Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bdabd3e3-4d19-3949-9cfb-ddcd0273c529.roa
File:                     bdabd3e3-4d19-3949-9cfb-ddcd0273c529.roa (raw, json)
Hash identifier:          VIt3YJjmuOxdpK+0xvMRO+E37/MYzO1u2IuyQXi+1ag=
Subject key identifier:   4F:B2:BD:C9:6A:5F:05:95:F9:86:34:1A:3F:67:65:EF:47:8E:57:6B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D4EBFAA253F7F29EDD1263400
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bdabd3e3-4d19-3949-9cfb-ddcd0273c529.roa
Signing time:             Fri 27 Mar 2026 13:00:40 +0000
ROA not before:           Fri 27 Mar 2026 13:00:40 +0000
ROA not after:            Thu 25 Jun 2026 13:00:40 +0000
asID:                     18779
IP address blocks:        104.165.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4e:bf:aa:25:3f:7f:29:ed:d1:26:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 27 13:00:40 2026 GMT
            Not After : Jun 25 13:00:40 2026 GMT
        Subject: CN=70c8222e-976c-4fe5-b72d-4a450f7a678e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0d:06:af:58:c9:12:ec:75:3b:2b:3b:5b:1d:
                    00:18:f9:ae:ae:38:a4:0f:c2:1c:ef:35:74:b4:f5:
                    63:79:ef:11:21:18:bf:f7:f7:4b:13:e7:43:ed:14:
                    1b:97:2f:ea:32:26:30:17:8d:38:db:4d:3a:3a:43:
                    68:5b:09:b5:23:9c:73:8f:58:43:6e:b8:2e:31:e4:
                    ca:0b:e9:c3:1d:80:47:c1:0b:d8:84:cb:b2:4f:66:
                    dc:fa:6e:26:ea:d9:4b:31:eb:0b:1d:42:d0:70:4b:
                    d7:8d:b6:46:55:7d:d2:6f:7e:54:d4:91:b8:50:24:
                    70:b4:ad:4d:94:1e:b4:c3:0b:1d:b4:fc:0f:56:df:
                    b7:bc:18:c0:da:ca:70:e9:ba:d3:f3:b9:e7:c0:ff:
                    c8:c7:c0:07:4e:4b:79:bd:8f:2a:c0:30:d4:f2:da:
                    76:a9:fe:f2:c0:29:34:46:1c:e8:26:91:17:6f:90:
                    f2:71:07:7e:3c:40:f8:7b:51:da:4d:c5:6a:64:27:
                    20:fb:94:58:8d:b9:a2:7f:46:4e:aa:98:7b:4f:bd:
                    36:cf:f8:9c:65:16:c2:43:67:4e:4e:e6:f9:c6:8a:
                    33:a3:c8:77:f4:66:39:99:23:fd:53:1e:8d:b1:67:
                    85:0c:13:a2:d0:cc:e7:53:3e:52:a8:6c:f9:0e:e7:
                    82:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B2:BD:C9:6A:5F:05:95:F9:86:34:1A:3F:67:65:EF:47:8E:57:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/bdabd3e3-4d19-3949-9cfb-ddcd0273c529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:25:66:e9:a3:fc:73:7f:ac:c8:c7:ff:01:25:4d:da:71:44:
         f4:f8:f8:68:2d:c0:0d:e9:22:48:1a:84:cf:a6:0b:01:c6:25:
         2d:6c:1c:71:d4:1b:47:f8:c2:b7:fd:a3:ff:67:45:f6:78:14:
         7f:c9:58:94:7c:56:96:ad:a7:cb:75:24:c1:4b:20:58:d1:38:
         5a:df:26:3c:ac:17:f1:c2:87:13:28:b9:f0:66:9d:aa:8d:3a:
         f7:af:b5:f9:4c:05:d5:fb:24:87:9a:5d:38:c1:c5:9d:bb:84:
         56:86:c9:64:6e:64:7b:c1:31:aa:1e:3f:53:33:dc:77:14:96:
         fb:22:b3:2b:28:67:b8:2e:82:07:eb:a1:09:d2:ac:b5:8d:16:
         37:8b:fd:91:1e:4a:e1:4c:94:3f:0b:69:b8:9e:dc:7d:b7:b0:
         dc:cb:10:28:f0:ea:20:74:6f:73:04:3a:12:cf:16:ce:99:a8:
         1d:8c:19:4c:9f:5f:c7:31:a6:72:6b:6a:08:02:9e:e7:43:98:
         ea:f8:b2:be:f0:3a:06:b7:da:dd:fa:66:70:94:10:be:4e:ae:
         2d:18:cb:13:18:8d:e8:bc:e1:b5:20:ea:c9:8e:d4:10:14:2e:
         0c:83:79:50:d3:dd:7b:64:e2:63:d9:8e:c2:fd:a9:b5:6f:49:
         dd:1f:7f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:45:47 2026 by rpki-client