Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/221148f1-dac9-33b8-abc3-02836d3ae76f.roa
File:                     221148f1-dac9-33b8-abc3-02836d3ae76f.roa (raw, json)
Hash identifier:          BSyWOyolBXwWEa5324AwZOfBXObVtoYq8hEf6vD79DI=
Subject key identifier:   38:26:B4:31:37:CB:C4:9B:F1:8A:A8:6F:0B:80:5B:29:E5:72:F2:4C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F4972F448A6651A5421001460
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/221148f1-dac9-33b8-abc3-02836d3ae76f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398781
IP address blocks:        104.164.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:f4:48:a6:65:1a:54:21:00:14:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=571dee10-71a2-4ee5-bc80-5516aeb2a0a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e1:3b:ed:7f:e5:3c:fc:ad:aa:a3:8e:f3:e8:
                    a2:98:e3:9e:ec:fc:c6:bc:61:e3:1a:61:e9:4b:62:
                    17:96:50:3f:cd:be:de:f0:e1:7d:71:53:55:f5:26:
                    99:69:a1:ad:36:a5:5d:fd:19:fb:91:36:7c:ef:41:
                    eb:72:26:ea:61:5d:80:2a:52:6e:c7:20:3c:bd:cc:
                    e0:a5:79:88:64:5e:34:c6:16:06:b6:a4:aa:dd:28:
                    da:fb:be:0d:37:32:54:b7:8e:ec:87:0b:7c:b9:20:
                    e4:e2:fd:c7:f1:38:80:f7:98:ac:08:8b:2c:2f:5b:
                    90:89:b5:f1:f8:32:d0:d2:8c:84:16:58:18:e6:2c:
                    f8:cc:0b:2d:16:65:3c:65:90:1d:65:31:52:0b:a3:
                    a7:35:88:e5:f7:e9:83:84:a6:bc:22:c3:f8:d1:84:
                    69:bf:67:40:4b:f7:9a:58:fe:9e:bf:48:76:11:64:
                    d6:f7:d9:ad:29:cb:96:af:8e:0a:63:1d:7a:c7:0e:
                    8e:e5:71:e9:9a:06:73:42:a3:2c:d9:2c:b9:0b:c4:
                    c9:95:82:22:03:d2:dd:26:06:1b:61:8f:56:c4:67:
                    7d:85:75:1e:37:2f:0e:be:a4:79:e8:77:7e:aa:81:
                    27:97:98:59:4e:c3:16:fc:31:64:e8:cb:68:b6:0e:
                    fc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:26:B4:31:37:CB:C4:9B:F1:8A:A8:6F:0B:80:5B:29:E5:72:F2:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/221148f1-dac9-33b8-abc3-02836d3ae76f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:bf:9a:50:7d:13:e6:5c:10:57:cc:12:84:25:4d:ef:6e:9c:
         d6:76:4d:48:af:cb:bd:86:83:47:b9:a8:57:21:b4:a2:a0:73:
         df:f2:4c:f5:ed:b5:f8:74:0b:1b:b6:8e:80:7c:46:18:25:f6:
         b4:0d:2d:14:1e:0d:6b:01:ff:17:1c:7c:b8:a4:b2:74:a8:13:
         d9:c8:f9:c0:ec:f2:a3:10:8c:4e:17:38:14:35:56:68:86:d5:
         79:0c:d5:7c:5b:f1:18:73:22:37:b3:44:09:a3:1a:d2:c3:18:
         2d:c3:4d:33:d2:37:f9:38:1c:ce:01:5b:a4:51:4d:26:66:b1:
         c4:af:fb:a8:b4:34:43:43:d7:c7:43:ed:14:06:90:fb:b3:a4:
         8b:59:bd:7a:59:0d:c8:48:be:5d:3c:b0:9e:a0:0b:3f:d5:6e:
         c7:28:71:1f:4a:7e:43:63:9f:18:ff:4d:1d:0f:f2:ff:7e:f4:
         bf:e3:d2:81:b5:80:ff:da:51:55:3b:a4:06:73:45:76:1d:5b:
         51:6e:32:fd:9d:5e:15:48:77:fe:1d:71:fb:7b:90:fb:0b:db:
         16:c9:d4:59:84:fc:74:c3:d0:9c:93:8f:19:0c:a1:b8:9f:cf:
         4a:93:21:8f:df:8a:c3:b3:d2:28:53:29:54:d3:d9:3c:62:82:
         2d:9d:21:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:42:53 2026 by rpki-client