Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/598be54c-db0b-3afd-a843-20b91daca0a5.roa
File:                     598be54c-db0b-3afd-a843-20b91daca0a5.roa (raw, json)
Hash identifier:          DqgdDFWWajxr4D2FIqBbHqZWF1CINHjRde0MElIfjYM=
Subject key identifier:   DF:7E:7E:6C:4A:AA:38:2B:16:EE:76:A8:2F:19:69:9A:6A:D4:08:7A
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D117294B21EFE282AFF8ABF90
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/598be54c-db0b-3afd-a843-20b91daca0a5.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     834
IP address blocks:        104.165.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:94:b2:1e:fe:28:2a:ff:8a:bf:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=b73833a7-f464-43b9-8813-0f203cb6803c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:67:af:87:1a:b4:a8:9d:5d:6a:08:65:95:24:
                    2b:fd:2f:b3:f4:6d:11:91:23:b6:57:3d:7e:b8:2e:
                    ab:1d:a8:3c:6f:13:99:be:de:81:77:64:73:db:4c:
                    00:7e:40:96:f2:8a:3d:01:06:83:69:64:36:2b:a3:
                    84:89:83:b0:8a:1f:1b:7e:d0:53:ea:2e:33:ad:0d:
                    54:03:51:e1:17:0b:23:4c:14:5d:da:62:d2:53:e6:
                    3e:60:b2:47:f9:db:df:95:8e:6d:e4:cd:17:92:45:
                    23:9d:71:45:a3:c9:3b:9f:bd:6b:0d:06:c7:7e:e0:
                    93:e9:96:fc:53:5b:fe:e3:8f:ce:e8:c1:2f:b1:20:
                    15:18:ba:0c:a2:90:a3:23:df:b8:a6:e3:bd:95:83:
                    58:46:88:0a:72:57:41:6a:b5:b0:4e:0a:d5:f7:86:
                    fb:4b:ba:28:39:39:f4:aa:18:1f:3c:65:9a:0b:37:
                    9a:07:0b:a7:a0:f1:93:e0:be:6e:fe:a5:c9:34:46:
                    eb:2c:81:90:f9:eb:2d:97:fa:43:a4:9a:83:6c:47:
                    20:de:6a:ae:75:a8:9f:a9:5e:ac:12:9c:d1:4d:15:
                    75:7a:7b:b6:21:c3:48:47:e6:4f:f4:92:15:d7:4c:
                    7d:c1:18:02:c2:8d:d1:37:17:70:ab:25:01:68:ae:
                    99:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7E:7E:6C:4A:AA:38:2B:16:EE:76:A8:2F:19:69:9A:6A:D4:08:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/598be54c-db0b-3afd-a843-20b91daca0a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:28:55:a0:cd:2e:21:ce:9a:66:be:0e:3d:98:71:62:88:85:
         cd:d5:e1:8a:9d:5c:eb:7e:70:60:cc:89:07:5c:f9:cc:22:ad:
         ef:a3:b3:f4:ce:d5:d5:b9:08:3b:eb:65:08:e7:dd:c7:fc:37:
         d9:65:55:91:69:29:56:14:bf:c8:52:c9:39:7f:98:da:dc:66:
         cc:68:ba:44:e5:43:ba:bd:e0:e6:55:59:2d:e8:0f:f8:02:8a:
         6f:87:86:02:93:94:79:f7:85:34:2d:3d:af:62:c0:11:a1:ff:
         00:a2:d7:b2:cc:c4:1f:44:50:52:cb:a0:40:7b:ee:20:48:fb:
         53:35:a2:14:41:0c:86:43:bd:23:70:25:05:e7:bf:78:c4:16:
         81:90:bf:5f:45:a0:7e:37:bc:aa:36:83:20:aa:83:d0:0f:93:
         2b:c7:41:9a:c5:61:e5:85:33:60:44:81:8e:54:17:85:3b:d0:
         a7:b4:32:e7:99:8b:32:85:f6:0e:ce:3b:1a:0e:43:b1:21:b0:
         7d:26:e8:3f:2b:61:1c:09:b3:ba:ce:f9:df:bc:8d:28:3f:9e:
         d5:11:89:f1:4b:fe:fb:78:a3:f5:b2:5d:2f:6f:92:cb:71:ee:
         ef:8b:a7:af:af:98:5e:66:dc:03:8e:65:54:9c:30:cd:5a:ff:
         5f:52:4a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:55:07 2026 by rpki-client