Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a14e152-7896-381c-aa22-a96d1c865a85.roa
File:                     8a14e152-7896-381c-aa22-a96d1c865a85.roa (raw, json)
Hash identifier:          c1IVGaMlYjE0+gJqHceL9/Xi530te/HL15RWLz/8Rcw=
Subject key identifier:   68:EB:94:02:02:89:32:D2:CC:B3:DA:09:CD:A3:54:44:07:F2:14:19
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CAE5E9BEF88D7B8CB86BC2300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a14e152-7896-381c-aa22-a96d1c865a85.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     396356
IP address blocks:        104.252.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:9b:ef:88:d7:b8:cb:86:bc:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=4428e5fd-cbae-43b5-b318-d7e4c4713103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:48:da:55:10:8b:95:3c:d6:7d:af:e1:04:4f:
                    08:b7:24:fe:81:3f:26:f0:69:b9:43:11:90:c2:85:
                    33:59:fb:a3:d9:a5:ec:47:2b:ba:8f:fa:53:31:aa:
                    62:20:49:43:57:1c:98:b7:05:2d:44:22:7d:ab:a1:
                    a0:05:9f:89:a5:dd:b9:a0:fd:cf:64:5c:1c:06:6a:
                    55:b8:df:9a:a9:4a:02:7a:91:4a:9c:f0:e7:23:de:
                    5e:82:e5:18:2f:51:6e:bc:fc:02:6d:c6:f3:d9:46:
                    a1:ca:d1:41:be:1c:22:69:51:22:b1:43:21:8a:26:
                    8e:a3:47:78:49:a2:e0:01:e7:3a:34:64:99:77:4c:
                    82:63:76:c7:5f:15:80:47:04:78:f4:de:7d:c9:0f:
                    cc:50:77:05:bf:2e:30:71:c5:13:a8:06:e8:ab:c6:
                    dc:8f:52:1d:fc:04:63:d5:a4:75:04:9f:2b:bf:33:
                    a5:d3:57:eb:9f:be:38:90:ca:84:96:0d:85:81:5c:
                    06:67:07:47:17:74:f3:ff:d6:89:e2:7b:bf:8b:fe:
                    93:90:ca:db:36:39:9d:56:a9:83:9b:9f:5b:09:c4:
                    00:e4:c0:0a:30:37:fe:d5:4b:87:06:4d:a9:b7:b2:
                    47:8b:d0:86:32:d8:0b:8d:a6:24:35:0b:95:0f:cf:
                    2e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EB:94:02:02:89:32:D2:CC:B3:DA:09:CD:A3:54:44:07:F2:14:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8a14e152-7896-381c-aa22-a96d1c865a85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:31:70:09:90:02:79:4d:b3:de:52:b7:21:63:23:63:be:d1:
         ba:49:a2:5d:c4:e1:3d:f9:a4:3a:a1:45:47:42:7b:7c:86:20:
         b3:94:db:8c:9f:1a:cc:c8:1d:de:e0:7f:bb:d0:d2:d9:ae:fe:
         c7:51:64:1d:90:00:a4:b7:fe:aa:63:0e:d2:99:cb:a2:41:b1:
         39:89:42:bb:58:9d:93:c4:c3:8d:3f:ee:38:84:4d:a4:8c:d2:
         bd:4a:58:e4:24:2d:0b:85:31:61:6b:0f:10:f6:0a:5c:24:2a:
         1a:8b:ad:c7:f9:5d:5f:78:30:c7:bc:1b:09:ba:e0:9c:84:e7:
         76:2d:9e:4e:3b:e1:4e:90:ae:a5:19:7e:75:49:64:63:c9:32:
         78:56:ca:db:b1:b8:36:49:ca:4e:76:ab:46:41:35:f4:0b:66:
         c2:6a:b1:84:94:32:2f:60:cb:02:8d:17:eb:b0:ec:c3:ec:dc:
         0f:46:d7:ca:02:9f:f2:29:42:d3:2d:9b:19:33:f0:80:e8:77:
         ab:77:16:b3:32:1c:9f:a0:ff:98:cb:d3:90:c2:b2:7e:ef:f4:
         a9:85:41:6e:9d:7b:b8:8b:43:2e:cd:3a:22:f0:2e:4b:63:de:
         9d:c3:bb:18:ec:f0:b4:79:32:45:6c:4c:4f:01:0c:48:63:5c:
         cc:f3:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:28:18 2026 by rpki-client