Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/98be39fc-eeb3-3785-bae3-d7bf0659f3ec.roa
File:                     98be39fc-eeb3-3785-bae3-d7bf0659f3ec.roa (raw, json)
Hash identifier:          zmKT8SVcTUOGLSsEYYZdFvzwWdVF92sFsmCC8sQGUJc=
Subject key identifier:   AA:5D:5E:83:AA:58:5B:3C:E5:2C:F8:2D:3F:94:82:7A:6E:2E:7F:6E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F4F082EB9C3102AFB136F2CE0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/98be39fc-eeb3-3785-bae3-d7bf0659f3ec.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     4826
IP address blocks:        104.165.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:2e:b9:c3:10:2a:fb:13:6f:2c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=928d640b-3047-4e93-b917-05fd3d002d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8c:c6:9f:b6:e5:24:23:ae:7a:24:45:88:7d:
                    3d:8d:c0:f7:ee:30:0a:f3:06:c4:25:66:f6:75:b5:
                    f2:3f:e4:7d:2f:6a:8f:6b:3a:06:a4:af:92:50:be:
                    4f:c6:cc:ab:0a:57:69:86:8c:82:32:bc:a9:ca:8c:
                    d2:ce:1c:ba:b9:48:29:2f:89:1c:ae:54:0f:ae:6d:
                    13:b7:8e:ed:09:52:51:66:3b:2a:fa:4a:a6:e3:2f:
                    58:66:78:be:ce:01:72:b2:9a:4a:79:ca:9f:55:0c:
                    46:76:78:da:87:a5:c0:c4:c3:85:f4:7a:43:3f:ab:
                    43:48:21:52:ff:d5:0f:c5:37:df:67:9c:1e:ea:59:
                    19:71:6e:25:a2:bd:50:56:d1:34:43:ca:da:21:8c:
                    f5:05:6a:b0:9d:68:90:b0:d0:33:74:40:20:f1:1e:
                    25:f1:a4:cd:ba:47:3b:46:71:b9:b4:eb:1f:f6:91:
                    9c:46:36:c6:00:11:09:5d:c4:7b:a5:20:91:f8:a5:
                    be:1a:58:dd:3b:6e:93:f6:a0:46:c1:3e:03:72:87:
                    c8:b9:c6:c6:35:60:1f:6e:94:ea:d2:f2:b1:0c:93:
                    3c:a5:98:82:cd:ac:c1:d4:6d:60:76:bb:1b:13:18:
                    e3:91:44:10:34:2a:3b:c9:d6:d1:77:12:5b:4f:b2:
                    ee:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5D:5E:83:AA:58:5B:3C:E5:2C:F8:2D:3F:94:82:7A:6E:2E:7F:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/98be39fc-eeb3-3785-bae3-d7bf0659f3ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a0:0c:9f:0c:02:ca:77:ac:52:59:b1:98:d8:c8:ef:30:b5:
         ab:be:33:8f:7d:02:1d:cf:58:d5:d8:49:c7:52:88:f8:3c:19:
         dd:2a:be:09:d1:7b:b4:23:3a:c2:5b:44:c3:48:b7:df:51:97:
         fc:b9:19:2f:3c:4d:76:2c:84:6e:f2:a1:36:5a:04:79:de:a8:
         95:07:40:40:0f:9f:de:06:e0:cd:77:03:ce:c4:16:90:8f:e7:
         46:a5:c1:36:ff:d8:63:6c:7e:f4:66:30:4f:9e:8f:44:31:c7:
         49:3b:79:ab:64:76:3f:ac:8f:f9:88:4a:ca:39:e5:f0:0c:ca:
         37:f4:c5:96:9b:74:2a:d5:4d:44:de:79:60:c5:02:4c:cd:60:
         a0:fe:b8:f9:f6:79:21:72:d7:f5:0d:21:77:7e:ff:4a:2a:e9:
         f5:61:22:eb:a7:30:28:04:02:53:40:ee:7c:bc:3f:54:aa:3c:
         1a:e6:d6:68:74:7d:d2:ca:e5:11:08:2c:87:74:b0:ab:13:6f:
         c7:c7:90:ef:8b:10:eb:cf:31:f7:f8:79:62:95:22:ad:bd:cc:
         24:06:d4:a2:8d:7f:bc:66:a2:74:59:ff:37:6b:45:5b:30:b3:
         e4:0a:ba:50:c9:e6:6a:8d:91:e2:ae:cd:f7:1e:08:ea:f2:f6:
         58:67:cc:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCC65wxAq+xNvLOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk
OTI4ZDY0MGItMzA0Ny00ZTkzLWI5MTctMDVmZDNkMDAyZDgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYzGn7blJCOueiRFiH09jcD37jAK8wbEJWb2
dbXyP+R9L2qPazoGpK+SUL5PxsyrCldphoyCMrypyozSzhy6uUgpL4kcrlQPrm0T
t47tCVJRZjsq+kqm4y9YZni+zgFysppKecqfVQxGdnjah6XAxMOF9HpDP6tDSCFS
/9UPxTffZ5we6lkZcW4lor1QVtE0Q8raIYz1BWqwnWiQsNAzdEAg8R4l8aTNukc7
RnG5tOsf9pGcRjbGABEJXcR7pSCR+KW+GljdO26T9qBGwT4DcofIucbGNWAfbpTq
0vKxDJM8pZiCzazB1G1gdrsbExjjkUQQNCo7ydbRdxJbT7LuAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKpdXoOqWFs85Sz4LT+UgnpuLn9uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvOThiZTM5ZmMtZWViMy0z
Nzg1LWJhZTMtZDdiZjA2NTlmM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKWqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAESgDJ8MAsp3rFJZsZjYyO8wtau+M499Ah3PWNXYScdSiPg8Gd0qvgnR
e7QjOsJbRMNIt99Rl/y5GS88TXYshG7yoTZaBHneqJUHQEAPn94G4M13A87EFpCP
50alwTb/2GNsfvRmME+ej0Qxx0k7eatkdj+sj/mISso55fAMyjf0xZabdCrVTUTe
eWDFAkzNYKD+uPn2eSFy1/UNIXd+/0oq6fVhIuunMCgEAlNA7ny8P1SqPBrm1mh0
fdLK5REILId0sKsTb8fHkO+LEOvPMff4eWKVIq29zCQG1KKNf7xmonRZ/zdrRVsw
s+QKulDJ5mqNkeKuzfceCOry9lhnzKA=
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:28:49 2026 by rpki-client