Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4b7061a9-b5b1-32b1-b87e-38b7da4100f2.roa
File:                     4b7061a9-b5b1-32b1-b87e-38b7da4100f2.roa (raw, json)
Hash identifier:          Lu6E5EYXTxsxwwvNA7j77zLsH6CA/sL7uZOpeaS1Vdw=
Subject key identifier:   65:56:90:08:B2:73:9D:24:AB:73:32:D0:C1:D3:A5:08:33:7A:7D:59
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F4F07F4F6DE19AA58BB1BDE20
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4b7061a9-b5b1-32b1-b87e-38b7da4100f2.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     10753
IP address blocks:        104.165.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:07:f4:f6:de:19:aa:58:bb:1b:de:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=4fd27df2-ef32-4726-97e8-3b4689648c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:56:a2:d2:6d:1b:91:89:6a:9c:12:1b:ae:4d:
                    c1:5c:dc:2b:ff:22:2b:c5:47:ca:f6:5a:da:52:03:
                    45:e6:7a:2d:41:67:e0:e2:ad:3f:ec:d8:44:5b:8b:
                    c8:d7:3b:0b:87:cb:d1:a9:f4:57:de:34:13:a2:25:
                    a0:d7:f4:79:0f:36:63:09:6e:90:a6:a4:f9:7e:75:
                    72:d6:41:b3:9f:f9:7a:76:aa:2a:79:a6:51:b0:08:
                    0d:da:1d:8c:5a:ac:94:66:1c:20:6c:ed:f4:46:07:
                    94:26:36:83:81:3a:12:9a:23:63:04:70:ae:9a:4e:
                    9a:8b:fb:fa:6e:f0:42:76:19:fd:2a:cb:84:cd:56:
                    ef:a4:ba:9f:d5:01:f5:4c:1f:9b:d1:c2:56:0d:05:
                    bc:cc:68:12:30:0c:58:e2:b1:a5:27:5b:f7:63:b9:
                    08:cb:61:dd:94:28:aa:b0:cf:67:8d:c3:f3:47:e3:
                    e8:d5:05:8d:9a:6f:cd:f3:b6:55:2b:10:64:84:fa:
                    53:03:ca:3c:da:8c:aa:96:5d:6e:37:a6:54:c7:6c:
                    05:d7:aa:b3:b2:38:f2:13:ee:77:c0:c8:e4:92:0d:
                    b1:30:35:af:b9:07:c6:4d:9e:20:67:dd:23:5a:57:
                    10:c4:ce:03:7d:6a:7f:20:22:d7:b3:b1:9e:6a:1e:
                    ad:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:56:90:08:B2:73:9D:24:AB:73:32:D0:C1:D3:A5:08:33:7A:7D:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4b7061a9-b5b1-32b1-b87e-38b7da4100f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:78:c1:b9:74:c4:f5:73:ab:0b:d3:13:7a:b3:7c:8d:32:da:
         2a:1d:f3:b5:5f:3b:fa:be:ce:49:9a:40:a9:4f:6d:31:1b:e5:
         10:7e:14:5e:d0:a2:37:9f:e5:f8:23:4f:3a:72:17:b7:a3:26:
         09:c1:41:0b:7e:35:ab:12:1e:ac:25:9e:bf:cd:81:13:de:5a:
         b0:37:3b:6c:75:5e:de:4c:34:f0:2a:d8:e7:20:44:87:fb:6f:
         d6:54:e1:b8:2f:35:8a:41:5c:e5:46:3b:5e:0c:2d:ea:d4:57:
         b7:36:5f:90:e3:73:78:55:bf:d8:5b:40:e2:d9:c3:45:51:82:
         8e:d7:17:7f:72:93:83:8a:87:70:66:45:e6:3f:79:5a:af:96:
         4b:f9:72:d2:35:48:9b:a2:0f:b7:db:0b:c7:b1:5b:dd:b4:3c:
         25:6e:e3:4d:da:f6:1b:05:01:bd:f4:83:cc:da:b1:82:20:8a:
         d8:25:32:6f:86:c6:e0:9d:3b:96:70:e1:63:30:e2:a5:89:31:
         03:cf:c5:fe:03:75:86:35:0f:5e:c9:3f:29:63:2e:6b:e1:3c:
         9f:e2:9e:5a:b7:09:e7:f0:cc:b8:13:4a:33:e7:4c:bb:36:d3:
         fe:aa:58:95:80:f6:3b:aa:76:8f:ca:22:28:e6:f5:91:d4:c7:
         c2:35:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:52:05 2026 by rpki-client