Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a28c9f58-ea1c-3f9f-81c4-cd25fe486b84.roa
File:                     a28c9f58-ea1c-3f9f-81c4-cd25fe486b84.roa (raw, json)
Hash identifier:          +7zmMFfehShPe3Il7MTVglBzCk24/+/X9WYbL6xaFuQ=
Subject key identifier:   23:42:6A:4B:C8:41:63:62:35:2F:B9:C8:E9:E9:88:01:DF:54:B4:39
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F7352DCC89AFD939141C488F0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a28c9f58-ea1c-3f9f-81c4-cd25fe486b84.roa
Signing time:             Sat 10 Oct 2026 01:00:13 +0000
ROA not before:           Sat 10 Oct 2026 01:00:13 +0000
ROA not after:            Fri 08 Jan 2027 02:00:13 +0000
asID:                     18779
IP address blocks:        104.165.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:73:52:dc:c8:9a:fd:93:91:41:c4:88:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Oct 10 01:00:13 2026 GMT
            Not After : Jan  8 02:00:13 2027 GMT
        Subject: CN=c8dadf67-2398-46ef-bf2e-2db236cff023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3a:d0:01:24:f4:d5:22:99:15:19:b6:b2:6e:
                    d3:d3:fd:73:bc:c2:f2:68:7a:b5:2a:27:81:b4:d3:
                    81:60:c3:1b:2d:73:ce:26:ce:e4:63:34:bf:f2:d0:
                    30:87:21:85:d8:1d:70:f9:65:48:7b:85:a5:84:7f:
                    d1:01:e0:15:6a:9b:36:5c:32:b6:fe:68:2c:0a:34:
                    1e:13:9d:65:0e:87:0f:10:84:c9:36:6f:2f:c5:1b:
                    34:a4:8f:5c:09:0d:4c:82:35:0c:ee:16:f2:c6:a2:
                    89:cf:45:a6:80:e0:ee:e8:03:fa:73:10:be:7e:7d:
                    f3:07:2d:fd:61:71:44:1e:bd:96:27:5b:e9:d5:27:
                    ec:63:64:2c:9b:4e:17:cf:56:ab:0c:20:f1:9b:02:
                    db:d9:03:8e:dd:6b:e0:7d:95:5e:9f:fd:ea:08:a5:
                    53:d0:31:03:a7:be:04:b2:9d:31:5b:f1:82:6a:76:
                    fa:37:ba:e3:05:54:0f:25:a2:26:4b:2d:67:bc:79:
                    a8:ef:5f:0d:62:c2:63:ee:66:be:24:e1:62:b2:56:
                    b7:2b:8a:7a:b4:80:f3:8c:ba:d0:a2:0c:0f:5a:5c:
                    1f:28:14:dc:64:bc:17:b8:56:18:9a:00:64:08:09:
                    61:03:b5:ba:4a:4c:83:c3:b5:ba:1f:7e:35:95:fd:
                    0c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:42:6A:4B:C8:41:63:62:35:2F:B9:C8:E9:E9:88:01:DF:54:B4:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a28c9f58-ea1c-3f9f-81c4-cd25fe486b84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e9:52:f1:87:7d:c4:46:fc:3c:8f:3b:64:4b:0c:1c:91:2d:
         ed:94:82:eb:b8:2b:d1:fe:42:e7:4f:64:b9:6a:9b:b4:b0:11:
         cd:ad:3a:a5:b5:62:5e:05:e6:e4:0e:17:c8:c1:51:c0:a0:0b:
         0b:4e:50:1f:92:9e:26:26:68:52:d9:b5:77:27:3e:02:99:ad:
         d1:a3:83:21:fc:09:a1:23:0c:11:e4:da:73:54:c4:80:c5:5b:
         dd:e3:ea:56:a8:9a:66:56:7f:1a:0a:32:cd:58:bc:2e:d2:86:
         2d:50:b7:36:a8:d0:92:ae:94:b4:43:03:a2:0c:7c:e6:c4:c2:
         fb:fd:52:7d:dd:03:8c:90:02:9d:12:ea:68:72:07:4f:dd:33:
         3a:87:5b:dd:13:bf:31:cc:18:5f:4c:f1:46:33:f0:f5:74:24:
         07:2d:d5:da:15:79:3f:8a:bc:8f:45:50:8b:cd:3f:db:10:84:
         07:80:e8:fa:ae:5e:50:4d:66:97:14:5c:01:a6:ce:82:9f:9a:
         1a:04:45:5f:c9:01:1f:a1:c9:7f:4c:14:a6:47:4a:72:ad:ef:
         6b:ee:a3:17:68:9f:0e:5c:80:d6:9c:df:64:a7:19:2c:37:49:
         ff:f4:ea:e1:24:63:83:ef:e1:f4:59:42:f3:4d:99:a7:dd:3c:
         e4:7d:e0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:51:28 2026 by rpki-client