Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d88f8b4e-c879-37eb-bd79-498eaa7c5aea.roa
File:                     d88f8b4e-c879-37eb-bd79-498eaa7c5aea.roa (raw, json)
Hash identifier:          2vULcBxl/zFUnCnihJ6jTebh3DSu9nev4XynAzyMUeo=
Subject key identifier:   E3:3B:B8:70:45:9A:03:33:F0:C7:25:36:67:E5:CE:32:5A:60:AD:32
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F4986C701AD92FCE7C9CB4400
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d88f8b4e-c879-37eb-bd79-498eaa7c5aea.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7922
IP address blocks:        104.165.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:c7:01:ad:92:fc:e7:c9:cb:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=655b861c-0fd1-4fb3-88d2-d9a6751128a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d9:59:4b:a7:49:fc:45:24:9b:22:13:9c:83:
                    bd:7b:93:26:88:07:ce:64:94:00:74:c6:ad:44:b4:
                    c5:fd:0d:57:57:e4:f2:33:49:f0:1e:72:4a:a5:ec:
                    d1:8e:99:69:72:e5:dd:38:f1:f0:6b:0c:62:5c:f5:
                    77:30:dc:4c:8e:82:ac:6f:c0:4b:09:40:c6:30:3a:
                    dc:71:7d:04:2d:f7:54:33:23:6b:07:a1:0e:dc:8b:
                    7a:cf:96:e9:2e:4b:f0:69:06:0f:fb:a2:56:8a:8e:
                    75:3c:2a:6d:32:8a:4f:b6:65:c4:b8:d2:61:eb:6c:
                    f2:5a:2a:f2:a4:4b:d2:86:6a:c4:71:48:fc:c9:05:
                    da:8a:2a:b5:b0:24:43:ad:f1:5d:f9:f8:ca:e8:7d:
                    5b:27:11:6f:59:78:8d:0d:25:a8:76:9f:ea:ed:d2:
                    d0:4c:20:e4:9d:e7:45:25:fe:ac:6b:50:4c:78:32:
                    54:8b:2f:d6:c4:65:72:24:1d:27:b9:97:c6:ec:1e:
                    c9:ba:45:35:b3:4b:76:21:17:e3:73:a0:1c:d7:45:
                    95:8f:ab:83:71:c6:49:f2:3c:9f:c7:8e:d2:07:c9:
                    7b:b5:04:11:db:3c:a6:00:78:04:43:64:60:5a:0d:
                    37:75:be:db:7e:c8:04:55:7e:fd:93:6b:37:a3:a0:
                    9a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3B:B8:70:45:9A:03:33:F0:C7:25:36:67:E5:CE:32:5A:60:AD:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d88f8b4e-c879-37eb-bd79-498eaa7c5aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:71:9f:25:ee:ee:79:b3:8d:58:52:33:8d:b6:89:21:1d:55:
         ef:36:c2:57:e4:6f:3a:96:76:64:5c:2d:05:f6:be:85:d3:05:
         77:28:8e:e6:6f:07:4e:5e:64:bd:31:4d:d1:1a:13:60:e2:ae:
         02:c4:d1:b7:83:c7:bd:45:2d:48:c5:03:fc:d3:2d:10:9a:fa:
         84:13:34:09:da:ea:fa:23:ba:bc:58:b8:8a:9b:6d:d7:e3:26:
         76:23:e8:f9:75:05:c5:80:b7:b1:9c:89:6d:f3:ab:f6:89:74:
         46:5b:44:9b:1b:99:ee:8a:06:a7:68:d0:78:71:28:4c:2d:13:
         d2:59:ce:54:14:a6:43:b7:50:d0:64:42:b6:2f:de:d0:e5:87:
         1b:6f:bb:86:f3:ea:db:47:60:f5:16:77:98:f9:05:04:f4:54:
         ae:4d:43:bf:88:c0:d6:9c:35:3d:d0:b2:6e:11:d7:68:79:27:
         55:3d:d9:42:60:ac:60:58:16:84:4c:07:b0:5b:27:d3:7f:8d:
         85:52:e7:a3:37:db:3b:42:7f:83:b4:86:5f:ff:2d:f1:b3:96:
         41:e2:49:9f:a4:0c:94:a3:11:cc:4b:3e:70:a2:d7:97:de:e1:
         a8:a5:68:11:3f:03:ba:99:13:3f:4d:43:95:66:4d:16:26:f3:
         0d:1d:79:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:22:42 2026 by rpki-client