Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/34f16b58-1dec-3084-bce4-203cb6396b11.roa
File:                     34f16b58-1dec-3084-bce4-203cb6396b11.roa (raw, json)
Hash identifier:          6fpuBX4J3ql7FvDo+b/iHksn3OakbvsDlD3wFRKrEQY=
Subject key identifier:   AA:75:12:BB:A5:94:B1:43:8E:0C:6B:F9:A1:F7:36:8A:9C:AC:E0:D6
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CCBA7599BD4AAF1A3EA7D3B60
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/34f16b58-1dec-3084-bce4-203cb6396b11.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     50304
IP address blocks:        104.253.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:59:9b:d4:aa:f1:a3:ea:7d:3b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=4c84d3e1-f86f-4857-9e90-bdfd0eddedcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bf:57:8c:6b:e5:2a:52:28:f3:7a:25:90:9e:
                    f4:8a:68:e7:e0:a2:1c:64:91:e0:a0:73:92:ac:b3:
                    f1:39:9b:55:cd:c0:9a:d5:f4:ba:fa:bf:0f:91:b8:
                    d2:90:32:14:89:1e:b0:b4:e8:ae:66:36:c4:86:54:
                    35:3d:91:08:ef:b9:62:87:89:bd:73:46:da:95:4a:
                    a7:7e:03:c8:25:4c:47:f4:cd:d2:92:64:46:ee:22:
                    78:10:a8:39:55:8b:1b:b0:aa:b4:96:c7:be:63:ab:
                    fc:57:b0:11:da:e1:0a:5d:e5:fc:49:81:59:51:83:
                    05:d4:aa:d3:cc:c4:43:f7:fc:33:0d:bd:52:25:59:
                    b3:c6:e2:a8:ca:c4:cd:e0:d7:a2:54:0f:a6:01:5b:
                    38:01:46:93:fb:45:af:c0:2b:bc:0d:1f:f4:53:9d:
                    de:2c:1a:3e:40:c0:73:73:97:c6:97:63:ca:91:a4:
                    b8:d0:d5:e8:e7:38:79:c2:66:96:5b:79:20:0f:41:
                    34:3f:59:af:c6:a0:b5:f2:39:cd:db:a9:8c:0d:e0:
                    21:02:f8:f4:87:9f:65:dd:57:dd:9e:8f:3f:61:2a:
                    70:2e:68:a6:37:41:d2:74:d9:81:98:54:19:88:97:
                    03:96:93:4b:e6:7e:66:b9:78:54:da:2d:dd:08:8a:
                    0e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:75:12:BB:A5:94:B1:43:8E:0C:6B:F9:A1:F7:36:8A:9C:AC:E0:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/34f16b58-1dec-3084-bce4-203cb6396b11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:e4:06:fb:38:8d:e8:06:4a:a0:2c:a9:3f:10:d7:d6:d4:23:
         90:33:77:99:a6:18:38:94:c3:fb:6d:56:c8:6b:ec:19:d4:8b:
         0f:b7:bf:be:42:c6:a1:7d:d8:1c:87:71:1c:14:b1:dd:f9:8b:
         05:cb:c0:85:69:e4:7e:53:dc:31:b4:83:ce:44:15:9d:e5:61:
         08:f6:d9:24:fe:fd:6e:08:cd:77:c1:bc:07:b5:5b:3e:a5:1d:
         a3:9a:e4:b9:03:a4:eb:ef:e5:db:ee:aa:29:d5:60:c9:94:47:
         a2:b8:ba:a8:cd:e7:af:e3:f9:5f:8d:42:8d:42:3f:69:99:a5:
         9a:69:fe:b7:c7:da:c8:7e:fd:75:ba:2b:05:57:18:a0:69:0e:
         65:54:f0:fa:3f:49:16:d4:68:da:57:8a:2c:81:8f:e4:a5:db:
         ac:29:0d:f5:02:9d:b3:6e:13:a8:0c:7f:dd:69:b2:87:ad:31:
         f8:57:cb:0c:14:55:99:77:ac:13:5e:7b:8b:52:a0:9a:bf:da:
         1e:6e:34:34:f0:1e:9d:99:c2:5d:bc:c1:18:e2:27:63:43:8d:
         06:5c:76:0b:0a:d3:e5:4f:b7:d9:27:4e:3f:71:63:f9:9c:cb:
         9e:40:db:c8:74:da:c5:fd:ab:35:4c:27:f0:7f:9d:ea:40:e2:
         b2:53:86:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:15:23 2026 by rpki-client