Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/323a0546-d4d5-3569-8228-3b89e02edad8.roa
File:                     323a0546-d4d5-3569-8228-3b89e02edad8.roa (raw, json)
Hash identifier:          X6XSyztX8I4Z+9dFbVCyp16xlTLapEXhbi/CBaWvzok=
Subject key identifier:   60:9F:60:E1:4F:9D:3A:8F:6D:08:EE:B4:FD:3C:02:A3:22:BC:BB:FD
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CB121E245B535B5FA612C4800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/323a0546-d4d5-3569-8228-3b89e02edad8.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     212238
IP address blocks:        104.252.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:e2:45:b5:35:b5:fa:61:2c:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=63332cc5-e41b-48a0-b2ed-fa1934c3c5fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:46:13:0a:08:d8:5e:d1:ad:d2:8b:2f:ad:11:
                    a5:b2:fe:97:64:49:cb:45:7b:80:6e:ce:ee:c9:98:
                    2d:54:03:36:6b:78:67:c8:01:59:b2:ac:06:bf:53:
                    6e:bc:7f:36:d0:52:b8:57:ea:c4:82:21:21:69:b0:
                    8e:ad:d1:ed:1e:98:6f:a7:33:f7:00:e7:db:9d:b1:
                    88:12:c4:30:02:c4:26:1e:ed:66:14:cd:3a:f4:4f:
                    fc:f6:de:2c:4f:4c:6a:53:f4:a5:73:9a:ab:40:a4:
                    bc:ba:20:14:66:6b:17:f9:96:9d:74:f0:85:d5:09:
                    cb:9d:38:97:a7:e3:66:30:3b:23:c4:a7:75:c6:9a:
                    0f:2a:01:4d:a5:0b:f8:29:8e:73:4a:99:2d:17:1f:
                    50:0a:f4:f0:99:5d:a8:d4:0c:b2:0a:98:d2:47:f7:
                    94:a4:a4:8b:33:e3:fc:5f:3f:a1:66:3a:bd:85:2c:
                    4a:19:a1:41:01:b3:51:2f:37:b4:ea:0f:5b:e8:6f:
                    f4:9d:a6:2c:01:f3:62:f9:a5:03:5b:bc:ea:71:0e:
                    8f:ca:3e:18:41:31:9b:0f:97:3e:dd:bd:be:0c:1c:
                    0e:ba:ab:fe:15:50:01:4e:95:1e:19:81:be:b7:0e:
                    5c:8b:e6:04:fb:bc:47:71:5b:5e:83:84:50:9f:18:
                    80:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9F:60:E1:4F:9D:3A:8F:6D:08:EE:B4:FD:3C:02:A3:22:BC:BB:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/323a0546-d4d5-3569-8228-3b89e02edad8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:91:92:42:d2:ab:f4:dd:37:e0:6e:d5:40:55:d2:6e:ac:13:
         d9:80:28:48:d9:92:3d:15:7d:d6:c1:e4:3c:ff:d0:0c:c1:1e:
         97:aa:56:0e:f1:46:84:df:41:97:d3:76:90:eb:42:a7:5b:35:
         87:ff:25:19:c2:88:6f:15:eb:7e:ad:0e:38:f7:a0:66:71:db:
         8b:f8:1b:42:18:41:c3:73:2e:32:3e:64:6e:db:74:d6:bf:71:
         6f:5f:14:f4:89:55:7b:cd:cf:46:48:18:19:23:5f:6d:8c:63:
         cf:ce:20:0e:30:76:4b:fe:75:f6:22:09:c4:c1:47:bb:0b:af:
         3c:8b:e5:b4:cd:af:1f:e0:81:b1:de:0e:53:c8:5c:e6:8f:06:
         e3:58:23:da:63:d9:d9:9a:c5:6e:53:72:e7:24:53:41:3b:d6:
         4d:ce:c6:da:c4:03:3a:4c:4d:0e:81:25:cd:07:e1:f6:3a:ad:
         cd:54:8b:1a:fb:43:0b:08:de:39:95:32:26:71:74:8c:31:3c:
         e0:a2:fd:e3:6f:60:29:e6:84:45:2a:e3:29:43:75:55:ed:55:
         43:0e:7b:37:d0:07:09:4b:da:f4:e5:8b:7e:5b:06:e7:76:a7:
         50:dc:b7:6e:5f:36:0b:30:27:81:50:00:46:35:1b:c3:fd:c4:
         00:87:4e:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIeJFtTW1+mEsSAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk
NjMzMzJjYzUtZTQxYi00OGEwLWIyZWQtZmExOTM0YzNjNWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40YTCgjYXtGt0osvrRGlsv6XZEnLRXuAbs7u
yZgtVAM2a3hnyAFZsqwGv1NuvH820FK4V+rEgiEhabCOrdHtHphvpzP3AOfbnbGI
EsQwAsQmHu1mFM069E/89t4sT0xqU/Slc5qrQKS8uiAUZmsX+ZaddPCF1QnLnTiX
p+NmMDsjxKd1xpoPKgFNpQv4KY5zSpktFx9QCvTwmV2o1AyyCpjSR/eUpKSLM+P8
Xz+hZjq9hSxKGaFBAbNRLze06g9b6G/0naYsAfNi+aUDW7zqcQ6Pyj4YQTGbD5c+
3b2+DBwOuqv+FVABTpUeGYG+tw5ci+YE+7xHcVteg4RQnxiADQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGCfYOFPnTqPbQjutP08AqMivLv9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMzIzYTA1NDYtZDRkNS0z
NTY5LTgyMjgtM2I4OWUwMmVkYWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPyfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJCRkkLSq/TdN+Bu1UBV0m6sE9mAKEjZkj0VfdbB5Dz/0AzBHpeqVg7x
RoTfQZfTdpDrQqdbNYf/JRnCiG8V636tDjj3oGZx24v4G0IYQcNzLjI+ZG7bdNa/
cW9fFPSJVXvNz0ZIGBkjX22MY8/OIA4wdkv+dfYiCcTBR7sLrzyL5bTNrx/ggbHe
DlPIXOaPBuNYI9pj2dmaxW5TcuckU0E71k3OxtrEAzpMTQ6BJc0H4fY6rc1Uixr7
QwsI3jmVMiZxdIwxPOCi/eNvYCnmhEUq4ylDdVXtVUMOezfQBwlL2vTli35bBud2
p1Dct25fNgswJ4FQAEY1G8P9xACHTpM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:19:38 2026 by rpki-client