Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f654d225-ea78-3049-b70b-df674c291ec8.roa
File:                     f654d225-ea78-3049-b70b-df674c291ec8.roa (raw, json)
Hash identifier:          hM8DFwb/xrNly6l+DLK+OHh2LlknIUWtNqSFTEp9rnE=
Subject key identifier:   22:ED:FA:3F:62:C0:2D:E5:02:B1:95:92:89:86:B2:49:AA:C8:C1:53
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D4EBFA59A6680F8497A1223BE
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f654d225-ea78-3049-b70b-df674c291ec8.roa
Signing time:             Fri 27 Mar 2026 13:00:40 +0000
ROA not before:           Fri 27 Mar 2026 13:00:40 +0000
ROA not after:            Thu 25 Jun 2026 13:00:40 +0000
asID:                     18779
IP address blocks:        104.165.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4e:bf:a5:9a:66:80:f8:49:7a:12:23:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 27 13:00:40 2026 GMT
            Not After : Jun 25 13:00:40 2026 GMT
        Subject: CN=d77b1554-6990-4897-bc9f-1209df5cbe96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:8b:a6:29:77:f9:f9:7c:77:2f:0d:6a:c7:
                    58:34:76:61:95:ac:b3:63:78:b2:6b:e2:52:c1:11:
                    c4:b2:85:2a:0c:f4:9b:1e:e6:68:de:19:97:4d:54:
                    63:59:ad:56:f5:d5:57:48:bd:21:49:e3:fc:2e:c7:
                    92:f2:0d:50:a5:df:8a:08:12:f4:02:b0:fa:f4:e7:
                    86:7f:04:24:6f:05:b8:10:e7:ae:1e:47:0e:60:ce:
                    d3:ab:3c:42:88:68:1e:ba:ac:86:3d:a2:2b:c8:f4:
                    3e:ef:34:f0:d4:7b:d8:a6:74:44:fb:15:34:3c:11:
                    b2:af:19:9d:81:d5:f5:c5:1c:7b:50:5b:50:83:7a:
                    f0:83:a1:d9:fd:b8:b9:b7:2c:15:38:ea:99:67:37:
                    ca:e0:79:e5:fe:50:4b:0f:ab:50:97:13:c3:80:d3:
                    87:ad:14:6c:9c:19:d3:b3:28:db:8c:a6:98:6a:b4:
                    ea:eb:7c:5e:5b:c1:63:60:6a:e1:a2:c9:ca:c9:b8:
                    1c:c0:0f:70:83:b9:ea:80:d9:9d:49:c0:5a:8e:45:
                    fe:3a:cf:a4:53:10:8e:50:97:05:22:93:2d:15:e6:
                    31:00:09:aa:69:86:95:18:a5:04:68:6d:85:db:f8:
                    fa:ff:3c:8b:30:38:81:86:8d:fe:de:b1:99:d8:ca:
                    8f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:ED:FA:3F:62:C0:2D:E5:02:B1:95:92:89:86:B2:49:AA:C8:C1:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f654d225-ea78-3049-b70b-df674c291ec8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:fa:eb:83:fa:1e:f9:2c:3c:38:a8:37:b7:cd:39:90:f0:a9:
         e8:11:37:77:2c:93:07:c1:21:f4:56:dc:46:d3:19:8d:f4:e6:
         f8:75:21:75:70:11:6b:2d:45:e0:d1:bb:29:5f:4e:3a:39:0b:
         b0:0f:d3:5b:b7:54:03:c3:13:8b:84:24:ac:6a:87:52:95:da:
         79:fb:d7:16:ee:dc:41:6d:e3:cb:f2:63:a9:7f:05:67:c2:78:
         e9:9f:58:ee:40:77:ea:61:46:5b:95:7c:d4:da:a4:47:94:ae:
         4b:0d:4f:c6:60:51:d8:01:fb:42:55:f4:f0:de:65:14:17:64:
         b4:ac:13:12:5a:2e:40:b1:5e:9f:55:0a:56:b6:17:47:b4:5a:
         7f:01:83:46:35:10:60:cd:dd:20:58:0f:78:38:b5:f3:38:97:
         fb:98:c8:0e:63:f0:7b:2b:de:c1:22:87:de:54:ab:94:73:b8:
         65:79:41:a8:aa:ce:db:50:65:4b:74:b3:38:2c:67:cd:08:a4:
         c8:0b:44:77:92:53:88:25:6c:08:bd:c8:5b:da:ff:89:91:78:
         39:8f:f3:14:1a:26:ba:49:a3:9c:02:74:9d:d5:bf:b9:57:72:
         28:47:de:af:33:46:d4:7d:1e:2a:59:85:81:2e:e2:5a:f5:c0:
         0a:1d:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:33:22 2026 by rpki-client