Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9977ddf5-75af-369c-8871-0a60691f26e0.roa
File:                     9977ddf5-75af-369c-8871-0a60691f26e0.roa (raw, json)
Hash identifier:          mJZ6U0qMzXqis77EdUumuo78DrXE79NMFmK2rLehd28=
Subject key identifier:   53:B9:E0:1F:78:68:70:26:AF:DE:65:F9:0F:BD:F6:D6:0B:A3:F2:39
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D143DA899DBECD81E973AE300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9977ddf5-75af-369c-8871-0a60691f26e0.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     18779
IP address blocks:        104.165.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:a8:99:db:ec:d8:1e:97:3a:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=303eac5e-5d67-4129-9261-e21951d570ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:76:b7:9d:8a:63:0d:ec:00:1f:43:45:21:32:
                    6f:f6:8a:24:c5:8d:9e:a6:00:9a:d9:b3:ee:89:1c:
                    de:c2:ce:0f:3f:6a:30:b9:da:c1:4f:2d:43:86:48:
                    d2:14:d9:86:fe:f3:e9:fd:f5:37:db:b0:36:8e:d9:
                    da:48:11:a6:ad:08:d3:8f:a9:59:4d:68:98:c8:62:
                    ea:f1:33:a4:ec:bd:20:df:c6:21:7f:28:4f:3a:1e:
                    f4:9f:44:4d:8a:f6:8a:ef:87:b5:89:02:41:d0:3a:
                    60:10:a0:04:94:d1:aa:91:b6:40:d9:47:e5:1e:4d:
                    e4:3b:88:bc:06:bb:b1:4d:0a:31:2e:1f:ed:5f:95:
                    fa:3e:17:3c:b7:45:11:2d:1e:3f:a1:59:86:e6:cd:
                    23:ba:10:dc:7a:53:51:60:15:51:28:34:d7:f0:3c:
                    7a:9a:28:e8:74:63:61:48:a6:5c:92:26:f9:5c:04:
                    ba:c2:fd:e7:b2:9f:5c:99:b6:db:8a:a1:5d:21:4d:
                    98:8c:6e:c1:20:27:22:d8:e5:11:0b:69:ae:d1:a1:
                    fc:d0:f0:08:0f:17:30:85:8b:fb:95:9f:4b:52:3f:
                    62:12:49:75:d2:61:1e:cc:83:04:2a:b9:f2:ca:41:
                    1c:a3:63:41:fa:cf:21:b1:9a:8f:ff:50:79:63:6d:
                    dc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B9:E0:1F:78:68:70:26:AF:DE:65:F9:0F:BD:F6:D6:0B:A3:F2:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9977ddf5-75af-369c-8871-0a60691f26e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:cb:3e:94:84:19:7c:81:ba:ce:8a:f8:c4:e6:e2:0c:04:30:
         94:84:c0:57:fd:11:cd:df:5c:f1:50:10:63:f5:3a:09:0c:c0:
         a9:38:30:0a:15:e4:ff:37:f6:52:75:bf:da:5b:a3:1f:72:d8:
         5e:ad:94:4f:75:5a:65:40:79:ad:d8:9e:84:7e:f3:65:fc:99:
         b1:39:c5:d2:11:c9:5e:3a:ee:a3:5d:b2:70:19:58:22:73:e5:
         30:f4:bd:55:23:fc:05:1e:f6:0c:43:c7:7e:41:e1:f1:c2:8e:
         fe:71:98:47:40:7d:54:00:09:2f:30:de:46:5c:a0:44:96:f4:
         5b:6b:33:71:d4:b9:31:2a:51:00:e5:f2:f3:88:5b:71:2a:6e:
         31:cc:5b:73:99:ec:ba:f9:11:b3:15:d2:9c:29:15:e8:ba:b0:
         1e:4c:ef:41:c9:e0:44:ad:fd:b7:a2:e5:c3:06:ac:26:bd:73:
         fe:f1:5f:d9:81:66:d8:de:3c:a4:72:d8:c8:a1:bf:79:52:e0:
         35:a5:3f:bc:14:70:34:1d:d3:c0:9b:3d:f9:ad:75:c7:2d:27:
         0d:64:14:b1:4f:4a:5c:e7:ba:78:0a:94:ef:00:3a:d1:bf:ca:
         f0:f5:bb:63:5e:5c:da:d0:94:cc:85:ad:cb:cf:16:91:8c:22:
         52:b2:d4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 12:09:11 2026 by rpki-client