Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09b6420d-5a6b-3e0e-809a-5931009a421d.roa
File:                     09b6420d-5a6b-3e0e-809a-5931009a421d.roa (raw, json)
Hash identifier:          Cdq/xqvqDguAmsD2rZBlimX1lAPMm+1HVUqUr7aLQMQ=
Subject key identifier:   95:3F:FB:79:50:74:40:AA:98:B3:45:1D:28:D3:68:6F:5F:56:B9:BB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CAE5E9E8224318EE9C3C79C18
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09b6420d-5a6b-3e0e-809a-5931009a421d.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     396356
IP address blocks:        104.252.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:9e:82:24:31:8e:e9:c3:c7:9c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=60f39fd0-4f4b-4c58-ba06-9506736f60f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:42:f0:65:1c:d2:38:8d:96:d6:2c:c4:8b:83:
                    4f:fb:25:ef:0d:01:f7:0b:67:a9:81:7c:98:b1:c4:
                    5a:5e:68:68:a1:3f:a4:05:57:0c:3b:6c:5a:96:7e:
                    63:63:10:38:cf:02:d6:89:fd:df:f8:b4:90:67:a6:
                    c9:58:a1:cd:6d:77:8c:00:26:9a:e0:6c:42:5f:aa:
                    2f:0e:e3:7b:74:25:b1:af:3d:35:c5:19:50:59:5a:
                    cc:e4:a2:20:2d:6b:cc:bd:e3:05:28:7c:f5:0b:36:
                    50:39:1f:ce:25:0c:e2:fd:ef:1f:a6:05:9e:76:d4:
                    20:66:60:fd:3f:21:33:14:91:46:5d:9e:6e:a5:3a:
                    6c:ad:b9:f5:01:34:cc:bb:0d:3d:5a:3a:00:14:ce:
                    64:19:33:ea:c4:bb:25:54:4f:99:1b:3f:89:fa:ee:
                    d9:aa:11:83:91:db:67:e2:65:c3:a6:5d:4b:21:60:
                    29:cc:7f:bf:f7:9b:2e:99:13:eb:56:01:99:bb:41:
                    7b:3a:1f:4c:7b:84:ef:cc:2d:91:b0:72:d8:88:03:
                    e6:69:c4:d9:74:29:1e:fc:d2:06:cc:ce:89:ea:44:
                    5f:3b:d4:13:64:70:3a:72:77:f3:fd:8d:11:c3:ab:
                    91:9d:5b:55:a5:ad:69:58:50:f0:05:5e:6e:cc:3f:
                    5a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:3F:FB:79:50:74:40:AA:98:B3:45:1D:28:D3:68:6F:5F:56:B9:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/09b6420d-5a6b-3e0e-809a-5931009a421d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:14:36:25:80:5d:cf:60:4a:7a:0c:33:57:98:ba:e1:7c:b5:
         00:2f:95:3a:51:db:0c:22:5a:81:56:3a:01:d4:3c:f5:17:ca:
         a9:79:4e:66:5f:8a:61:c3:1f:b5:5b:a2:0c:0f:f0:b6:8e:c5:
         d5:30:f9:69:6d:27:db:fc:50:5a:63:4f:94:37:c1:8f:62:29:
         7f:7e:41:51:87:ca:e5:14:cb:47:6e:bb:66:9c:7d:3c:6d:bf:
         88:be:23:24:3c:f3:8b:b9:3a:6d:6a:21:59:6f:1c:26:d1:c0:
         ed:c1:03:9d:36:a8:dd:88:d5:c8:c5:1a:ac:8c:40:d1:c2:12:
         bd:b2:7d:0f:39:e6:9f:be:2e:e2:07:11:82:fa:5b:80:4d:42:
         e3:f6:b4:4d:44:0b:51:7c:47:b3:fc:5e:1b:1f:c7:d4:80:6d:
         52:c3:5f:3b:55:d0:f3:3b:8a:d6:96:e8:9f:81:df:00:6c:97:
         41:38:39:8b:61:e0:46:78:d6:37:c7:79:5e:b1:c3:04:81:cb:
         b2:3c:84:d3:c9:d6:3a:de:76:63:ff:55:34:83:9a:cb:55:85:
         0b:17:10:11:b6:ba:9e:70:be:ad:f5:7b:63:30:8a:e4:0d:5a:
         4c:7a:fa:14:22:b8:d0:a4:37:a2:11:4a:a9:06:79:3a:0a:4b:
         de:b2:33:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:08:43 2026 by rpki-client