Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f85fb374-c137-30cb-882c-353ceffe6441.roa
File:                     f85fb374-c137-30cb-882c-353ceffe6441.roa (raw, json)
Hash identifier:          s+PIX24UL5hExaZ1fQ/hcA4xXxQjN7q8TeJ62r6QTys=
Subject key identifier:   D6:21:AA:72:5D:98:D9:48:F3:E7:C2:85:91:82:9F:74:92:9E:AA:7E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584B3126F04E59CA3C4933048A00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f85fb374-c137-30cb-882c-353ceffe6441.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     44547
IP address blocks:        104.252.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:f0:4e:59:ca:3c:49:33:04:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=0da10f8f-6f33-43b1-a7b8-2f6e8827e5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4c:6e:d5:15:cd:80:e8:bb:32:51:4e:bd:78:
                    14:be:de:91:c2:9b:83:1a:34:ad:ec:7d:e9:a6:a4:
                    3f:44:0f:34:67:24:48:10:e9:18:0b:06:dd:52:14:
                    db:1b:ba:e7:38:59:4a:d6:9b:95:51:c9:91:73:f2:
                    ba:07:20:1e:78:2b:69:0b:2c:f4:06:e7:cc:c0:49:
                    e4:aa:b0:2e:50:01:b9:d4:78:0e:47:f2:88:25:82:
                    6b:0f:69:f2:99:18:b1:06:f9:f8:a5:e9:7c:93:5a:
                    0e:48:82:52:e2:9b:74:ec:69:f0:67:e6:23:f6:f3:
                    22:f5:3c:6b:db:fd:d7:99:e1:cc:87:d0:3c:af:3e:
                    c9:d6:fe:3e:cd:a0:7c:5b:b8:9b:8f:e3:c6:78:6e:
                    fd:ad:e7:cb:3b:1b:60:72:35:90:1c:2e:3c:ef:d7:
                    1a:b0:82:9a:1e:ac:19:25:3c:bd:31:90:88:df:79:
                    d7:7e:89:63:5f:c0:ed:ac:08:5b:2d:aa:b6:f4:71:
                    27:dc:9c:87:da:b1:2d:28:23:e1:a7:52:a5:e3:0f:
                    7a:fb:8a:b4:ad:a4:75:85:24:2b:f0:36:dd:e2:38:
                    db:a2:3c:ef:2a:cf:7f:55:a8:2d:9f:c1:fd:c5:90:
                    43:f4:de:a8:9c:76:9b:92:39:f7:c8:c5:cc:bb:6c:
                    59:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:21:AA:72:5D:98:D9:48:F3:E7:C2:85:91:82:9F:74:92:9E:AA:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f85fb374-c137-30cb-882c-353ceffe6441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:28:1b:b7:b4:f4:c5:0a:5c:d0:5c:c7:ef:7b:8a:b1:f0:86:
         0e:3a:29:bc:a8:3c:5d:af:47:b0:9a:f0:66:9d:fe:46:68:93:
         61:85:2b:92:ae:c7:8b:ee:2a:24:3a:bd:ac:8c:09:50:fa:91:
         f9:c6:15:b0:e1:e8:fa:6c:3e:5d:97:93:dc:78:1d:61:ad:3f:
         88:dc:cd:7a:85:b3:b7:8d:e3:d9:a9:7c:22:0e:20:95:49:52:
         c2:f7:f2:67:d3:3e:f6:79:1c:1e:58:48:17:af:90:cc:68:0a:
         24:7f:8f:3a:35:84:c1:79:a1:0b:01:3f:30:e9:c4:52:c2:eb:
         db:57:f8:e4:db:af:8d:c9:3d:95:c8:15:65:46:24:6c:3f:0e:
         a3:21:4b:66:51:47:9b:96:89:01:b5:1f:81:97:04:e7:5e:28:
         98:ca:97:15:1b:c8:a2:f5:d3:32:98:ff:9e:99:bd:ea:7c:e5:
         4e:89:6e:44:4f:79:ee:7b:80:ea:13:d7:19:16:36:bf:c8:b8:
         87:20:5c:3f:0b:69:86:ba:27:1a:52:00:57:af:68:57:48:6f:
         5f:b7:42:1f:47:c7:9b:aa:0b:ea:67:45:78:b7:76:2d:b9:95:
         c6:39:7a:ad:b5:f1:08:09:e4:3f:cb:d6:94:66:f8:2d:f0:f9:
         3a:d0:ab:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:13:45 2025 by rpki-client