Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1385221b-ae09-304e-ad18-cafc206501a6.roa
File:                     1385221b-ae09-304e-ad18-cafc206501a6.roa (raw, json)
Hash identifier:          zeCQTM9EmdnX5lRFZKOmmeiz7pITgVrgzS5sZRkHpe0=
Subject key identifier:   C8:CE:09:EB:5D:D4:52:89:B1:8C:AD:30:75:EB:CA:72:D9:AE:EE:AB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584C8A0C7F26C5215DF27F376C00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1385221b-ae09-304e-ad18-cafc206501a6.roa
Signing time:             Fri 16 Jan 2026 02:00:31 +0000
ROA not before:           Fri 16 Jan 2026 02:00:31 +0000
ROA not after:            Thu 16 Apr 2026 01:00:31 +0000
asID:                     174
IP address blocks:        104.164.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8a:0c:7f:26:c5:21:5d:f2:7f:37:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 16 02:00:31 2026 GMT
            Not After : Apr 16 01:00:31 2026 GMT
        Subject: CN=24fa956f-bb69-41ea-9d6f-f13e5fab5787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:15:28:9d:b2:ff:76:6f:f9:60:ad:85:b7:7b:
                    44:cf:fd:6c:58:32:c3:20:ca:7b:e1:77:ec:21:7a:
                    c1:f9:0c:67:c1:93:8d:a4:99:dd:7e:19:58:b5:2f:
                    31:24:ba:7f:1c:99:ae:62:63:f6:cb:42:3c:19:e1:
                    bf:57:b3:80:40:f8:c1:e8:a6:9e:6c:e0:91:11:22:
                    2d:fe:5a:1d:a6:f7:67:eb:51:25:a6:09:28:87:31:
                    dd:f8:bf:96:db:f7:1b:4c:fa:08:8c:3d:8c:18:da:
                    5e:5e:8f:cf:14:b0:e8:74:0f:de:6e:4b:bd:5f:65:
                    00:83:1c:9a:17:ab:f7:40:95:c0:51:ee:fc:63:17:
                    78:64:26:63:b0:a9:91:7d:ed:73:33:11:a4:de:18:
                    94:12:29:6c:f0:cf:0c:7f:6d:25:87:53:c6:aa:e3:
                    40:5a:a7:a8:d8:21:7f:65:92:ed:e1:10:b0:01:63:
                    27:c8:7e:22:92:17:c0:6e:a2:f7:0e:e1:6b:cc:3f:
                    d5:a0:e5:3e:68:39:37:19:88:40:6c:c7:ad:4d:96:
                    d3:b0:2b:de:3c:a7:28:e9:5b:7b:30:9b:1e:40:c8:
                    09:65:be:83:c0:b2:9f:fd:2f:da:33:30:ac:11:2e:
                    c6:b1:e0:b5:a5:28:99:28:02:c0:0e:af:11:16:ce:
                    f8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CE:09:EB:5D:D4:52:89:B1:8C:AD:30:75:EB:CA:72:D9:AE:EE:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1385221b-ae09-304e-ad18-cafc206501a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:b6:25:99:c2:fb:e9:dd:4c:0b:fb:44:52:64:5d:49:c6:8f:
         8c:1b:54:46:f2:e2:32:89:ea:ba:26:07:2e:a4:9e:4f:5e:59:
         e1:ab:53:33:e5:f1:90:f4:83:31:05:4c:47:8c:b8:e3:d0:99:
         34:5c:d9:4e:4d:b4:dd:09:7c:35:20:82:f4:4e:92:00:8c:ad:
         32:41:3c:13:15:63:4a:4b:72:fd:bf:0b:03:34:2d:be:7d:f7:
         0f:ff:22:81:75:a7:4d:0e:fe:1a:fc:94:26:d1:f0:6c:36:b1:
         0e:dc:b8:c9:a0:02:e0:6d:72:f5:8c:18:ae:7a:41:a7:88:87:
         a1:43:00:49:8d:83:91:5d:97:ca:79:92:be:bf:07:47:a3:f6:
         ab:ab:4a:dc:31:e2:75:1d:ea:e3:56:27:00:8c:7e:96:2b:a9:
         be:04:6a:97:06:a4:10:4f:47:84:0c:e5:45:08:2c:e6:f2:6b:
         34:47:49:4d:63:56:52:89:1d:0e:f0:df:d6:0a:32:e4:be:e0:
         84:06:79:18:4b:64:2b:1e:d4:4f:f8:e8:2c:5f:80:99:c6:18:
         f0:33:ff:49:fa:02:b9:03:84:d6:3a:9b:e1:86:88:eb:3b:13:
         ca:cd:1c:66:62:19:9d:4b:9d:6c:c8:c4:bf:00:28:b0:69:d6:
         3e:ac:f0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:28:54 2026 by rpki-client