Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/440c2a77-68b7-3b49-ac9d-e1cd59a40101.roa
File:                     440c2a77-68b7-3b49-ac9d-e1cd59a40101.roa (raw, json)
Hash identifier:          1VAQlDWgHKeqXvV4z+8HwWpKqRyztMLBu8ZK8zLaiV0=
Subject key identifier:   DE:13:4A:27:FD:9B:65:15:2D:E3:D0:F3:22:06:72:32:CF:7D:38:7C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EB6E1B29CE986688C3F3BD380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/440c2a77-68b7-3b49-ac9d-e1cd59a40101.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     212238
IP address blocks:        104.165.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:b2:9c:e9:86:68:8c:3f:3b:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=bb1b3abe-4fe4-45c1-b992-a6852de76cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:93:95:58:95:17:19:4b:73:2b:8c:3b:8e:22:
                    ae:0f:f2:39:b1:53:96:c8:0b:1c:d6:74:3a:73:35:
                    61:f3:47:1e:24:60:49:eb:1c:c0:97:c4:13:38:0d:
                    7d:2c:4f:f1:bb:d0:8a:f9:1b:df:6b:12:2f:8c:a5:
                    63:9d:fa:32:a2:a0:34:53:3a:e8:18:6b:a0:3b:c1:
                    78:5e:e0:24:4b:87:e5:70:9c:ba:c6:62:bc:11:4c:
                    c5:f5:50:79:57:8d:1f:73:e2:39:1d:fa:ba:c8:9a:
                    80:fe:56:44:95:6f:79:c2:b6:ab:49:fb:03:e6:83:
                    28:db:29:38:ac:fd:54:52:30:39:ad:74:6e:a0:76:
                    36:0f:17:f3:94:34:13:91:75:c4:92:f0:09:8f:a4:
                    cb:7d:e1:f6:a8:29:3d:fe:78:39:67:3d:89:05:ad:
                    12:a2:0c:a8:bb:8d:c7:0c:e8:1a:e3:2f:8a:cd:9d:
                    a4:40:83:2e:81:39:61:98:33:ce:3d:82:57:29:76:
                    fc:7b:ba:b1:c2:b6:39:29:a6:ee:16:e7:81:f8:e2:
                    1f:3a:b1:16:da:48:91:f4:a0:94:46:91:43:fc:54:
                    bb:a8:00:3d:c9:fb:4e:f5:79:55:93:eb:f4:71:7d:
                    dc:21:f1:ff:7c:6a:37:e3:c0:72:cf:fd:61:e4:d8:
                    db:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:13:4A:27:FD:9B:65:15:2D:E3:D0:F3:22:06:72:32:CF:7D:38:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/440c2a77-68b7-3b49-ac9d-e1cd59a40101.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:3b:2e:ae:0a:65:8a:b7:90:8f:32:62:2f:7f:f9:f3:c2:86:
         88:98:75:38:f1:ca:3f:67:4d:de:44:3a:3b:be:3b:f1:4f:84:
         51:c3:18:31:0a:7e:b0:8d:3b:7a:a5:6e:a6:97:cf:e4:cf:5f:
         60:5a:12:23:e8:c5:59:c5:e2:b5:95:dd:6e:8e:fe:eb:47:2b:
         8b:aa:d5:0f:a8:f5:9d:74:d9:ea:53:b8:88:9f:f0:17:c6:83:
         37:58:c2:f9:e4:91:15:3a:a9:68:94:a6:1f:02:48:73:b5:20:
         dc:aa:5c:c2:52:4e:3a:89:97:cd:8d:70:3a:af:c2:51:d8:e1:
         6b:98:c9:80:f3:ca:9b:3b:8c:4d:53:e4:e8:ba:5d:90:23:e2:
         c0:38:4a:a2:a1:5c:c2:a2:10:e5:ed:fb:3c:c9:ab:c2:0d:db:
         37:4f:be:f2:74:26:77:6a:a3:d4:cf:12:1f:b5:44:2d:81:b5:
         55:72:0a:eb:fd:c2:fe:3f:4c:51:57:49:48:e8:54:23:39:ea:
         50:88:c2:88:36:3f:3d:0c:3b:e7:52:9d:f2:63:77:a1:63:23:
         a9:69:de:0c:40:86:7d:ab:5c:a7:a1:33:3e:23:d0:fc:a0:96:
         7b:4f:45:2a:9f:04:41:31:34:31:9e:9e:fa:f7:9d:e3:e1:df:
         d8:db:e0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:44:35 2026 by rpki-client