Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4e78dd04-1d17-3b3c-8381-c8818c5f2357.roa
File:                     4e78dd04-1d17-3b3c-8381-c8818c5f2357.roa (raw, json)
Hash identifier:          rmWAzcZoA8iEzV2CMWgBH3qCRRiaaWBLX2J4Xre08d4=
Subject key identifier:   44:8B:28:63:23:65:24:54:E4:ED:2C:B8:49:47:37:C1:5D:E6:6E:A1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F38B27336C281C272C8BA5040
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4e78dd04-1d17-3b3c-8381-c8818c5f2357.roa
Signing time:             Sat 19 Sep 2026 01:00:12 +0000
ROA not before:           Sat 19 Sep 2026 01:00:12 +0000
ROA not after:            Fri 18 Dec 2026 02:00:12 +0000
asID:                     174
IP address blocks:        104.164.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:38:b2:73:36:c2:81:c2:72:c8:ba:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 19 01:00:12 2026 GMT
            Not After : Dec 18 02:00:12 2026 GMT
        Subject: CN=3985d210-d75e-43d4-82ad-d00959d6d704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d4:78:2a:ce:19:85:e7:4b:24:89:ea:ec:f3:
                    90:13:99:36:de:3f:89:cd:e1:86:fa:ee:f3:06:50:
                    74:02:69:d0:a0:60:f1:61:4b:f7:a3:f2:7e:f2:43:
                    eb:72:91:ab:a5:e3:51:79:b8:26:02:92:ba:bd:cc:
                    0a:80:1d:47:f3:15:a4:98:b6:ba:03:62:dc:18:2f:
                    92:5f:0a:77:fc:2b:69:af:f3:d7:7f:cc:cb:f7:c3:
                    83:c6:7d:4e:13:d9:f9:2f:17:77:24:80:6d:bc:90:
                    86:33:e6:0a:bc:97:28:00:be:0c:78:54:d8:f0:62:
                    3a:3c:12:7b:f9:0a:b0:5a:17:03:cd:45:f5:4b:cb:
                    aa:2d:5f:ba:ce:1e:93:f9:ee:2e:fa:9a:5b:34:28:
                    a0:26:d1:50:64:d1:22:a2:59:b6:32:e2:20:44:7f:
                    2f:50:8c:f4:d2:e1:34:08:c7:c9:70:83:ab:d1:39:
                    51:98:cf:2b:b6:75:bb:1f:83:c6:32:19:f8:54:e4:
                    53:95:b5:07:a0:c9:c9:9d:ae:64:53:aa:93:f2:25:
                    c9:15:2a:dd:56:ac:ad:c0:bc:82:bb:0c:e3:e4:3e:
                    6b:6b:16:39:c7:cf:41:aa:b2:39:3e:02:f0:2d:fd:
                    c9:ca:cc:d5:c5:ea:e4:00:c2:e4:9e:6e:de:e1:ed:
                    47:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8B:28:63:23:65:24:54:E4:ED:2C:B8:49:47:37:C1:5D:E6:6E:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4e78dd04-1d17-3b3c-8381-c8818c5f2357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3b:ce:8a:23:2c:80:47:4a:7c:c1:8e:a9:fe:c7:3f:a5:c2:
         37:bc:dd:77:f2:44:ca:e8:8b:00:6c:d3:c9:d7:4e:57:d7:02:
         9b:6c:a8:b5:7a:1d:5f:3d:5d:a9:81:40:d1:60:5d:07:77:03:
         a3:7b:7f:8f:73:9b:a8:58:20:83:e4:93:ac:92:e2:50:5a:4b:
         17:60:01:f1:6e:35:f7:90:f0:31:82:57:14:4d:0c:bf:e1:76:
         74:dd:f0:e8:3c:57:87:9a:98:b0:0b:7d:31:16:e4:e5:19:ac:
         39:8a:92:76:6f:81:cb:2b:73:a5:4e:89:ea:e5:34:cd:77:6d:
         f9:69:a9:d1:8b:8f:ed:b9:f6:e1:1b:41:3d:4c:21:f5:5b:66:
         1a:2c:6c:8a:ee:75:76:a8:c9:7a:b7:45:2c:08:93:4a:9f:af:
         dd:8b:14:c3:d9:b5:4c:ea:23:40:d5:89:fd:b0:7f:ed:77:60:
         d7:26:b2:58:b2:c3:75:02:72:3a:39:98:0c:27:00:b3:bd:d4:
         2c:c7:21:f9:bc:97:f2:11:af:45:4a:b4:eb:27:56:76:c6:32:
         86:38:a6:3e:a1:d6:1e:5e:af:04:03:4c:74:72:1f:5c:3c:1c:
         d9:db:a2:32:4d:13:a6:2e:24:3b:d6:10:9b:1a:80:37:11:cc:
         d7:59:40:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:15:40 2026 by rpki-client