Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2190c422-981e-3e9e-830d-4865c8bc45aa.roa
File:                     2190c422-981e-3e9e-830d-4865c8bc45aa.roa (raw, json)
Hash identifier:          d5UyzACYBsK/dH0Z1l0RqRCAlZstTc7Rqh/c7iQFbQ8=
Subject key identifier:   BD:64:87:A0:2B:C2:6A:C8:5F:20:1D:97:84:73:99:C1:B5:AE:FF:B6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F5E742245618ABDB155F14480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2190c422-981e-3e9e-830d-4865c8bc45aa.roa
Signing time:             Fri 02 Oct 2026 13:35:26 +0000
ROA not before:           Fri 02 Oct 2026 13:35:26 +0000
ROA not after:            Thu 31 Dec 2026 14:35:26 +0000
asID:                     18779
IP address blocks:        104.164.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:74:22:45:61:8a:bd:b1:55:f1:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct  2 13:35:26 2026 GMT
            Not After : Dec 31 14:35:26 2026 GMT
        Subject: CN=a8fb1ffe-8f68-4cf1-ace5-b7c78b8f20b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:57:29:04:f4:3d:e7:d8:62:f0:be:99:8a:53:
                    49:45:0a:c8:eb:a0:99:02:42:25:c9:50:03:91:33:
                    83:f8:1a:7b:aa:f9:5e:cf:86:5f:05:73:87:56:ce:
                    72:de:25:a6:04:01:49:af:3f:cb:82:ed:f0:d2:e9:
                    35:61:e0:1b:1d:0c:cd:98:0b:5d:84:26:74:c6:7b:
                    10:26:3a:bf:94:80:86:71:c5:16:e3:c6:c7:cb:20:
                    95:af:02:3d:c5:ff:cf:b3:58:5a:bb:44:8a:52:c6:
                    a6:fd:ad:7b:ce:af:2f:58:38:1d:f6:71:ad:f2:81:
                    01:fa:a0:66:48:85:e5:a8:48:74:49:ff:81:cc:54:
                    d2:6e:55:be:ac:a4:93:59:7b:6a:ce:eb:fb:9e:a6:
                    35:3b:9d:c6:a4:ce:b9:f0:98:2e:86:ff:d5:e3:57:
                    0a:60:08:ff:24:12:27:e3:36:fa:9a:89:38:55:5c:
                    3b:44:5a:cd:77:4c:0c:cc:09:01:78:b2:d4:60:41:
                    aa:74:8e:10:7f:21:97:a0:d8:cb:8b:5e:37:6f:7b:
                    09:2e:74:e5:2f:53:bd:ac:b0:bf:dc:07:53:29:18:
                    61:dc:d8:cc:96:5c:67:b9:58:43:2d:de:f9:fa:62:
                    09:ba:df:d5:d2:0a:ae:b7:f2:8c:8d:8a:4a:e1:b8:
                    83:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:64:87:A0:2B:C2:6A:C8:5F:20:1D:97:84:73:99:C1:B5:AE:FF:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2190c422-981e-3e9e-830d-4865c8bc45aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:3e:65:04:bb:e0:27:74:70:ea:01:43:9c:20:d2:4c:d3:a7:
         15:6e:98:c7:be:a8:8f:5d:e0:e0:62:c6:de:7e:b4:a1:2a:f7:
         93:07:40:22:a8:58:dc:43:44:e2:f4:c9:46:20:97:6f:54:b1:
         bd:c7:9c:e7:f5:de:7b:eb:70:ad:d7:7f:8c:6b:8e:72:cf:ec:
         7b:b6:7e:54:82:87:f6:cc:3a:c3:8f:80:ed:d9:08:07:4c:4e:
         fa:13:80:00:4d:56:4c:76:98:e4:27:dd:7f:c3:74:0a:26:33:
         11:c1:1d:76:9b:ae:be:be:ba:60:e3:a0:4e:6f:83:b8:d8:1f:
         4d:24:e4:f0:a4:12:4c:09:ab:6d:49:f4:fb:f0:f7:42:49:ea:
         74:a3:dd:a7:e9:c9:f7:e8:3f:a6:8c:07:9a:a2:95:34:40:77:
         04:4d:82:d2:a4:41:b6:73:be:d6:ec:9d:83:78:f4:71:39:32:
         53:ed:22:ee:a2:bd:0b:6a:22:64:d0:2f:72:97:18:42:99:08:
         c2:bf:f9:47:c0:57:d2:31:76:b4:d0:59:20:28:52:ca:69:a0:
         d2:a9:72:9a:6d:dd:45:1b:44:a8:f3:60:f2:68:87:55:59:62:
         2a:7e:fc:a7:b4:01:3d:95:67:12:28:af:65:0f:30:98:5d:f7:
         3c:6f:1c:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9edCJFYYq9sVXxRIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MTAwMjEzMzUyNloXDTI2MTIzMTE0MzUyNlowLzEtMCsGA1UEAxMk
YThmYjFmZmUtOGY2OC00Y2YxLWFjZTUtYjdjNzhiOGYyMGIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVcpBPQ959hi8L6ZilNJRQrI66CZAkIlyVAD
kTOD+Bp7qvlez4ZfBXOHVs5y3iWmBAFJrz/Lgu3w0uk1YeAbHQzNmAtdhCZ0xnsQ
Jjq/lICGccUW48bHyyCVrwI9xf/Ps1hau0SKUsam/a17zq8vWDgd9nGt8oEB+qBm
SIXlqEh0Sf+BzFTSblW+rKSTWXtqzuv7nqY1O53GpM658Jguhv/V41cKYAj/JBIn
4zb6mok4VVw7RFrNd0wMzAkBeLLUYEGqdI4QfyGXoNjLi143b3sJLnTlL1O9rLC/
3AdTKRhh3NjMllxnuVhDLd75+mIJut/V0gqut/KMjYpK4biDUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL1kh6ArwmrIXyAdl4RzmcG1rv+2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMjE5MGM0MjItOTgxZS0z
ZTllLTgzMGQtNDg2NWM4YmM0NWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFY+ZQS74Cd0cOoBQ5wg0kzTpxVumMe+qI9d4OBixt5+tKEq95MHQCKo
WNxDROL0yUYgl29Usb3HnOf13nvrcK3Xf4xrjnLP7Hu2flSCh/bMOsOPgO3ZCAdM
TvoTgABNVkx2mOQn3X/DdAomMxHBHXabrr6+umDjoE5vg7jYH00k5PCkEkwJq21J
9Pvw90JJ6nSj3afpyffoP6aMB5qilTRAdwRNgtKkQbZzvtbsnYN49HE5MlPtIu6i
vQtqImTQL3KXGEKZCMK/+UfAV9IxdrTQWSAoUsppoNKpcppt3UUbRKjzYPJoh1VZ
Yip+/Ke0AT2VZxIor2UPMJhd9zxvHHI=
-----END CERTIFICATE-----
Generated at Sun Oct 11 13:36:42 2026 by rpki-client