Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0fe20c7d-060f-3197-a4fa-15bc3ce908ce.roa
File:                     0fe20c7d-060f-3197-a4fa-15bc3ce908ce.roa (raw, json)
Hash identifier:          vyEKY4/6+sxQHiy57JjE2hS91U6uyJWEQyL/vsY9JFo=
Subject key identifier:   BF:1C:B9:C2:0C:0F:2F:A1:E9:66:A7:FC:44:97:9F:58:66:36:4A:74
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D15FDCE1222B976FCD4DE00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0fe20c7d-060f-3197-a4fa-15bc3ce908ce.roa
Signing time:             Mon 09 Mar 2026 18:04:20 +0000
ROA not before:           Mon 09 Mar 2026 18:04:20 +0000
ROA not after:            Sun 07 Jun 2026 18:04:20 +0000
asID:                     398781
IP address blocks:        104.165.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:15:fd:ce:12:22:b9:76:fc:d4:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 18:04:20 2026 GMT
            Not After : Jun  7 18:04:20 2026 GMT
        Subject: CN=c0db2ce8-162e-4a24-9f99-3b1cb15f9a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d5:ba:36:73:4b:39:0e:45:42:9a:16:29:32:
                    b8:f7:f2:dd:d8:9b:c7:34:e2:60:73:14:8f:ff:10:
                    5c:cb:e4:1a:b0:09:55:13:de:8b:1b:31:35:15:39:
                    d6:db:9f:7e:0c:0a:f4:b4:39:8f:47:9a:53:4e:07:
                    0b:0a:fc:46:30:11:82:89:2f:19:61:30:a8:8c:26:
                    20:88:9a:e9:b5:90:f9:46:77:4a:f4:32:45:52:9e:
                    54:c3:86:d8:ac:be:53:de:44:13:37:97:cb:5a:29:
                    8d:a3:88:26:22:2f:ab:ac:4a:76:13:01:3d:9d:62:
                    b2:3a:89:70:70:0a:07:35:20:cc:5a:4e:ee:b0:39:
                    62:fe:c6:33:48:3a:cd:92:ad:c5:a7:cc:ee:64:07:
                    56:a8:8f:22:37:46:fa:14:6e:3f:02:73:0c:20:01:
                    72:bc:9e:43:3a:80:24:14:d3:20:20:5e:66:9c:b1:
                    88:e3:e8:a9:cd:1c:28:a5:e9:1f:80:d2:f4:d8:3d:
                    dc:99:48:19:ce:4b:66:53:9f:7b:39:1f:e9:16:19:
                    cf:df:c0:45:36:c1:6f:79:e2:ce:6c:ae:c2:97:ea:
                    29:1d:37:34:43:49:9e:95:cd:5e:83:8b:2b:5a:49:
                    0c:e5:55:8d:13:4a:a0:2e:df:28:fb:4a:ec:57:1f:
                    19:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1C:B9:C2:0C:0F:2F:A1:E9:66:A7:FC:44:97:9F:58:66:36:4A:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0fe20c7d-060f-3197-a4fa-15bc3ce908ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:35:cd:a6:ee:90:ce:a6:9c:70:0c:db:22:38:9c:db:8c:99:
         c5:55:7c:c5:b2:05:e6:cb:bd:7f:98:a5:df:a4:7a:25:22:76:
         ff:8d:d3:57:aa:0c:9c:5c:38:c2:e9:62:1e:99:f1:91:06:28:
         6c:7a:40:90:91:31:93:5d:34:f9:39:a9:7b:4c:d5:d4:52:b5:
         56:cd:61:07:11:7d:1a:a9:90:c0:2e:ae:24:ba:7d:cb:d9:2b:
         6c:1e:67:25:48:9c:3d:b7:59:58:4c:7d:6d:43:7c:99:45:35:
         a2:8f:48:8e:d2:2d:f7:eb:b3:22:89:b1:3c:df:0e:64:17:ca:
         fa:e5:bc:05:c4:2c:a3:93:9d:3d:ec:88:bb:09:53:36:31:06:
         cc:7a:a2:ef:96:25:3e:83:1e:8f:df:a8:a7:2c:26:58:d1:5b:
         00:0b:f6:30:d6:8e:f5:ef:16:f1:b2:48:29:e2:6c:08:f8:77:
         8e:5f:2e:55:46:17:4f:10:d3:26:15:e1:17:70:35:c6:ba:51:
         3c:6a:06:ff:02:d2:9f:79:a2:f3:e7:14:16:cb:23:1f:7f:7c:
         b3:a2:3c:69:17:3e:b6:b8:00:76:8a:0a:0b:c8:24:ae:f2:f2:
         fb:b8:81:d0:98:d3:7b:aa:d6:5a:1d:d6:f2:ec:0a:f5:65:5e:
         13:05:4b:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0dFf3OEiK5dvzU3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDMwOTE4MDQyMFoXDTI2MDYwNzE4MDQyMFowLzEtMCsGA1UEAxMk
YzBkYjJjZTgtMTYyZS00YTI0LTlmOTktM2IxY2IxNWY5YTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9W6NnNLOQ5FQpoWKTK49/Ld2JvHNOJgcxSP
/xBcy+QasAlVE96LGzE1FTnW259+DAr0tDmPR5pTTgcLCvxGMBGCiS8ZYTCojCYg
iJrptZD5RndK9DJFUp5Uw4bYrL5T3kQTN5fLWimNo4gmIi+rrEp2EwE9nWKyOolw
cAoHNSDMWk7usDli/sYzSDrNkq3Fp8zuZAdWqI8iN0b6FG4/AnMMIAFyvJ5DOoAk
FNMgIF5mnLGI4+ipzRwopekfgNL02D3cmUgZzktmU597OR/pFhnP38BFNsFveeLO
bK7Cl+opHTc0Q0melc1eg4srWkkM5VWNE0qgLt8o+0rsVx8Z5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL8cucIMDy+h6Wan/ESXn1hmNkp0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMGZlMjBjN2QtMDYwZi0z
MTk3LWE0ZmEtMTViYzNjZTkwOGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKVwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAw1zabukM6mnHAM2yI4nNuMmcVVfMWyBebLvX+Ypd+keiUidv+N01eq
DJxcOMLpYh6Z8ZEGKGx6QJCRMZNdNPk5qXtM1dRStVbNYQcRfRqpkMAuriS6fcvZ
K2weZyVInD23WVhMfW1DfJlFNaKPSI7SLffrsyKJsTzfDmQXyvrlvAXELKOTnT3s
iLsJUzYxBsx6ou+WJT6DHo/fqKcsJljRWwAL9jDWjvXvFvGySCnibAj4d45fLlVG
F08Q0yYV4RdwNca6UTxqBv8C0p95ovPnFBbLIx9/fLOiPGkXPra4AHaKCgvIJK7y
8vu4gdCY03uq1lod1vLsCvVlXhMFS1g=
-----END CERTIFICATE-----
Generated at Mon Mar 23 18:48:40 2026 by rpki-client