Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/33c64224-1c10-3358-ae30-982f066bab74.roa
File:                     33c64224-1c10-3358-ae30-982f066bab74.roa (raw, json)
Hash identifier:          Pe4VlFym4XAMXE+OYZvORWI0sRjMDnLRLNrq2eOIf/s=
Subject key identifier:   C2:DF:8F:E1:AE:59:21:2F:00:0A:5C:61:9A:61:C9:EA:7C:54:EC:2C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CEE8CC6FF5CEC9F5541DB2800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/33c64224-1c10-3358-ae30-982f066bab74.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     214238
IP address blocks:        104.165.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:c6:ff:5c:ec:9f:55:41:db:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=ea50bb9b-3542-4679-81d8-7c912d6e9466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:a9:05:49:70:c7:76:22:77:0f:a2:99:a2:
                    36:a9:1c:ab:34:04:eb:c6:63:0a:7c:90:af:66:95:
                    1e:3a:01:45:2a:b3:75:da:71:d6:23:f8:50:bc:35:
                    71:ea:bb:85:12:be:0b:ce:54:68:29:ab:4e:d3:05:
                    8e:eb:0a:e7:b7:ce:ff:c9:08:b6:74:ef:fe:cd:cb:
                    44:18:8e:ef:bb:04:40:15:5d:b3:25:c9:20:22:82:
                    6f:8e:cb:1a:3d:d5:37:ee:21:e0:e6:ae:95:7e:a5:
                    c3:f2:ab:b2:bb:5d:8f:f1:3a:e2:2b:d0:a8:39:42:
                    cd:0e:1c:07:70:26:91:cd:53:05:de:7b:44:a4:95:
                    34:c2:a5:40:57:24:82:e5:dc:d7:d8:5b:db:bb:8f:
                    6f:d2:83:31:9e:21:4a:e7:68:e5:5e:d0:25:22:45:
                    e7:e3:90:20:65:d0:b0:ca:b8:74:d9:1d:8d:40:db:
                    3d:88:30:e6:1c:96:03:90:cc:b0:f2:83:e0:21:df:
                    53:12:4f:b6:79:62:25:61:b7:f2:3f:75:77:0e:c2:
                    ea:a2:c1:8f:36:a3:45:99:14:63:ad:50:f8:00:c9:
                    b9:2b:eb:19:dd:14:eb:d4:44:32:9a:7b:25:c6:19:
                    d3:ec:aa:ae:91:b3:ae:08:30:71:24:32:19:d6:33:
                    9b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DF:8F:E1:AE:59:21:2F:00:0A:5C:61:9A:61:C9:EA:7C:54:EC:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/33c64224-1c10-3358-ae30-982f066bab74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:cf:cb:7e:03:e4:b4:a5:e6:37:6c:c3:da:10:c1:ce:40:ee:
         ba:18:eb:81:d0:0e:6a:16:7b:7c:52:8d:b7:9b:67:2c:58:63:
         d5:f4:c6:27:67:ec:d3:40:99:c4:07:af:ce:85:a3:e6:13:66:
         ff:94:4a:9c:00:1f:0c:4c:ce:68:fb:f9:f9:9f:66:19:f7:dd:
         cd:46:89:d5:15:99:83:30:86:f3:4b:91:b6:dd:cd:39:f9:f7:
         e5:2c:32:90:ba:dc:ce:bb:a7:9b:cc:9e:6e:21:96:d9:64:af:
         76:9e:02:27:ef:e7:28:ef:e1:06:b9:54:89:e2:7c:4a:83:15:
         a2:9d:d5:4d:77:26:43:d6:df:bf:46:ec:35:d7:1d:64:77:20:
         be:52:bb:02:7e:a0:49:8d:9c:21:d5:3e:40:51:13:01:a7:e5:
         25:98:ed:e0:60:ce:f8:0a:11:e5:e9:45:c4:3b:51:ab:17:e2:
         b1:82:b4:99:fe:8b:03:49:9e:a0:32:18:4c:8a:23:d1:5d:8d:
         bd:1e:2d:06:20:fe:ff:06:c5:7e:8d:ad:20:14:e4:74:0e:94:
         33:4d:0a:70:be:6b:c7:45:04:77:ea:c9:c7:00:05:b3:27:0c:
         b2:27:0f:83:0e:63:53:32:05:83:d3:21:6b:2a:c7:0e:3e:64:
         5d:01:99:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:45 2026 by rpki-client