Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aaf66f33-bc9a-3a64-a7b9-4f82c17d6dfd.roa
File:                     aaf66f33-bc9a-3a64-a7b9-4f82c17d6dfd.roa (raw, json)
Hash identifier:          WAi6HONm8D73sY6ntr9u4YpGYkFhdoTR4WLWJ9EDn7M=
Subject key identifier:   67:E5:AA:6B:3B:B7:EF:DE:9D:67:EE:60:C6:53:09:BC:DA:C5:FE:02
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F94D35C50B55E0D5C66F89940
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aaf66f33-bc9a-3a64-a7b9-4f82c17d6dfd.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     18779
IP address blocks:        192.177.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:5c:50:b5:5e:0d:5c:66:f8:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=8027968e-a08d-40e6-bce2-6378203e39f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:63:b6:eb:c3:1b:ba:0e:41:a1:0d:27:ee:ae:
                    30:6f:86:06:11:7d:70:de:02:22:52:d5:20:db:15:
                    2f:06:2e:1c:00:fc:14:55:f3:0c:b5:09:57:bb:36:
                    4b:5e:db:c5:f5:f1:56:07:06:8b:65:3f:61:bf:96:
                    bd:99:09:92:5d:8b:f1:17:14:b4:f7:68:07:cc:e7:
                    b4:2b:76:af:b0:5d:0f:9c:46:f9:14:a7:72:a3:4b:
                    e0:2d:c7:bb:be:a0:4d:7a:8c:75:30:10:d8:64:54:
                    b3:80:58:e4:a7:da:d4:a0:70:a8:b6:8d:38:e7:ba:
                    47:41:2b:c6:67:ec:83:a1:10:c2:d4:4b:c9:8e:05:
                    e4:7d:0e:30:47:79:ca:e4:e4:43:24:62:36:d9:be:
                    4f:4d:5f:07:57:7d:9e:e6:00:24:a4:91:4d:ba:b4:
                    8b:99:e4:28:e0:05:e0:c9:3e:e4:60:a8:07:bb:66:
                    88:b1:cf:1f:f3:ff:6a:65:73:88:dc:5e:f9:0b:1b:
                    6b:bb:c3:12:4e:b1:c0:30:90:8d:9c:e2:35:96:d4:
                    c6:44:5f:04:98:e0:ac:05:00:d3:d2:ff:08:a9:c9:
                    d6:b6:19:c7:71:dd:48:d1:34:c0:11:c7:c3:38:22:
                    de:03:9d:d7:ee:8f:fe:93:ae:42:c8:45:bf:21:c5:
                    d5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E5:AA:6B:3B:B7:EF:DE:9D:67:EE:60:C6:53:09:BC:DA:C5:FE:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aaf66f33-bc9a-3a64-a7b9-4f82c17d6dfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:58:57:4f:05:a4:ef:48:b4:bd:ed:d7:c0:9b:1a:47:2e:b2:
         03:96:c2:13:07:8d:4a:ae:09:d8:8b:0b:70:3d:37:91:e9:ab:
         94:23:e0:cc:e8:42:3e:cf:d5:7e:d0:94:61:cc:83:aa:3d:5d:
         03:19:4f:08:a0:69:bb:9f:15:0d:cb:1c:92:dc:47:b5:a9:7d:
         32:64:9e:37:a5:21:9a:76:f4:b7:0f:94:5a:69:f1:6f:03:0a:
         f4:4b:c8:17:b6:03:3d:c8:70:06:31:31:a5:6a:1b:45:4b:28:
         4b:60:a0:26:83:c8:65:b5:a7:94:e5:8b:e8:c8:9a:ae:be:d2:
         62:10:f4:78:92:4e:68:d6:9c:b6:a2:63:0b:1f:3e:1b:cd:28:
         56:18:94:8b:7f:27:48:96:ba:6a:0e:a0:c4:7a:b2:fa:8b:7a:
         65:f7:bf:b5:21:80:fe:75:a0:76:79:2b:1d:2b:c5:7d:dc:74:
         ac:8b:2f:75:b8:d7:c3:35:37:af:7b:37:59:90:ea:c0:24:63:
         76:a5:fe:fb:cb:8e:b0:3c:b4:40:66:cc:dd:df:a4:ba:a7:a9:
         b1:98:e4:9b:84:c6:92:ee:be:36:34:77:82:49:8a:a5:7a:65:
         35:3e:4b:3d:08:27:61:4e:44:28:c1:6b:c4:42:63:d2:96:37:
         a7:14:4a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:34:54 2026 by rpki-client