Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/56b26698-dbfa-306b-b54e-e54b1609f176.roa
File:                     56b26698-dbfa-306b-b54e-e54b1609f176.roa (raw, json)
Hash identifier:          de2kBjE3ybP5l6WlDBjAo6twQvZGJfxpUQ8wD/0vSRw=
Subject key identifier:   65:60:EC:01:C2:6E:0B:EE:E3:97:00:0D:32:0B:5A:F5:D2:61:7B:0B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F63F81069FE2CE7982B024880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/56b26698-dbfa-306b-b54e-e54b1609f176.roa
Signing time:             Sun 04 Oct 2026 13:00:13 +0000
ROA not before:           Sun 04 Oct 2026 13:00:13 +0000
ROA not after:            Sat 02 Jan 2027 14:00:13 +0000
asID:                     396073
IP address blocks:        104.164.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:f8:10:69:fe:2c:e7:98:2b:02:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  4 13:00:13 2026 GMT
            Not After : Jan  2 14:00:13 2027 GMT
        Subject: CN=32ce508c-ac0e-470a-a048-d4861f51e18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3b:6d:e5:94:c0:54:a1:ad:61:dd:ef:f6:5e:
                    4d:6f:65:44:1b:7c:74:ae:0e:7c:a5:67:3b:c2:62:
                    a9:85:d2:04:f8:c1:e0:0a:75:67:8a:6a:b0:5b:d1:
                    22:96:25:25:a4:d8:86:ca:ee:d2:1b:08:86:b8:6c:
                    a2:1a:c3:a0:5e:6e:11:8d:73:f5:6d:80:1a:78:a9:
                    3c:cd:6f:88:52:5b:27:0a:23:94:f9:93:d6:28:ad:
                    61:34:1f:b6:1f:15:14:96:ca:f5:5c:8c:c1:b3:7f:
                    a6:10:92:43:c7:72:ac:2f:85:41:f0:0d:27:e0:c6:
                    f4:ab:f6:78:6a:88:b2:1d:44:75:1c:94:e7:6c:72:
                    cd:48:f1:6d:03:32:4b:97:dd:dc:cd:08:6f:06:f3:
                    9f:2e:e6:96:3a:3e:27:c6:2a:f3:f4:34:6e:bc:a3:
                    ec:41:af:fa:bb:5b:d6:2c:c5:1f:bb:36:08:9d:9b:
                    8a:10:af:7c:2e:da:22:00:14:fc:b0:c7:33:ce:98:
                    26:57:0f:75:60:63:27:9c:59:ee:80:c8:7e:d5:7b:
                    75:b0:47:08:97:f8:09:b3:97:93:27:71:16:ea:d7:
                    23:32:06:f0:e7:46:d6:9a:95:4a:cf:1e:f2:50:11:
                    6d:8b:a3:28:b6:e5:89:06:e3:60:b0:02:5a:af:cc:
                    46:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:60:EC:01:C2:6E:0B:EE:E3:97:00:0D:32:0B:5A:F5:D2:61:7B:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/56b26698-dbfa-306b-b54e-e54b1609f176.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:d2:26:0b:ac:af:b5:76:2a:f0:50:e6:f8:c8:12:80:f3:91:
         fa:56:8e:a1:73:d2:61:53:c1:76:39:96:b0:d0:a7:30:25:b1:
         b3:b4:9c:51:52:8b:8c:73:6c:85:57:fd:7c:3c:2c:3c:a7:1c:
         c6:b2:14:75:f1:16:58:88:f8:f4:45:6a:3f:19:9c:4e:56:dc:
         dd:93:b1:27:0e:88:04:e4:72:8b:64:b9:a3:d7:d0:d4:8e:2a:
         10:2d:16:60:53:db:e5:c2:b5:f9:ec:2b:8e:41:8e:70:e3:c2:
         cb:fd:76:5b:83:90:9b:f6:4f:02:8a:70:ca:36:47:36:3a:e2:
         2a:2f:01:d3:fd:f6:14:4f:cf:5a:61:d7:33:5c:21:0c:60:69:
         a7:41:4e:52:49:9f:9f:39:28:1b:c7:4b:9b:39:6d:ef:01:3a:
         82:01:19:b6:f9:ac:2f:47:d6:fa:54:24:cf:28:da:9b:89:e9:
         6a:d9:dc:1d:2a:86:c7:e0:e5:76:ac:e2:55:d8:44:c6:5e:b6:
         e4:aa:ee:58:c6:7f:36:6a:a0:3a:a9:49:94:f9:16:7f:8a:20:
         19:5f:49:c4:05:b4:2f:7b:f4:eb:7b:5e:51:34:98:6c:fb:18:
         d9:fe:7a:6c:da:17:56:69:e3:c2:a9:c4:f5:84:8b:30:d5:c1:
         1f:8c:9b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 09:39:19 2026 by rpki-client