Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88b7d6e8-9b60-35d9-bb1d-0a3c18c73252.roa
File:                     88b7d6e8-9b60-35d9-bb1d-0a3c18c73252.roa (raw, json)
Hash identifier:          VPlAfve3Ds+vHqlYy+z0+QW9XAIRo13ZlJhDxVl/4UM=
Subject key identifier:   F2:07:36:A5:08:40:9C:85:E3:F8:5E:70:A5:9A:A0:E0:B4:1F:67:6B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CB121B5EE141657DAD936EB06
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88b7d6e8-9b60-35d9-bb1d-0a3c18c73252.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     212238
IP address blocks:        104.252.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:b5:ee:14:16:57:da:d9:36:eb:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=8935eca2-42fd-4018-add4-d2f54d6da9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8b:08:01:b0:2f:b3:1d:f2:ab:4a:5a:fa:68:
                    5d:3c:aa:30:b9:bb:32:7e:dc:34:af:1b:bd:a5:2a:
                    33:11:c4:0f:93:a2:ed:e1:d3:87:df:65:cc:48:1e:
                    16:bc:c0:8a:5a:6e:d9:1b:bf:a4:94:63:53:de:ea:
                    f5:0b:41:20:85:3c:7d:1f:ff:97:2b:c3:98:91:58:
                    46:16:ae:74:42:14:6e:73:ad:f2:bd:79:c9:3e:49:
                    dc:58:9c:f8:3d:26:4d:08:2a:86:01:64:98:91:4c:
                    c0:4b:65:0c:91:c8:62:03:7c:57:b6:58:b8:bc:7d:
                    d3:c0:fd:5d:08:29:3c:07:4a:4c:3d:24:0d:9c:f4:
                    3a:5e:db:a4:4f:a8:93:d3:34:fe:d4:63:49:0b:b6:
                    9e:84:34:83:04:95:e9:8a:76:c2:f2:ba:18:d3:60:
                    7a:53:69:68:1f:96:46:dd:02:de:98:fd:b1:ba:06:
                    75:5b:2d:8a:b7:ad:27:c3:a8:46:c1:db:97:ff:bb:
                    9d:43:79:6e:7a:6a:be:cd:09:c8:6a:c3:54:4e:93:
                    71:0e:20:4d:c7:f9:65:b4:e7:1b:f8:2d:d1:d9:d3:
                    33:17:9c:32:e6:6b:93:a7:c1:e5:4d:c2:d0:65:14:
                    8f:d4:65:e9:21:47:24:02:5f:7c:a2:14:76:fa:a2:
                    74:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:07:36:A5:08:40:9C:85:E3:F8:5E:70:A5:9A:A0:E0:B4:1F:67:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88b7d6e8-9b60-35d9-bb1d-0a3c18c73252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:64:e4:59:c6:b4:62:9d:bc:14:3d:80:22:86:80:4c:f9:8c:
         27:62:03:74:22:cb:37:b7:46:21:a7:7e:f9:73:99:3a:fd:d6:
         65:f7:85:f2:70:a6:ee:de:b2:ce:69:46:13:c6:31:28:2e:8d:
         60:3e:0e:ed:e6:30:de:b6:57:6d:3d:1f:b6:be:cb:fe:83:e0:
         53:04:bf:4f:2e:89:7a:dd:67:92:ec:dd:62:18:46:81:2c:ee:
         ef:73:c7:87:8e:9c:cf:6e:09:3a:b4:2d:86:fb:57:7c:ae:6e:
         eb:5e:25:40:92:e1:8e:0b:d1:14:80:bf:ca:6d:08:aa:20:1c:
         d7:80:23:e5:0e:9b:2c:30:74:9d:0b:d9:e1:75:4a:af:2c:33:
         2f:ed:fc:02:8a:61:57:bc:5b:5f:30:79:b0:58:30:ba:01:2e:
         d6:e4:bc:dd:dc:7d:d7:07:07:b4:6b:0d:19:02:b0:e6:b5:c9:
         f6:d2:79:76:75:cf:74:76:5a:18:9a:fe:4d:82:3c:08:7c:21:
         d8:60:69:a4:19:eb:19:0f:3a:00:e2:5f:44:91:ec:a2:92:91:
         aa:32:82:d6:69:73:5f:6f:fb:af:62:7d:d1:72:4d:e3:97:4f:
         51:ec:0b:62:cf:48:0e:75:61:66:50:9f:0e:86:d9:0b:9c:52:
         fc:c4:a1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:18:58 2026 by rpki-client