Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7bf0bb43-f36e-36f6-baf4-e6ca031aa256.roa
File:                     7bf0bb43-f36e-36f6-baf4-e6ca031aa256.roa (raw, json)
Hash identifier:          KXLS+3OYvOoAvRrUJU5lkHA6zOQlqCViP1SAkH+s94E=
Subject key identifier:   E1:78:3D:17:7B:3A:73:67:51:0C:2C:6F:11:9D:DD:88:C1:42:50:B1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F4973287E2D9256E5B2FD2A80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7bf0bb43-f36e-36f6-baf4-e6ca031aa256.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398781
IP address blocks:        104.165.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:28:7e:2d:92:56:e5:b2:fd:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=daf03d29-8f03-4443-b5d5-6bb02354c488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7e:8e:1f:06:ce:f3:c7:c2:9f:93:3a:34:b5:
                    83:6d:21:0d:85:90:72:81:a9:fe:f2:99:0c:96:29:
                    f2:4c:bf:cd:aa:28:18:6d:f3:1d:88:f3:3c:7d:c7:
                    44:90:94:6f:65:92:65:59:fc:2b:32:e6:8f:ad:78:
                    34:d8:e8:04:85:e2:b2:f9:ee:2a:eb:89:e4:07:4e:
                    56:b9:2b:68:e7:04:fc:5a:78:be:a5:f5:b1:d2:e2:
                    ff:cd:27:cd:43:32:c3:cf:3f:3f:aa:cf:5d:ac:c5:
                    ce:72:63:24:f3:20:da:a4:0e:6a:ed:bf:8b:5b:35:
                    93:29:63:cc:a5:7a:bb:d7:15:25:c5:a3:2e:b3:bc:
                    54:d1:8f:26:29:fa:9d:16:29:ed:14:93:c7:4a:db:
                    9f:04:4a:d6:a9:ec:e9:92:ff:2c:7e:66:6e:29:8a:
                    03:8d:c3:32:92:6b:cb:77:ef:50:4f:cb:0f:28:f1:
                    26:e8:77:7c:34:16:08:f5:68:f8:02:8a:ca:06:8a:
                    34:c8:df:d5:9b:e6:e4:31:1d:ba:56:90:1b:48:4a:
                    20:2d:f0:bc:65:19:3d:30:69:6b:72:36:46:4a:b9:
                    5a:ed:bc:dd:a2:a1:5d:e1:4d:4f:72:9a:34:64:c0:
                    0d:ba:72:64:ed:0c:c5:fa:f1:f4:3e:8a:b1:f9:0a:
                    5f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:78:3D:17:7B:3A:73:67:51:0C:2C:6F:11:9D:DD:88:C1:42:50:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7bf0bb43-f36e-36f6-baf4-e6ca031aa256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:f0:4f:e9:fd:4b:06:9d:24:c6:51:33:56:33:04:17:26:d1:
         f5:e0:a0:fc:11:8f:5f:e8:3f:ee:40:96:46:7d:b9:49:4d:25:
         d6:61:91:53:40:4c:7c:77:55:06:57:b6:63:9f:dd:60:c1:fa:
         80:d7:af:04:69:01:69:de:20:4d:99:97:f1:ae:dd:96:79:73:
         aa:c6:c6:5e:29:69:db:8d:dd:ef:f1:27:fa:e9:d8:5d:5e:52:
         51:6d:f7:5f:f3:ca:9f:b3:57:71:c0:0e:1a:cd:40:30:f6:59:
         89:52:0f:c6:50:52:c9:20:b1:c1:32:e3:8b:96:02:fa:a0:b3:
         17:b6:f0:d8:e7:14:67:46:3d:19:90:57:88:d3:42:fc:d3:13:
         a7:0f:11:cc:b9:b6:bd:d3:8c:99:2a:5e:0d:7e:d4:4c:f6:45:
         74:11:27:99:be:00:f9:e4:4c:9f:fb:27:3f:ce:c8:66:53:c2:
         dd:b4:4b:7e:d0:aa:e7:8a:23:38:1f:5d:01:80:03:6c:57:8d:
         e5:ed:81:19:a4:6b:6c:fd:2c:dd:01:14:26:48:cb:35:b6:11:
         cf:5f:20:98:76:b7:c1:37:83:31:db:83:72:3c:f0:da:d9:60:
         d1:8f:17:1a:fa:a6:b7:15:2b:67:30:3b:35:4c:dc:74:00:9c:
         38:a7:ff:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:22:33 2026 by rpki-client