Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b43ff99-e436-3f43-a4e6-410e610388d4.roa
File:                     8b43ff99-e436-3f43-a4e6-410e610388d4.roa (raw, json)
Hash identifier:          e+ZoK/fV1sVN+QSBjnCR5lwlVJJAGWI2DmF24nEIUlM=
Subject key identifier:   E6:47:F4:18:8A:3D:84:16:5C:E5:A8:81:00:EB:1B:1C:FC:88:74:B1
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CEA5CD3EBB1B5760423B7D160
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b43ff99-e436-3f43-a4e6-410e610388d4.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     8881
IP address blocks:        104.253.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:d3:eb:b1:b5:76:04:23:b7:d1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=ef717699-f67b-4629-a14f-2795504d1992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:d8:56:99:b0:02:90:ff:68:89:c7:b8:db:
                    ea:33:e8:a7:aa:93:44:fb:18:d1:2f:45:80:1c:97:
                    ae:58:15:fa:a3:34:25:38:7d:33:82:9f:4d:18:25:
                    f0:e6:55:e5:aa:d8:b4:6d:11:8e:5d:15:69:82:31:
                    b4:7f:2c:a9:89:ce:a9:29:dc:51:e9:6a:f9:f1:17:
                    22:77:ff:62:85:33:1e:69:4f:d3:3f:8a:aa:ec:e7:
                    43:29:46:dd:2d:4e:6c:b2:90:49:9e:73:3f:bc:30:
                    a8:52:b8:00:0e:92:ae:e1:f5:b8:30:dc:da:c4:d8:
                    15:5e:38:23:d3:b8:2a:77:c5:7f:ac:bb:9b:bb:9a:
                    d8:1a:98:4c:6e:e7:0f:17:ac:5b:3b:25:9c:b4:12:
                    d9:91:45:5c:bf:2e:f3:a2:e7:84:34:04:b0:f8:26:
                    00:c0:3e:30:45:08:db:7c:0c:16:16:e8:b0:22:1e:
                    41:75:79:93:2b:60:f0:14:14:bb:86:0b:8f:75:94:
                    d2:25:d1:8e:cc:40:12:a3:ce:cb:54:cd:53:b0:69:
                    19:d7:6e:ad:76:80:8c:ec:cc:b5:4b:de:1b:c0:f2:
                    ad:5e:b3:05:b2:db:c9:7b:c2:ec:7b:a7:9a:a1:a4:
                    2a:e9:04:9a:b3:cc:5e:68:82:0d:26:83:3b:bf:f3:
                    40:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:47:F4:18:8A:3D:84:16:5C:E5:A8:81:00:EB:1B:1C:FC:88:74:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/8b43ff99-e436-3f43-a4e6-410e610388d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:90:76:c6:28:b9:18:9b:1e:d1:51:fd:bb:44:bd:da:b5:bf:
         d6:67:4b:b7:ba:bd:9c:73:7d:e0:04:1b:0a:d7:c0:de:9e:f4:
         ca:be:50:d5:9f:8e:fe:10:f3:01:13:53:14:cb:1f:1c:52:f0:
         ba:a2:eb:08:c1:fe:9e:f0:20:ab:ff:0a:75:23:a7:76:9a:85:
         6f:69:9c:27:f9:c7:f5:f3:4c:5b:91:4d:30:19:29:f2:d1:8c:
         d5:49:ae:e8:d8:c2:1a:91:63:37:6c:5a:8e:b3:7d:74:cd:79:
         0d:cc:66:4c:09:b1:12:96:2a:b6:37:f1:79:60:01:c3:ce:ed:
         3e:24:ac:cd:89:cd:85:27:7f:de:ea:73:f6:28:10:57:93:ad:
         0c:c7:58:9a:ba:f6:62:b4:a0:70:80:a9:2c:43:73:bd:26:fb:
         57:ac:71:a2:98:70:dc:9c:c4:58:10:25:0e:7c:78:31:44:b7:
         7f:ec:85:99:ef:9d:48:72:cf:d8:9b:47:85:f5:69:7f:5a:1b:
         4e:e8:75:f4:69:a8:49:32:f7:19:45:89:a3:2f:8d:4e:3a:5d:
         07:8f:91:a4:70:cf:5e:26:83:7d:eb:5e:5a:78:49:88:af:05:
         07:b4:ad:39:40:9c:bc:c2:e3:e4:c8:c3:1c:6b:50:88:28:08:
         59:62:0b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:30:09 2026 by rpki-client