Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e291df2f-df49-3181-9b60-4ac8c5075e81.roa
File:                     e291df2f-df49-3181-9b60-4ac8c5075e81.roa (raw, json)
Hash identifier:          TSJDoyRWr2piK4/S4e7Gbazo/ePlYf31AJXu0EsINDc=
Subject key identifier:   BA:56:D4:3B:9A:8B:D8:06:0F:B7:0D:5E:6B:D2:C6:77:FF:CC:CC:E3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CFF4CD85888FFEDF01A036F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e291df2f-df49-3181-9b60-4ac8c5075e81.roa
Signing time:             Fri 27 Feb 2026 02:00:31 +0000
ROA not before:           Fri 27 Feb 2026 02:00:31 +0000
ROA not after:            Thu 28 May 2026 01:00:31 +0000
asID:                     834
IP address blocks:        104.164.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ff:4c:d8:58:88:ff:ed:f0:1a:03:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 27 02:00:31 2026 GMT
            Not After : May 28 01:00:31 2026 GMT
        Subject: CN=d405b921-c770-4ea4-9720-a2001b847233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:08:8d:84:47:24:21:ee:21:23:2c:fb:29:58:
                    de:07:1a:99:d1:df:90:ba:f4:24:e1:58:73:8e:d6:
                    d3:d6:db:7c:dd:4a:5c:34:ea:3a:33:2d:d3:dd:30:
                    24:b5:36:38:62:ed:03:02:7e:6d:6f:34:db:02:61:
                    72:6c:88:15:41:ee:60:25:f5:e3:1b:b7:ec:f4:26:
                    be:5f:25:ee:c9:a1:fa:17:fd:bc:41:7f:a4:1b:26:
                    0c:3a:85:bc:37:64:75:22:22:37:6e:dd:1f:54:06:
                    1d:3d:17:37:63:b6:9a:2c:06:3c:70:75:dd:4b:54:
                    78:8e:82:38:6e:04:92:aa:7f:c6:66:32:a4:1e:9d:
                    61:08:bb:83:b8:03:67:5c:5d:db:08:cc:f5:1a:58:
                    10:fa:40:53:ad:63:aa:5e:b9:62:5f:ce:8c:71:55:
                    64:b5:a4:fa:80:2c:e9:34:9c:00:08:c6:d3:2a:61:
                    32:c3:4c:79:06:c5:b0:95:2b:5c:4b:6f:91:5e:c6:
                    a2:7c:11:ef:3d:86:7a:74:09:a4:f4:ef:2b:c1:12:
                    e1:77:67:e1:0b:a6:79:c3:e4:e2:d6:31:f6:a0:04:
                    f3:75:c6:d4:fd:3a:0e:55:79:d5:58:14:48:4f:e1:
                    44:03:df:f8:01:69:ab:eb:97:8e:4e:2f:bd:7e:39:
                    d3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:56:D4:3B:9A:8B:D8:06:0F:B7:0D:5E:6B:D2:C6:77:FF:CC:CC:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/e291df2f-df49-3181-9b60-4ac8c5075e81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:0e:d0:48:b5:b2:75:c1:ff:78:e3:b6:ea:dc:08:f9:ee:56:
         b7:56:bc:73:39:46:22:f1:b9:ec:79:4d:2c:65:a1:1a:c5:24:
         2b:33:95:9e:42:e5:ce:a1:0e:04:bb:4b:45:77:aa:82:7f:ee:
         93:ad:0d:db:26:5e:0a:0c:2e:81:7c:31:78:83:b2:8c:51:c5:
         8f:88:60:4f:03:39:29:39:ff:1a:ff:9e:8f:a3:bf:32:55:7f:
         d1:b4:0e:a7:17:63:aa:2f:fe:b9:fd:7f:f0:d0:46:db:66:41:
         cc:10:68:d9:e2:e4:ed:97:b0:84:20:84:fc:7a:fe:79:e6:c8:
         38:b2:52:0c:f2:ca:4c:d3:2f:93:88:e6:65:38:07:42:d0:c3:
         25:07:f3:30:5a:00:0f:e4:61:13:6f:05:49:02:20:17:61:66:
         d9:10:90:61:b5:02:57:2a:d7:9f:ee:90:d9:34:a2:c3:9a:14:
         fe:35:8f:c1:58:7a:9e:8e:24:69:a8:a3:30:f8:a6:b0:d8:6f:
         44:fd:b1:8d:98:f9:c0:8a:2c:39:34:42:8c:d8:be:22:55:75:
         0f:aa:d8:9d:cb:65:16:f3:ef:41:a7:2f:c8:de:77:a0:a8:35:
         c7:be:59:8c:36:67:3f:e5:e4:56:d8:58:2e:64:b0:e5:1f:7b:
         f9:78:e5:ce
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz/TNhYiP/t8BoDbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDIyNzAyMDAzMVoXDTI2MDUyODAxMDAzMVowLzEtMCsGA1UEAxMk
ZDQwNWI5MjEtYzc3MC00ZWE0LTk3MjAtYTIwMDFiODQ3MjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwiNhEckIe4hIyz7KVjeBxqZ0d+QuvQk4Vhz
jtbT1tt83UpcNOo6My3T3TAktTY4Yu0DAn5tbzTbAmFybIgVQe5gJfXjG7fs9Ca+
XyXuyaH6F/28QX+kGyYMOoW8N2R1IiI3bt0fVAYdPRc3Y7aaLAY8cHXdS1R4joI4
bgSSqn/GZjKkHp1hCLuDuANnXF3bCMz1GlgQ+kBTrWOqXrliX86McVVktaT6gCzp
NJwACMbTKmEyw0x5BsWwlStcS2+RXsaifBHvPYZ6dAmk9O8rwRLhd2fhC6Z5w+Ti
1jH2oATzdcbU/ToOVXnVWBRIT+FEA9/4AWmr65eOTi+9fjnT/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLpW1Duai9gGD7cNXmvSxnf/zMzjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZTI5MWRmMmYtZGY0OS0z
MTgxLTliNjAtNGFjOGM1MDc1ZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKT6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcO0Ei1snXB/3jjturcCPnuVrdWvHM5RiLxuex5TSxloRrFJCszlZ5C
5c6hDgS7S0V3qoJ/7pOtDdsmXgoMLoF8MXiDsoxRxY+IYE8DOSk5/xr/no+jvzJV
f9G0DqcXY6ov/rn9f/DQRttmQcwQaNni5O2XsIQghPx6/nnmyDiyUgzyykzTL5OI
5mU4B0LQwyUH8zBaAA/kYRNvBUkCIBdhZtkQkGG1Alcq15/ukNk0osOaFP41j8FY
ep6OJGmoozD4prDYb0T9sY2Y+cCKLDk0QozYviJVdQ+q2J3LZRbz70GnL8jed6Co
Nce+WYw2Zz/l5FbYWC5ksOUfe/l45c4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:28:47 2026 by rpki-client