Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6064d3e1-71d1-30f7-aa23-f20a95a60daa.roa
File:                     6064d3e1-71d1-30f7-aa23-f20a95a60daa.roa (raw, json)
Hash identifier:          9hWjERIK/KMdsV6MS8iNaAC+xKNI56KVXesVnA6SPfI=
Subject key identifier:   DE:F3:68:92:9C:F6:71:7D:A6:26:75:02:76:93:48:F2:45:1E:D2:4C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D4EBFA72D37B3C4619A4FEC00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6064d3e1-71d1-30f7-aa23-f20a95a60daa.roa
Signing time:             Fri 27 Mar 2026 13:00:40 +0000
ROA not before:           Fri 27 Mar 2026 13:00:40 +0000
ROA not after:            Thu 25 Jun 2026 13:00:40 +0000
asID:                     18779
IP address blocks:        104.165.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4e:bf:a7:2d:37:b3:c4:61:9a:4f:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 27 13:00:40 2026 GMT
            Not After : Jun 25 13:00:40 2026 GMT
        Subject: CN=4744bf53-eee0-4d22-a341-c1b0f3ce06af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:64:50:c0:bd:9c:9d:26:71:41:3c:36:fc:ba:
                    3b:26:03:e5:79:27:30:c0:22:d0:e0:6f:96:f3:a4:
                    f6:31:69:ba:c3:aa:10:c8:8d:9c:0b:96:bb:63:99:
                    89:92:c0:43:d7:d5:4e:df:58:04:89:7f:22:42:4f:
                    08:97:9d:c0:2d:9d:80:16:e3:29:f0:c1:63:5f:cb:
                    26:34:19:c8:20:71:60:af:1c:fc:3f:ca:46:7b:b4:
                    32:8c:20:8f:dc:8f:52:dc:7e:0b:3c:77:50:28:68:
                    aa:4c:42:8b:a6:79:94:e1:6f:ea:05:7b:fb:36:cb:
                    07:48:cf:06:d5:03:d9:a2:73:db:ce:e3:7e:40:0f:
                    0f:d5:be:67:a4:b6:00:b9:e6:fd:8f:ae:4a:bf:d6:
                    0e:c7:59:5f:4b:15:2f:d0:15:bf:f4:fb:65:90:0f:
                    3f:46:3f:c1:4b:f0:92:29:31:72:b3:88:8e:87:f9:
                    e4:37:a9:88:a3:3d:eb:bd:6b:dc:49:4e:e4:64:62:
                    fa:6d:9b:a3:f7:b2:15:2a:0f:7d:90:ce:23:f3:d8:
                    e4:c7:e5:fb:b5:e3:66:71:7f:b5:cb:40:71:46:45:
                    86:58:53:74:1c:83:b0:b6:4c:57:68:5e:1e:b3:25:
                    fb:21:ac:58:03:e7:6b:74:41:a6:26:19:36:aa:3d:
                    6f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F3:68:92:9C:F6:71:7D:A6:26:75:02:76:93:48:F2:45:1E:D2:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6064d3e1-71d1-30f7-aa23-f20a95a60daa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:be:c3:3b:e4:c9:f0:cd:ca:b3:db:b8:b1:89:1b:b7:4f:92:
         02:8b:8a:5b:18:79:a5:88:8d:e8:4e:ba:85:5d:c8:28:c4:25:
         db:31:ca:3c:90:16:ce:30:e0:57:bb:56:87:24:34:33:b6:af:
         c0:9b:cc:ea:2a:23:ff:44:26:e9:bf:c3:7f:57:3e:bc:8e:55:
         e8:c4:49:62:e4:37:18:fe:a2:78:95:88:ea:1f:07:ce:95:39:
         70:2c:df:90:d6:5b:ae:3a:33:a5:60:89:7c:70:e8:f1:e4:c5:
         23:57:62:ee:37:e3:18:f4:b7:03:50:20:74:9f:61:c3:bf:f5:
         63:5b:b3:d3:bb:85:1e:39:e1:90:d1:4e:df:0a:67:da:4a:52:
         09:57:e8:fb:55:77:e4:d3:13:16:dc:1b:73:07:32:5e:f4:c2:
         f7:45:cd:e6:ff:39:15:a0:d3:5d:33:9c:bc:8c:63:a9:48:75:
         f5:e8:9d:e4:d2:9b:f5:6d:67:a0:2f:e6:84:d5:07:be:e2:30:
         c5:ee:a4:d6:08:18:6b:e0:5a:d9:dc:56:aa:ed:aa:89:b5:d0:
         8d:79:cf:18:1d:51:71:8c:3e:46:da:83:e9:57:14:19:ba:54:
         dd:b3:7f:43:ea:a6:7e:e0:a8:40:77:dc:b4:ab:f2:c9:19:52:
         5d:7a:8e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:18:16 2026 by rpki-client