Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/936d2e1e-dee9-3424-953a-b232c90e989a.roa
File:                     936d2e1e-dee9-3424-953a-b232c90e989a.roa (raw, json)
Hash identifier:          hsfLPJx0PsFPGu0skl49E1ZIBjPB8aslKrvcqAWX2CQ=
Subject key identifier:   ED:44:2B:CF:D4:E6:2D:8A:0F:E4:11:87:AB:F4:B6:9C:CA:59:48:58
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F1E3AA1755E7009E4654737C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/936d2e1e-dee9-3424-953a-b232c90e989a.roa
Signing time:             Wed 09 Sep 2026 13:27:50 +0000
ROA not before:           Wed 09 Sep 2026 13:27:50 +0000
ROA not after:            Tue 08 Dec 2026 14:27:50 +0000
asID:                     2497
IP address blocks:        104.165.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:3a:a1:75:5e:70:09:e4:65:47:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep  9 13:27:50 2026 GMT
            Not After : Dec  8 14:27:50 2026 GMT
        Subject: CN=98dfb03d-d648-48d2-a68b-fdf9564d62ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:45:ea:5f:07:52:74:0a:08:65:c1:b1:41:fe:
                    0f:2f:5d:c8:25:60:03:f5:98:12:25:9a:86:30:4a:
                    a6:5f:b8:0d:74:62:26:be:8b:bd:34:81:22:f5:c7:
                    55:b5:21:22:5a:13:95:9c:44:77:a0:6e:40:5f:32:
                    6c:4e:c4:27:3f:51:90:df:75:27:30:f8:11:66:b2:
                    a7:54:db:cc:98:1e:67:bb:59:35:72:ca:39:4e:b6:
                    01:70:ed:fb:70:b0:63:cd:72:1a:00:cc:5d:6b:b0:
                    ff:5a:50:7b:9d:6b:40:73:ee:38:ed:f0:09:25:98:
                    9e:c0:b5:33:c0:3e:fb:dd:54:0f:e2:e2:1b:64:d1:
                    33:b9:37:73:a4:b1:0b:24:79:ae:98:67:58:28:5f:
                    38:06:d4:f4:e8:82:5b:9a:8c:2d:36:d4:1d:58:fc:
                    83:78:78:7b:d1:f7:ff:ff:4a:08:19:66:4c:07:f3:
                    ab:c3:f2:f9:08:32:35:72:67:c3:7c:9b:86:d7:2c:
                    4b:0b:97:ea:d3:25:8a:80:75:e5:d1:e2:5c:a0:38:
                    0f:e6:ee:48:b5:d2:35:c2:6f:3c:b6:60:2e:b8:46:
                    48:ea:8c:8b:de:1f:16:c5:3c:81:9c:93:76:85:5b:
                    7a:84:f7:5a:df:d6:77:35:6c:70:22:9e:a2:cd:4b:
                    ac:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:44:2B:CF:D4:E6:2D:8A:0F:E4:11:87:AB:F4:B6:9C:CA:59:48:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/936d2e1e-dee9-3424-953a-b232c90e989a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:8b:b2:87:b1:27:d9:b5:cc:27:68:24:d1:56:34:5c:31:68:
         ca:01:d7:d2:13:84:ae:4e:68:2b:dc:78:87:b3:e6:af:1c:6c:
         2a:47:47:7f:62:aa:b5:04:33:d0:0f:8d:11:5c:b7:99:6a:b4:
         69:2d:bc:9b:7e:9c:f3:01:f0:5c:0e:fa:b1:e2:42:2a:0c:94:
         7a:1b:9c:bd:19:ca:f4:87:80:c8:bc:91:ba:d7:4c:ed:60:12:
         63:15:7a:0a:91:14:51:90:d5:b4:07:38:74:0f:dc:b6:08:8e:
         04:60:e9:a2:ec:5a:5e:eb:a5:30:79:c1:93:7d:e6:09:ef:6d:
         2d:05:d1:7b:ad:db:a0:18:7c:62:7e:97:0c:9d:8c:8e:d4:ba:
         7c:b0:39:46:09:e0:f9:ba:8d:db:3c:6b:61:71:12:c7:61:23:
         ad:48:5c:2f:22:0d:7f:78:23:dc:57:c1:d6:5e:16:ff:29:83:
         3f:cd:bf:be:97:11:a7:f6:f8:6d:4c:6c:fa:0b:00:04:fa:a5:
         28:de:92:8d:41:48:dc:77:c4:ce:27:82:9a:6b:a6:53:3b:7a:
         35:50:90:c7:f3:2c:86:13:00:a5:8a:5f:42:95:13:01:50:97:
         82:46:e7:a5:db:ea:48:08:22:33:4e:c5:ae:11:3a:ef:ad:3d:
         39:ca:48:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:26:02 2026 by rpki-client