Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cc332367-edc8-3a0c-a539-71196ae96da7.roa
File:                     cc332367-edc8-3a0c-a539-71196ae96da7.roa (raw, json)
Hash identifier:          QgJhzIqbYLOdqgGv0LlMhjFA/9MWaFLc3U0gA/G8B+8=
Subject key identifier:   97:ED:5F:FD:E7:CA:A1:99:DB:B0:46:D0:EA:EA:55:9C:83:50:B4:DA
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CEE8CDBEFA75A6412F5343280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cc332367-edc8-3a0c-a539-71196ae96da7.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     214238
IP address blocks:        104.164.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:db:ef:a7:5a:64:12:f5:34:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=274b1eaa-c054-40b2-90f7-79d466ee6c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:57:17:4a:f2:ac:e0:92:78:c3:45:0d:ab:91:
                    6f:28:7e:de:36:06:8d:fc:25:93:31:42:f1:c7:d8:
                    c7:e1:9d:6b:ff:a7:d5:4d:86:9c:dd:1e:f5:02:02:
                    a4:8f:1d:81:34:08:86:8b:3e:67:8b:d5:96:77:f7:
                    b7:1a:65:a6:26:a7:48:b0:16:f0:98:0b:7d:c9:5b:
                    65:36:0f:17:83:c6:14:7f:74:17:d6:33:e3:1e:bb:
                    9e:ae:c0:8d:ca:15:48:2b:80:1f:f9:93:c2:97:64:
                    85:60:4b:85:a6:20:9a:4e:b7:8c:6c:96:61:25:14:
                    1c:b4:e6:cf:97:c6:be:d2:ca:03:12:b2:1a:f6:03:
                    b8:79:06:98:ee:d2:b5:36:75:31:88:bb:f9:0d:8f:
                    8a:d4:d3:aa:9a:e4:82:5e:e1:8e:d9:25:ae:71:a8:
                    29:2d:44:0a:6e:4a:5b:0f:f8:20:5f:d7:7b:1a:dc:
                    fc:06:90:82:b6:0e:b9:c3:2c:bc:ff:d5:e2:15:f4:
                    4f:5a:dc:00:b0:5b:ba:64:c6:00:d3:5f:a1:38:a8:
                    61:c7:b3:3b:33:b1:4b:80:f0:90:65:f0:c2:a9:0c:
                    d7:08:43:0c:eb:36:a8:95:93:60:a0:24:11:95:94:
                    6b:2c:bf:0a:50:4c:51:f5:65:96:dd:83:98:ee:59:
                    7c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:ED:5F:FD:E7:CA:A1:99:DB:B0:46:D0:EA:EA:55:9C:83:50:B4:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cc332367-edc8-3a0c-a539-71196ae96da7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ff:fc:af:13:cf:69:b1:3c:eb:a7:23:b5:5b:31:e8:48:87:
         02:b8:c1:35:76:ce:90:ec:2b:a3:c3:de:99:e4:71:48:a0:b4:
         6d:f2:28:d0:04:23:93:fd:64:58:7c:b8:93:3a:b4:76:42:f1:
         f3:dd:2c:8a:be:9e:f8:d8:c2:6c:9d:35:13:65:9b:ff:0c:32:
         c1:91:42:65:fb:c6:36:3c:a3:ad:83:b7:6f:ed:d8:24:7f:c6:
         0f:6e:0d:c8:5b:fd:d2:f5:be:83:96:97:db:26:cb:df:d1:43:
         43:4f:19:6b:07:89:63:24:34:12:b3:a6:31:a4:10:68:a1:06:
         33:ca:98:6e:0f:29:8b:5b:b3:ef:d6:b3:83:44:aa:a2:f3:a2:
         9c:63:b6:97:db:72:83:3e:cb:47:52:4a:f9:a0:34:ad:0a:d5:
         90:bc:45:54:16:36:c7:51:39:18:b6:a5:e2:cd:50:9a:4f:b7:
         7d:ad:cc:8a:51:d8:b9:96:8e:28:c3:a4:96:fc:27:51:2d:26:
         39:78:04:8f:85:cc:09:83:2e:84:17:49:2d:e3:7d:b3:b3:ae:
         2b:23:5c:aa:14:ed:ff:5b:f8:5c:36:f6:4f:9d:a1:b2:2c:83:
         6e:71:b8:e2:83:20:86:78:84:0d:ca:92:56:64:62:a3:80:3f:
         cb:b9:8e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:18 2026 by rpki-client