Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ff81f688-8772-3016-89f5-80e89538c138.roa
File:                     ff81f688-8772-3016-89f5-80e89538c138.roa (raw, json)
Hash identifier:          LR5w5IVsKdkR6of0Bp5h0zvsuzRPbGWTYmW9mQaV3e0=
Subject key identifier:   47:A5:96:37:21:33:1A:5C:FB:A0:41:21:B5:0C:E6:94:45:74:82:F3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584E5D014D70483DC75C28E06900
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ff81f688-8772-3016-89f5-80e89538c138.roa
Signing time:             Thu 02 Jul 2026 08:21:19 +0000
ROA not before:           Thu 02 Jul 2026 08:21:19 +0000
ROA not after:            Wed 30 Sep 2026 08:21:19 +0000
asID:                     9009
IP address blocks:        104.164.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5d:01:4d:70:48:3d:c7:5c:28:e0:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul  2 08:21:19 2026 GMT
            Not After : Sep 30 08:21:19 2026 GMT
        Subject: CN=fd703279-a9cc-4bad-aae8-8266eaf92a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c7:a1:ab:25:71:a0:95:2e:d9:1b:7f:f1:a1:
                    d6:ca:68:ca:e1:55:d1:bb:59:b1:dd:ca:0c:7d:1b:
                    a8:c2:40:2b:86:06:74:a1:ca:b9:2f:4b:35:dd:0b:
                    39:9b:0f:43:93:67:3b:e5:dd:0e:90:e9:85:17:47:
                    03:0e:5a:e6:1f:6e:ab:30:1c:61:2b:a5:c5:95:21:
                    79:78:c9:23:6b:14:d0:65:8e:c2:7b:a9:fd:6c:26:
                    72:57:ff:98:31:d0:39:d9:6b:17:f7:0f:fb:ff:f5:
                    03:61:4c:11:7d:2c:65:a8:3d:4b:ae:1b:08:6b:a5:
                    5c:64:ee:e9:c9:1b:36:cf:ee:18:c8:7e:2b:3c:fc:
                    e0:c7:74:cd:9e:d7:71:f0:47:2d:f1:d9:f9:24:76:
                    3c:a0:a9:41:75:30:2a:12:0a:6e:69:6c:45:9c:0e:
                    b7:d8:6a:77:a9:79:99:12:a0:36:36:5d:87:00:98:
                    6a:4b:d4:0c:e6:c9:06:f1:5e:64:42:b9:e9:5c:c5:
                    e0:b2:d8:de:41:ea:12:70:b8:58:f9:04:10:80:b4:
                    7e:0b:c3:0d:34:46:27:3f:ef:73:24:ab:42:5c:ff:
                    46:c7:5b:a9:4b:26:03:8f:04:83:70:16:98:a9:8e:
                    95:ba:3c:a0:27:e9:76:30:d1:3f:81:cc:1d:4b:39:
                    c4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A5:96:37:21:33:1A:5C:FB:A0:41:21:B5:0C:E6:94:45:74:82:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ff81f688-8772-3016-89f5-80e89538c138.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:31:8e:01:5c:1c:51:88:8b:64:e2:5b:27:25:83:93:53:f9:
         52:99:d2:6f:3c:3b:fe:49:ba:53:2e:32:a1:cc:39:1c:06:53:
         8f:1a:24:f4:9e:9f:72:61:6c:5f:b0:85:89:aa:3c:64:4c:a7:
         4b:09:47:72:19:64:b0:93:3d:90:3d:d4:09:9c:25:82:35:ad:
         5a:78:0e:c6:5f:12:ac:c7:33:81:20:78:1b:c5:a9:4f:45:5c:
         1a:aa:09:9e:a9:76:7c:63:55:22:bc:70:84:06:dc:64:fe:11:
         0c:88:f4:60:14:37:58:1f:c1:92:e9:e6:de:35:8a:9a:45:e3:
         20:03:2e:6a:e0:c1:9a:d7:80:57:f0:d3:6f:d5:d8:15:0f:38:
         5e:f5:d7:28:f6:9c:6c:a8:3d:c1:cc:80:eb:6a:18:b7:53:35:
         84:35:f2:67:eb:b7:c0:4f:2f:2f:cc:27:64:42:f4:72:1a:94:
         15:8d:e2:01:7e:6c:db:a8:52:1f:aa:c3:1e:a3:1a:b9:e1:66:
         1d:a1:20:36:ba:75:3f:d0:6b:14:bb:f4:af:fa:ef:b9:fa:00:
         60:d7:5c:7c:08:1e:79:94:5b:da:42:78:88:7c:07:21:fc:df:
         2e:09:f4:d8:fe:b5:55:a7:dc:e6:95:f7:1a:27:37:73:35:38:
         53:35:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 17:22:22 2026 by rpki-client