Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a6cb36fc-8f89-3602-b602-26c862ea85c5.roa
File:                     a6cb36fc-8f89-3602-b602-26c862ea85c5.roa (raw, json)
Hash identifier:          GJPAsKKSuntID0JGODvC2p5sN7dc1rMqTkglQgc2KaM=
Subject key identifier:   43:31:4C:DB:FE:3A:87:A4:27:0D:2A:19:6B:78:3C:DA:9E:53:9C:16
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CEA5D08E93C5BBAB839844120
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a6cb36fc-8f89-3602-b602-26c862ea85c5.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     8881
IP address blocks:        104.253.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5d:08:e9:3c:5b:ba:b8:39:84:41:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=c7616a9a-1979-4cc4-85eb-bbec1afeaa16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:63:9a:1d:08:99:55:43:9e:91:54:f1:55:f0:
                    14:8c:94:0c:e8:98:40:60:a2:aa:d7:42:d2:89:a6:
                    c6:ce:ed:e3:ff:b5:47:9f:6d:a6:22:86:f8:9c:0e:
                    61:98:c8:be:22:58:8f:51:c0:b0:af:54:2c:c0:3f:
                    90:2e:e3:18:5b:76:72:ca:ee:12:89:f3:ea:0f:98:
                    79:69:02:88:f5:14:4b:02:10:a9:6d:71:b5:0c:08:
                    83:0d:71:87:ff:08:fb:bf:53:92:89:1a:b3:8c:a2:
                    58:db:38:b1:81:f9:e1:7f:d8:f2:07:1a:ab:a4:da:
                    18:ec:e3:71:e8:e8:9f:56:bd:f9:7a:e5:43:72:c7:
                    39:11:9c:a2:51:16:fc:28:a5:c7:23:db:ff:bd:41:
                    05:83:79:f9:8a:8e:63:4f:38:2d:bd:28:f3:10:9f:
                    cb:2c:79:c1:00:cf:26:77:54:7f:3f:42:cf:3b:73:
                    56:00:26:e9:63:f6:b9:fb:cb:b8:6d:10:8a:a1:23:
                    1d:e5:f7:3e:4e:ff:95:aa:8d:ba:07:86:ef:f3:b4:
                    0d:34:ca:70:6d:4f:09:6d:63:10:53:24:44:11:c8:
                    df:dc:a0:fe:09:69:6a:ed:d4:e3:80:dc:a7:7c:cb:
                    d8:e8:5e:22:24:ce:03:48:4b:3a:1e:3a:cd:b4:3f:
                    3d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:31:4C:DB:FE:3A:87:A4:27:0D:2A:19:6B:78:3C:DA:9E:53:9C:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a6cb36fc-8f89-3602-b602-26c862ea85c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:d0:4e:bf:9b:0d:6a:73:92:a3:d2:a6:93:f3:0d:9d:2c:c7:
         88:57:fc:c6:64:7b:82:a2:a0:d1:2d:ad:c2:4f:5d:a8:21:94:
         0e:9a:c7:2a:95:55:6a:4d:39:65:e5:1c:36:c8:a3:e5:73:21:
         b9:02:00:6a:3e:26:50:69:08:30:71:66:65:e0:7b:ea:af:49:
         65:6c:99:b2:a9:c5:d0:07:44:b6:33:25:8b:0b:06:9e:63:12:
         31:a0:98:d6:8f:70:e0:ca:e8:5d:c6:9b:8c:3e:57:b1:1b:6a:
         f9:c6:98:4f:95:20:ee:48:fa:fa:8c:86:f2:bd:06:5e:c6:f1:
         a8:f4:8a:8b:d2:c7:29:6a:31:17:b6:38:96:ef:0e:5b:d7:95:
         51:82:a3:40:99:64:b7:50:6d:50:bc:95:42:3f:25:65:7d:52:
         65:95:36:20:8d:da:1c:03:9d:65:aa:ff:72:7c:4e:24:26:47:
         61:e5:df:81:07:b8:3c:12:12:42:e9:f6:5c:92:c1:24:ee:1c:
         00:c7:9c:9b:e1:c1:02:e3:34:6c:b7:6e:0f:43:37:4b:f1:5a:
         16:dd:66:17:d8:c2:1a:ee:f5:52:1b:2b:46:25:00:65:89:a3:
         b1:85:48:13:42:da:98:9b:cc:e9:e9:41:54:ef:ee:8a:fc:5d:
         c4:b1:80:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXQjpPFu6uDmEQSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk
Yzc2MTZhOWEtMTk3OS00Y2M0LTg1ZWItYmJlYzFhZmVhYTE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmOaHQiZVUOekVTxVfAUjJQM6JhAYKKq10LS
iabGzu3j/7VHn22mIob4nA5hmMi+IliPUcCwr1QswD+QLuMYW3Zyyu4SifPqD5h5
aQKI9RRLAhCpbXG1DAiDDXGH/wj7v1OSiRqzjKJY2zixgfnhf9jyBxqrpNoY7ONx
6OifVr35euVDcsc5EZyiURb8KKXHI9v/vUEFg3n5io5jTzgtvSjzEJ/LLHnBAM8m
d1R/P0LPO3NWACbpY/a5+8u4bRCKoSMd5fc+Tv+Vqo26B4bv87QNNMpwbU8JbWMQ
UyREEcjf3KD+CWlq7dTjgNynfMvY6F4iJM4DSEs6HjrNtD89NQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEMxTNv+OoekJw0qGWt4PNqeU5wWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvYTZjYjM2ZmMtOGY4OS0z
NjAyLWI2MDItMjZjODYyZWE4NWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP1tMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH/QTr+bDWpzkqPSppPzDZ0sx4hX/MZke4KioNEtrcJPXaghlA6axyqV
VWpNOWXlHDbIo+VzIbkCAGo+JlBpCDBxZmXge+qvSWVsmbKpxdAHRLYzJYsLBp5j
EjGgmNaPcODK6F3Gm4w+V7EbavnGmE+VIO5I+vqMhvK9Bl7G8aj0iovSxylqMRe2
OJbvDlvXlVGCo0CZZLdQbVC8lUI/JWV9UmWVNiCN2hwDnWWq/3J8TiQmR2Hl34EH
uDwSEkLp9lySwSTuHADHnJvhwQLjNGy3bg9DN0vxWhbdZhfYwhru9VIbK0YlAGWJ
o7GFSBNC2pibzOnpQVTv7or8XcSxgJM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:26 2026 by rpki-client