Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4284cbd0-9096-345b-88a2-89dbec3c6e06.roa
File:                     4284cbd0-9096-345b-88a2-89dbec3c6e06.roa (raw, json)
Hash identifier:          AwSPNazLAFrYg43wbr21EEerJMNW5fplFdTwbRkwoJs=
Subject key identifier:   92:EB:19:46:C2:BA:30:31:65:11:F1:FD:DE:36:68:CC:77:A3:5E:11
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584DFEAF2A3CF71F90A4ADED8700
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4284cbd0-9096-345b-88a2-89dbec3c6e06.roa
Signing time:             Fri 29 May 2026 13:29:50 +0000
ROA not before:           Fri 29 May 2026 13:29:50 +0000
ROA not after:            Thu 27 Aug 2026 13:29:50 +0000
asID:                     212238
IP address blocks:        104.164.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fe:af:2a:3c:f7:1f:90:a4:ad:ed:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 29 13:29:50 2026 GMT
            Not After : Aug 27 13:29:50 2026 GMT
        Subject: CN=f122133c-7737-4258-894c-5711be19d35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c3:be:97:94:9f:d2:7a:a7:b6:88:af:de:1d:
                    74:70:8a:8d:78:8b:81:d5:84:43:38:9d:0a:0e:de:
                    f7:86:e1:ca:38:b8:88:d6:09:41:e9:a8:ce:29:53:
                    af:79:e6:57:2c:b9:d8:05:19:cd:9c:22:9d:5a:20:
                    3d:eb:96:95:e1:50:73:55:b4:7c:36:bd:ac:9c:87:
                    36:6e:ea:50:9a:fb:8b:89:8f:db:e2:fd:5f:6a:51:
                    eb:41:a1:0e:53:6f:93:90:ab:42:b2:1b:8a:39:9e:
                    78:1d:b1:98:26:9f:dd:68:72:76:78:d2:36:d8:b4:
                    63:19:c6:59:cb:c2:ce:ca:57:5b:d4:4f:31:84:f7:
                    52:aa:9c:9f:06:c5:65:80:f0:17:fe:4c:7f:82:4c:
                    3f:43:3c:7a:cd:14:6e:7a:19:fa:e0:42:07:1d:76:
                    b3:9c:c8:02:8f:6b:19:7e:51:28:a9:1b:8d:8e:e9:
                    9c:f9:b8:9c:d8:43:90:ce:2d:11:78:62:67:d7:c9:
                    98:88:d8:2d:ad:36:f6:e0:8c:d7:d0:fb:5f:dd:93:
                    72:0d:9c:31:8b:52:2f:79:02:2e:32:bf:f8:dd:75:
                    47:6a:2a:a1:8c:ec:5d:95:2c:70:53:06:c4:d4:87:
                    59:9b:c3:36:66:a0:61:c8:42:54:20:e9:fa:93:35:
                    e7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EB:19:46:C2:BA:30:31:65:11:F1:FD:DE:36:68:CC:77:A3:5E:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4284cbd0-9096-345b-88a2-89dbec3c6e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:94:8f:8f:d1:3b:01:09:51:99:92:5c:c5:2f:c3:08:ac:d1:
         a8:18:82:33:07:f7:19:3c:33:55:a1:8d:7d:51:31:93:d9:21:
         6e:9c:93:62:1e:c1:30:9f:cb:d5:ef:e8:a3:3a:48:49:23:3a:
         3d:7d:14:7f:d0:53:80:76:55:5c:5e:6f:7e:e7:a6:2d:8f:ca:
         c1:bd:12:d0:93:64:4d:b3:ee:10:ca:7b:85:f3:c9:8d:f7:f2:
         01:13:fc:f8:ed:f6:29:36:19:17:56:14:a3:dc:ad:10:71:41:
         49:2d:42:18:06:55:fe:36:d0:42:bd:fe:29:2a:6e:bf:09:fc:
         dc:65:07:0d:ff:79:34:f9:19:ae:85:37:4d:2a:9b:9b:46:5c:
         b9:de:72:a5:f9:5e:92:96:c7:1a:a6:bf:8d:1c:61:b3:e3:98:
         18:12:dc:59:e2:eb:02:68:98:fd:57:cf:16:c2:b3:81:df:80:
         2e:87:d1:52:62:8a:25:b0:f2:c3:bf:68:5a:64:48:57:9a:3b:
         81:61:e1:8a:e4:6f:52:c8:32:8f:9e:00:2f:7c:2c:00:e0:20:
         63:bd:5e:6a:ed:11:c5:a6:b3:c4:84:c8:82:6c:7a:c1:ff:d9:
         2b:6c:b7:67:6e:5a:b0:f1:9b:2a:b5:75:41:b9:fb:3b:cc:ec:
         7c:2c:4a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:13 2026 by rpki-client