Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ece35d00-da45-3221-9464-2c3ff1a359b4.roa
File:                     ece35d00-da45-3221-9464-2c3ff1a359b4.roa (raw, json)
Hash identifier:          clb9TB8pbqeys9wG2mF+/SomrcwIzFtlzi3TlgBFzuk=
Subject key identifier:   EB:6A:56:62:FD:C9:5A:0E:D5:7B:9C:8B:42:0A:FE:42:A8:64:F5:60
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA799DD6FA0D13B6327D10180
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ece35d00-da45-3221-9464-2c3ff1a359b4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398781
IP address blocks:        104.165.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:dd:6f:a0:d1:3b:63:27:d1:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5a5188d9-1177-4191-9ca3-59b9a664a761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b7:c3:e0:86:57:61:f6:5c:ab:d8:4b:1c:af:
                    7d:f4:5e:a8:3a:c0:4b:8c:3a:64:37:dc:ae:ae:a7:
                    3a:e2:28:10:0f:95:60:16:7a:86:45:2f:2a:69:c0:
                    ca:b1:7a:27:a4:e4:1a:25:80:93:24:03:6c:a1:eb:
                    4e:05:fc:df:33:3d:38:d6:1f:84:98:2b:01:bf:08:
                    88:4f:9a:b1:cb:45:c3:4a:b6:d5:70:a7:0e:7a:f2:
                    db:45:36:89:80:a3:8b:0e:ce:5a:5b:ad:a7:05:68:
                    15:e0:92:fd:fb:42:72:19:e9:e6:7c:7d:e7:af:b4:
                    7d:23:6a:c0:66:85:e8:f6:31:79:a7:f9:79:d3:7e:
                    b9:f1:f2:3d:6d:00:76:e4:84:f6:5e:37:87:76:4d:
                    06:5d:1a:93:e9:78:cd:da:9b:58:f9:f4:65:9a:60:
                    75:5d:7f:c9:78:d4:fc:46:62:83:79:0a:b3:d1:e0:
                    ef:60:42:f9:70:c6:25:76:6d:8b:87:e7:84:97:f8:
                    8d:c2:dd:77:4a:59:f8:48:b4:d3:76:5d:d9:8e:0d:
                    6b:cd:7e:1d:c7:ba:8e:5e:44:13:3a:a2:0a:94:df:
                    07:e3:c7:8f:5d:15:60:41:79:68:c9:aa:fa:a8:be:
                    ea:7d:aa:ce:ad:c5:c5:a7:ca:b9:de:18:c8:27:42:
                    6f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6A:56:62:FD:C9:5A:0E:D5:7B:9C:8B:42:0A:FE:42:A8:64:F5:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ece35d00-da45-3221-9464-2c3ff1a359b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:28:42:30:97:31:34:00:d0:88:d7:c5:84:51:e9:02:46:fc:
         b3:ab:a9:32:82:94:b4:cd:52:15:c8:0d:69:75:91:d2:8e:e3:
         a5:ec:29:e6:d3:57:ac:45:f9:b1:1f:cb:c2:41:b3:cc:45:ee:
         46:21:12:40:f5:1f:86:29:4e:4f:45:c5:9d:a5:65:90:9e:cb:
         91:fa:6e:55:e9:c9:ed:60:3f:e4:0a:5d:25:2c:8d:52:48:fc:
         cb:64:d1:63:47:65:8a:7e:64:07:02:02:19:bf:c5:ff:dc:bf:
         1b:73:e1:d1:97:43:4b:31:46:4e:d3:77:96:64:b4:8a:c5:51:
         d7:bd:26:83:c2:11:66:88:ad:f5:f5:cc:49:d1:13:42:d8:d1:
         49:8c:b2:c1:e5:48:46:e0:e4:a0:85:d6:19:4e:c4:d0:bb:7f:
         4e:03:d5:98:a8:a0:70:c6:ba:b3:a5:6a:cf:6f:31:0f:99:ee:
         b2:8d:7e:29:73:ee:e5:a8:a7:d9:07:5e:a9:f4:3b:5e:f4:25:
         13:4f:8a:4c:71:40:3c:a1:25:89:65:f8:6b:fe:b5:40:c8:89:
         89:3c:01:34:4c:da:56:6b:67:74:88:bc:8b:97:c7:3b:6c:be:
         27:2e:55:da:d7:4e:dc:78:23:e8:5e:e9:96:42:1e:c5:e4:51:
         c6:dc:fe:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:16:05 2026 by rpki-client