Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d9bb8ce-4e3a-31ba-8b0f-a8f3b7cedd4d.roa
File:                     1d9bb8ce-4e3a-31ba-8b0f-a8f3b7cedd4d.roa (raw, json)
Hash identifier:          WAojcgmEQ0ZtVTIwF76HnFMi9DKtMCBpEKCDKGJ17PU=
Subject key identifier:   CE:F9:5E:F7:D7:F5:AE:89:E5:C1:F1:87:13:FB:AB:A1:31:06:D3:AD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E5A4CE2E3C79B8B4D0AADCE00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d9bb8ce-4e3a-31ba-8b0f-a8f3b7cedd4d.roa
Signing time:             Wed 01 Jul 2026 09:06:11 +0000
ROA not before:           Wed 01 Jul 2026 09:06:11 +0000
ROA not after:            Tue 29 Sep 2026 09:06:11 +0000
asID:                     32132
IP address blocks:        104.165.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4c:e2:e3:c7:9b:8b:4d:0a:ad:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  1 09:06:11 2026 GMT
            Not After : Sep 29 09:06:11 2026 GMT
        Subject: CN=e93de954-0024-419b-a462-690ea18c177a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b3:65:ba:98:5b:44:0d:99:97:e1:4f:1c:22:
                    3a:81:20:63:f7:7a:fc:26:c8:1c:76:16:e7:a7:e8:
                    34:38:f6:33:3e:f5:3c:03:b2:99:01:09:b3:d0:8c:
                    3d:3b:41:7c:02:e0:90:75:d6:be:65:7d:2d:57:0d:
                    64:1b:53:b8:a9:c9:bd:2c:35:af:d9:d4:60:fb:ed:
                    bd:d0:44:9e:57:9b:5f:d6:c8:56:b7:2b:d5:15:45:
                    2b:02:0f:9b:82:25:63:ff:e7:45:29:df:f8:0d:0a:
                    3d:23:3a:21:b1:09:35:79:86:8c:16:3d:37:0d:fa:
                    d5:58:61:9f:7f:b9:ed:ff:fd:e4:bf:6d:a9:b3:f2:
                    82:50:bb:68:79:f0:fe:30:26:e0:d8:27:e2:60:bd:
                    2a:66:11:31:fa:a6:ca:84:3d:31:6f:cc:c5:61:26:
                    8b:c9:d4:1d:e5:6c:81:fe:b6:04:ee:c4:c0:92:97:
                    ff:49:8b:97:e0:86:18:75:12:33:d8:76:b2:ae:d9:
                    05:29:2d:29:bf:5f:ef:fe:f2:dd:38:dc:b2:63:f5:
                    40:d6:96:e3:03:28:e2:36:9d:d2:f9:9b:cc:96:f2:
                    53:66:e2:b6:1e:c8:c6:11:f3:d1:45:11:6e:54:2b:
                    c8:d9:91:e0:75:44:db:29:13:0e:bb:5f:8f:c5:eb:
                    4a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F9:5E:F7:D7:F5:AE:89:E5:C1:F1:87:13:FB:AB:A1:31:06:D3:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/1d9bb8ce-4e3a-31ba-8b0f-a8f3b7cedd4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:21:2d:33:05:bf:55:8e:74:05:4a:5a:73:d6:a5:d3:0f:b8:
         cb:cc:7a:bf:73:d7:fe:71:5c:7b:fd:7a:84:3f:78:13:05:34:
         1f:62:56:62:84:7c:be:1b:d4:4f:e5:fc:ab:a0:dc:79:71:c9:
         12:89:5f:2b:e9:cf:69:32:40:73:00:13:f1:0f:87:0e:d0:3e:
         e8:ad:ed:13:50:e3:fa:a4:76:1f:82:08:17:62:e1:45:f6:21:
         4b:74:6e:20:1e:b1:d3:91:ba:4f:3b:50:a9:f6:66:69:5a:82:
         fc:61:2e:ea:3a:10:63:d8:fb:e0:bf:77:26:d7:5e:8f:41:06:
         e2:45:85:89:ad:5e:33:52:7a:f9:5b:18:b5:aa:65:e7:dc:2d:
         db:20:72:37:b7:d9:8a:ca:ec:6e:7f:a7:b7:41:bb:1c:d8:30:
         4d:e5:af:39:24:53:dc:87:62:22:ed:95:1a:10:3f:5f:d7:04:
         8c:5b:29:ad:c8:ce:27:90:4a:b4:d7:60:f0:b0:e3:cd:5c:11:
         56:3b:08:e1:9a:63:56:1d:3d:66:ae:02:25:f7:3b:01:cb:dd:
         9b:92:2f:ba:41:0f:85:d9:85:74:a1:f2:ad:fb:1c:7b:99:1f:
         f8:b0:22:74:85:75:66:f0:d1:58:69:c4:9d:46:17:a1:12:f5:
         e2:c9:19:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aTOLjx5uLTQqtzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDcwMTA5MDYxMVoXDTI2MDkyOTA5MDYxMVowLzEtMCsGA1UEAxMk
ZTkzZGU5NTQtMDAyNC00MTliLWE0NjItNjkwZWExOGMxNzdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rNluphbRA2Zl+FPHCI6gSBj93r8Jsgcdhbn
p+g0OPYzPvU8A7KZAQmz0Iw9O0F8AuCQdda+ZX0tVw1kG1O4qcm9LDWv2dRg++29
0ESeV5tf1shWtyvVFUUrAg+bgiVj/+dFKd/4DQo9IzohsQk1eYaMFj03DfrVWGGf
f7nt//3kv22ps/KCULtoefD+MCbg2CfiYL0qZhEx+qbKhD0xb8zFYSaLydQd5WyB
/rYE7sTAkpf/SYuX4IYYdRIz2HayrtkFKS0pv1/v/vLdONyyY/VA1pbjAyjiNp3S
+ZvMlvJTZuK2HsjGEfPRRRFuVCvI2ZHgdUTbKRMOu1+PxetK0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM75XvfX9a6J5cHxhxP7q6ExBtOtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMWQ5YmI4Y2UtNGUzYS0z
MWJhLThiMGYtYThmM2I3Y2VkZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKV2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABYhLTMFv1WOdAVKWnPWpdMPuMvMer9z1/5xXHv9eoQ/eBMFNB9iVmKE
fL4b1E/l/Kug3HlxyRKJXyvpz2kyQHMAE/EPhw7QPuit7RNQ4/qkdh+CCBdi4UX2
IUt0biAesdORuk87UKn2ZmlagvxhLuo6EGPY++C/dybXXo9BBuJFhYmtXjNSevlb
GLWqZefcLdsgcje32YrK7G5/p7dBuxzYME3lrzkkU9yHYiLtlRoQP1/XBIxbKa3I
zieQSrTXYPCw481cEVY7COGaY1YdPWauAiX3OwHL3ZuSL7pBD4XZhXSh8q37HHuZ
H/iwInSFdWbw0VhpxJ1GF6ES9eLJGT0=
-----END CERTIFICATE-----
Generated at Fri Jul 10 17:21:08 2026 by rpki-client