Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/933acfb1-a945-3bf5-926b-43192ed750e8.roa
File:                     933acfb1-a945-3bf5-926b-43192ed750e8.roa (raw, json)
Hash identifier:          ns9X4mtArNhv8iuXj0OyfUvev+cjs0qnyX/HZvONsBc=
Subject key identifier:   C9:AD:53:9B:AF:C7:21:E3:DF:3A:A8:E2:AD:0B:90:5F:A3:DB:C3:BB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D492A4EC5E3B8C84B810F6840
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/933acfb1-a945-3bf5-926b-43192ed750e8.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     812
IP address blocks:        104.164.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:4e:c5:e3:b8:c8:4b:81:0f:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=ea689ec7-1702-4223-9145-78e72179f0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:98:d5:05:68:11:e7:6d:f3:be:ad:b7:87:a8:
                    7f:29:56:21:fd:3f:cf:75:02:e5:af:de:4f:c3:4d:
                    e5:ef:31:52:fa:d1:fa:88:1b:70:e6:50:ad:24:32:
                    be:17:6f:9a:a6:e6:b5:9d:74:88:2a:a2:21:a8:92:
                    de:ee:64:13:57:a0:8e:52:9a:a5:e7:43:0f:c0:72:
                    1a:00:9f:58:82:8a:61:29:d4:b0:3a:9f:71:0e:c6:
                    82:d3:aa:ab:fc:4f:a8:58:bd:82:15:c3:ba:ef:7b:
                    72:67:fb:e1:5c:18:90:b5:cb:cd:7b:c0:3f:ba:62:
                    15:1c:cb:06:f4:67:c2:0b:59:29:5f:a8:08:3a:81:
                    e5:ca:81:c3:56:c0:d5:b9:5c:12:30:c5:72:db:56:
                    90:39:24:d2:e0:f3:ae:53:28:4b:85:1d:2e:e1:a2:
                    34:f6:7f:8b:48:95:c4:81:89:28:02:a3:af:01:12:
                    c2:3e:27:a3:a6:ac:74:a1:d2:fa:4a:47:7c:c4:43:
                    8f:2f:39:a1:f6:22:b9:0b:c7:1c:fe:29:cb:3b:df:
                    b3:3f:0b:71:c3:9a:9c:41:07:0f:5d:f6:6d:a7:ff:
                    4b:fe:dd:46:03:7a:f7:b1:ef:9e:55:9b:48:09:e5:
                    10:0f:40:02:1d:1b:72:3a:e0:82:62:5b:28:0c:9c:
                    23:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AD:53:9B:AF:C7:21:E3:DF:3A:A8:E2:AD:0B:90:5F:A3:DB:C3:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/933acfb1-a945-3bf5-926b-43192ed750e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:15:bb:ef:1c:45:57:d4:49:e3:3f:6b:d9:12:cf:da:af:e2:
         0a:13:09:e7:f5:d0:65:cf:54:63:5b:b1:ae:f1:7f:c7:8e:e1:
         00:57:ee:73:16:3d:16:b0:f5:e1:9d:9c:e6:f1:88:dc:e9:49:
         2a:37:04:9e:24:49:f4:b9:6f:0b:ed:d6:60:28:9d:26:02:af:
         25:a7:1f:4e:36:e4:f6:fb:1c:cc:64:22:db:47:8d:d3:91:97:
         d3:56:a0:d4:99:dc:50:00:62:d8:12:92:d6:1d:80:af:6e:ea:
         32:b9:c3:a5:99:ab:1d:5e:2f:f9:70:d1:26:cb:be:31:6e:e5:
         50:d8:ec:7c:8a:12:c4:04:fe:a1:14:4f:3d:e1:ca:33:8d:e9:
         85:b6:f1:ce:e0:93:44:30:4e:bc:f0:ea:68:0a:b7:07:15:88:
         44:c5:63:45:92:29:fb:c7:ff:c4:1e:48:3c:d0:da:02:36:c0:
         d2:af:ee:ab:21:cb:41:14:7a:0d:5f:da:cb:15:9d:d8:27:22:
         68:e9:ba:29:da:f2:f5:45:e3:97:4e:f8:37:eb:5e:2f:af:08:
         70:4d:a3:70:45:10:a5:02:f7:72:23:5a:0a:87:24:02:70:39:
         09:79:0b:68:40:be:94:7e:f2:44:86:f5:4e:0b:7b:74:3a:02:
         3a:f6:10:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:48:51 2026 by rpki-client