Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6333b101-f3cb-3ee8-8c99-0d60055eb634.roa
File:                     6333b101-f3cb-3ee8-8c99-0d60055eb634.roa (raw, json)
Hash identifier:          YtcB6ELm58ZudyqarqMED1Uz6oqHHJ6Tqf23vLiMvE8=
Subject key identifier:   9E:45:C7:DD:D2:AF:16:FC:C3:DF:97:C1:62:17:6B:1C:5E:21:12:0D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F4972AD95047FD04AB1197880
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6333b101-f3cb-3ee8-8c99-0d60055eb634.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        104.165.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:ad:95:04:7f:d0:4a:b1:19:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=59bf03ed-246b-4083-988f-9805b64aaa52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:34:60:61:ed:07:05:df:c1:7a:3f:f6:20:d2:
                    7a:34:0b:d8:05:51:bf:61:97:f8:9a:38:d8:ef:95:
                    a5:76:64:b2:10:94:18:fc:32:be:e7:39:20:66:4a:
                    1c:c6:11:ff:ef:63:e9:de:64:d6:7e:07:3f:32:80:
                    bf:66:9e:10:9c:26:0c:ae:45:a4:5d:9c:58:47:2a:
                    78:c4:1d:e1:3c:c1:01:9c:64:28:fb:58:26:73:0f:
                    0b:cd:b4:e6:a7:e1:78:08:9e:ec:3f:61:12:0a:1a:
                    e3:fa:98:39:20:52:96:08:bd:55:84:18:86:94:c4:
                    c6:20:4f:2c:a5:9b:79:b2:bc:4e:33:f7:00:6d:e7:
                    8c:bb:c5:5f:71:86:f2:21:79:c8:28:d8:dd:4b:f8:
                    7e:21:bb:a7:9b:61:75:c5:0e:ad:6f:59:89:3f:dd:
                    40:53:1e:37:7e:b4:52:f1:c4:f5:85:a1:6c:6b:17:
                    a7:da:98:f0:fb:50:03:02:c1:3a:f2:03:0c:1d:d5:
                    82:67:cb:72:aa:78:82:20:61:8c:49:f1:fc:8c:4d:
                    91:e1:92:37:fe:69:9f:50:9b:bf:ae:18:a6:a3:14:
                    34:59:0f:ca:ea:91:a5:14:0e:be:f2:92:c6:26:8d:
                    d0:71:91:98:e8:ac:27:6b:ba:d8:28:46:aa:ce:7d:
                    25:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:45:C7:DD:D2:AF:16:FC:C3:DF:97:C1:62:17:6B:1C:5E:21:12:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/6333b101-f3cb-3ee8-8c99-0d60055eb634.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:1c:ea:8b:a8:25:d3:c6:60:9e:58:07:ae:4e:e7:bc:cf:b8:
         95:06:0e:7c:23:38:89:ee:4b:eb:39:78:15:72:94:08:cb:1f:
         01:f1:d4:9e:7f:0a:e1:1c:0c:52:ff:87:bc:a0:df:6e:2c:e5:
         de:81:d6:6a:71:a0:2c:f6:be:07:15:6c:e9:09:01:44:68:27:
         08:24:79:35:8d:75:fe:79:e8:eb:f2:93:e9:ea:a5:54:e3:ae:
         0c:39:a5:ad:5a:a1:03:41:bc:d3:bc:d6:6f:da:b6:95:46:f5:
         5f:dc:73:56:cd:96:ac:f7:8d:9b:6c:07:02:91:67:e1:a4:c3:
         1d:ee:e3:ab:40:59:ad:c2:4a:05:90:27:a9:97:c8:24:7c:13:
         5d:c5:05:6e:77:61:23:36:9d:1a:a8:e3:fc:02:4c:ee:1c:b2:
         45:fe:6a:f4:17:0a:5a:1c:33:67:b4:48:fa:7e:5d:47:01:83:
         03:99:b7:6d:66:5c:b7:2c:9c:fb:7a:85:f8:bf:9f:73:a5:ee:
         88:71:90:96:e9:75:da:7e:af:69:df:06:9d:12:c6:28:31:05:
         66:68:05:ad:50:41:cf:91:8e:65:a2:eb:89:9d:d7:dc:8c:ec:
         67:1b:a3:33:a6:b5:f6:b4:43:1e:e5:80:47:8c:fb:73:44:ed:
         1c:26:0f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:43:21 2026 by rpki-client