Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aee94805-1f52-3127-8f3e-d045570aec40.roa
File:                     aee94805-1f52-3127-8f3e-d045570aec40.roa (raw, json)
Hash identifier:          2hniuT/DCxfXx4ui/YiuV6mAsPHFuWxfIR2iadyoIl0=
Subject key identifier:   EA:37:FF:69:D2:93:63:E2:DF:23:81:87:57:6B:F9:1B:B0:E2:29:61
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D7E352A4EB4E6776D3A078780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aee94805-1f52-3127-8f3e-d045570aec40.roa
Signing time:             Mon 13 Apr 2026 13:00:30 +0000
ROA not before:           Mon 13 Apr 2026 13:00:30 +0000
ROA not after:            Sun 12 Jul 2026 13:00:30 +0000
asID:                     834
IP address blocks:        104.165.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:35:2a:4e:b4:e6:77:6d:3a:07:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 13 13:00:30 2026 GMT
            Not After : Jul 12 13:00:30 2026 GMT
        Subject: CN=95ce65f1-7e69-4fcd-a2ef-5071be8a5ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d2:0c:7b:30:72:ef:6e:b7:a0:bc:3f:f8:3e:
                    46:b8:98:e5:0d:4b:90:f2:d4:16:91:22:6b:12:ba:
                    60:fe:90:48:d0:30:9a:65:63:98:0f:d8:52:41:36:
                    ad:ac:83:28:95:ad:38:25:d6:8f:65:78:ae:bb:76:
                    ff:d4:c9:ec:d7:46:49:be:49:8b:fc:9b:21:2d:91:
                    ac:b3:c1:98:f5:e4:ff:cd:64:c5:55:74:6d:ac:f5:
                    ef:f6:93:14:7d:5f:1b:ff:15:03:41:2a:b3:ed:49:
                    41:b6:73:2a:b8:ea:4c:0a:35:49:f5:50:77:52:e3:
                    a5:38:80:64:71:80:2b:3f:60:05:c2:7c:26:2e:62:
                    80:45:df:24:ae:da:d3:ea:29:6a:5e:6c:f3:f3:c7:
                    fe:a6:ff:5f:9f:d4:07:4e:6e:94:75:51:1c:e3:4e:
                    e5:9a:83:ca:60:7e:61:5b:3b:79:10:f0:9c:47:61:
                    2a:d4:cc:93:c5:6e:79:68:95:bb:df:5d:76:19:4e:
                    14:a0:4e:5a:ea:7a:6b:ee:a2:98:93:f7:63:38:2c:
                    a8:9c:c0:4c:fd:25:c6:90:1d:50:e9:90:3f:b1:6e:
                    73:13:48:c7:56:05:f1:ec:15:e0:03:5f:1e:b8:f1:
                    fb:fb:95:11:cb:1e:1d:94:4f:c1:8c:1e:16:cc:41:
                    80:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:37:FF:69:D2:93:63:E2:DF:23:81:87:57:6B:F9:1B:B0:E2:29:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aee94805-1f52-3127-8f3e-d045570aec40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:2c:ae:14:31:93:6a:20:cf:48:f1:7f:76:ab:d9:b5:63:d4:
         ec:d8:1d:3f:bc:76:c2:ea:00:9c:27:c8:ff:b3:0f:4d:8a:e0:
         7c:08:02:55:65:6b:be:6a:ce:d1:4f:1c:56:84:4e:82:a3:c5:
         81:d7:2c:d6:7f:b7:16:14:5a:93:91:5c:c5:20:31:14:75:28:
         0c:6d:0e:69:91:ec:d3:4b:b0:8c:a1:65:ab:8e:53:5b:d4:3b:
         d5:d5:74:bc:7d:cb:58:fc:d5:89:b3:86:0a:42:00:7a:95:ef:
         94:ab:3f:07:a4:2d:8e:f6:a2:09:3b:54:ff:48:c3:81:d6:3f:
         cd:0e:c2:68:45:b2:bd:90:ae:8f:9a:23:0e:22:6c:16:8e:55:
         d3:fe:f2:21:a1:fb:8f:87:b9:c6:0a:83:18:bd:05:96:a4:48:
         2c:8e:b0:ac:65:2f:a7:93:f8:07:62:53:7c:3a:f6:44:af:c6:
         39:9e:b5:16:d0:b2:f0:d2:b1:ce:c0:4c:ff:d5:e1:e4:e4:dd:
         98:c9:97:88:fa:38:74:8c:91:e9:9d:e0:c5:af:b9:60:fa:1c:
         f7:77:48:3c:ff:66:49:b5:18:8b:67:63:e0:12:54:63:c2:5b:
         62:d2:5a:db:59:ee:0f:f7:87:b8:27:1f:68:d2:da:83:0a:55:
         67:3e:bb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:32:49 2026 by rpki-client