de:3d:38:7c:65:18:58:e5:d5:1c:19:28:
         55:98:2a:fd:51:27:67:0c:1e:cb:ad:3d:16:b0:bc:f1:3e:85:
         66:5e:34:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 13:30:01 2025 by rpki-client