Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4013cc9e-8974-342c-8e55-3b51b028f86e.roa
File:                     4013cc9e-8974-342c-8e55-3b51b028f86e.roa (raw, json)
Hash identifier:          tHMS7C0DAa/8/cDqu5OLtclBG1Mh/9ZOkFtowPsP4CY=
Subject key identifier:   10:14:D2:A5:24:B3:31:38:85:F1:0B:C3:D7:7A:7C:14:F1:B1:80:75
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F38B27344DD12F6241B50C500
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4013cc9e-8974-342c-8e55-3b51b028f86e.roa
Signing time:             Sat 19 Sep 2026 01:00:12 +0000
ROA not before:           Sat 19 Sep 2026 01:00:12 +0000
ROA not after:            Fri 18 Dec 2026 02:00:12 +0000
asID:                     174
IP address blocks:        104.164.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:38:b2:73:44:dd:12:f6:24:1b:50:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 19 01:00:12 2026 GMT
            Not After : Dec 18 02:00:12 2026 GMT
        Subject: CN=dcba8a70-46b8-4d84-b9d5-ab7937ace06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:97:80:30:6d:b0:5e:b8:5f:b9:17:b8:da:
                    43:2d:c8:c6:92:5a:7b:78:0a:5f:a5:b0:a0:cb:63:
                    45:0e:3b:c0:48:a1:6e:f7:64:7f:6e:50:6f:55:70:
                    65:0e:ae:c5:8f:30:ef:e1:cf:77:7c:46:95:6f:9d:
                    aa:e6:7b:19:a1:c7:f4:b8:39:9a:aa:06:c6:72:ea:
                    cb:0e:e2:01:e3:b3:10:72:e3:b9:ed:3b:2f:3b:1d:
                    a4:f5:af:f4:43:0f:36:a0:32:2a:f3:a7:e2:d2:22:
                    fb:7a:3e:21:83:fa:a5:21:96:2b:d2:45:3e:4f:1a:
                    82:ab:61:e7:ce:e1:b3:c8:8a:30:94:ad:eb:5b:d7:
                    07:d3:37:55:f5:5c:12:85:99:0b:bb:0b:db:a2:17:
                    55:e0:43:12:86:5c:81:9d:8d:46:b6:32:19:c4:c9:
                    de:26:ec:0d:c2:6b:e2:0e:1c:13:ed:66:72:68:22:
                    25:1c:72:9a:32:e1:13:61:6f:44:c2:bf:b6:9a:e0:
                    9e:9e:20:a5:18:56:bb:b3:37:f5:1b:e1:89:59:31:
                    4a:36:5b:bd:ae:f7:e7:ed:2d:3c:b8:09:43:f9:af:
                    b9:6b:c0:8c:ad:b2:ac:18:9a:7d:1c:7c:e7:ec:94:
                    d7:d2:7f:41:9c:d7:14:96:ab:73:59:49:a0:fc:01:
                    f1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:14:D2:A5:24:B3:31:38:85:F1:0B:C3:D7:7A:7C:14:F1:B1:80:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4013cc9e-8974-342c-8e55-3b51b028f86e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:51:59:cd:5f:1e:8a:87:be:9b:31:bf:d7:1f:dd:1e:e6:3b:
         c1:4e:88:14:b6:d3:12:f2:4a:d1:f3:ab:23:7f:a0:c0:a4:f5:
         fb:fc:b8:23:52:3a:cc:9a:a0:fe:77:44:c3:88:02:6a:bf:9b:
         f3:49:08:65:3c:4c:04:c1:12:8b:44:5e:3e:3a:ba:c0:d8:32:
         ed:da:9e:f9:13:48:79:59:94:7f:e9:97:2e:01:81:04:7c:34:
         be:33:3a:8a:50:4b:21:1c:cd:85:93:d9:03:35:99:c0:58:e9:
         25:b7:dd:b5:b3:45:f9:fb:ab:7b:60:4d:e1:d4:cd:90:5a:1a:
         1b:8f:a2:b2:20:cd:70:b3:3f:eb:82:60:3a:f9:33:7a:1f:c4:
         15:3f:ad:41:94:87:08:22:be:f9:f4:b6:1c:b7:3c:b3:8c:ab:
         f5:94:92:5e:fe:eb:39:da:f0:7c:ed:89:7a:e9:fc:35:92:11:
         07:f1:23:fe:bb:91:44:8f:85:f1:ad:41:fb:ac:64:39:73:52:
         19:09:86:3a:e3:a2:22:84:13:7e:f1:95:6e:2c:3c:35:f9:ba:
         eb:3e:75:10:91:47:98:7e:68:b3:07:6a:8f:1c:7e:23:0f:38:
         8a:f3:b4:3a:53:08:95:9f:5e:c3:e7:ca:a3:de:2a:5e:6e:d6:
         ee:90:39:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:36:18 2026 by rpki-client