Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea72cf5a-1a83-33a2-90bf-3bd1b92784a4.roa
File:                     ea72cf5a-1a83-33a2-90bf-3bd1b92784a4.roa (raw, json)
Hash identifier:          mSGgLqawdBwtWRx1zJcwFBaHvLJEkKMNVKyTynwBoKw=
Subject key identifier:   31:2C:7D:C8:78:5C:86:97:6E:52:7C:62:C6:3E:47:91:A8:CA:37:F3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584C6E21A803DFA540A1BEEA5300
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea72cf5a-1a83-33a2-90bf-3bd1b92784a4.roa
Signing time:             Tue 06 Jan 2026 02:00:31 +0000
ROA not before:           Tue 06 Jan 2026 02:00:31 +0000
ROA not after:            Mon 06 Apr 2026 01:00:31 +0000
asID:                     212238
IP address blocks:        104.253.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6e:21:a8:03:df:a5:40:a1:be:ea:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan  6 02:00:31 2026 GMT
            Not After : Apr  6 01:00:31 2026 GMT
        Subject: CN=6720f31e-9610-47d2-9ea3-f81e9c6656a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0b:c1:91:50:e3:58:45:4d:39:e7:88:2d:7a:
                    5c:1f:e6:a8:b7:55:a0:c7:63:c5:88:b1:2f:0b:10:
                    32:43:f5:53:a8:89:99:a2:df:fc:31:05:bd:f3:4f:
                    27:45:f2:bd:a3:cb:f9:78:95:a3:c0:c5:f9:cb:22:
                    64:f3:be:80:dd:b9:e5:59:93:d6:6c:d7:11:1a:16:
                    7c:43:80:10:d8:cf:bf:a9:99:41:b7:0d:e3:60:6a:
                    85:60:bb:4f:34:96:e7:51:35:1b:62:ff:38:26:a5:
                    46:91:47:43:d9:a9:eb:8d:4d:c0:73:eb:51:65:33:
                    64:d3:ee:cd:d6:d2:0e:3d:ad:55:05:00:48:e4:8f:
                    fe:4d:b0:f1:4b:43:e8:82:5c:15:bf:97:fb:91:81:
                    db:21:1b:45:2a:9c:67:e6:bc:d8:38:b4:86:be:a7:
                    76:55:6c:62:cc:57:4d:be:08:d6:aa:3e:93:5b:ac:
                    e9:a1:7f:00:d7:e8:75:17:8a:c1:fc:7c:d1:e4:a2:
                    0c:44:e9:e4:d5:74:3f:9e:f6:c2:a9:29:fb:83:18:
                    e6:bd:64:dd:d7:54:bb:73:e3:fa:0f:7a:b4:c9:4f:
                    59:c4:8a:8f:b2:c9:3c:75:82:33:c2:68:30:d5:d9:
                    62:03:9f:24:ac:5e:93:00:63:65:d0:df:48:33:5a:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2C:7D:C8:78:5C:86:97:6E:52:7C:62:C6:3E:47:91:A8:CA:37:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ea72cf5a-1a83-33a2-90bf-3bd1b92784a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:46:11:0d:0e:61:3e:51:7d:17:1c:77:48:09:33:00:fa:16:
         1e:15:5e:72:26:a4:4c:77:c8:b6:af:41:f7:c4:55:7c:43:ea:
         cd:18:6d:41:68:e4:02:72:76:67:24:77:4f:5c:38:82:01:42:
         57:77:1c:e3:3f:51:61:db:c1:23:40:0a:41:1c:85:24:7d:40:
         dd:6f:e2:88:5d:19:38:26:45:b3:96:9a:8f:85:23:e8:63:0b:
         3a:49:ea:05:e4:45:7f:d1:03:d6:d3:16:e0:7d:88:bb:61:86:
         c5:83:27:28:a6:42:c0:47:b3:ca:a0:98:15:86:2f:7c:ce:cd:
         ec:f7:93:45:e3:e5:ff:be:c4:6e:6f:43:a6:73:af:e4:c9:81:
         59:d2:56:52:78:ae:0e:c9:16:a2:20:fe:26:18:85:ad:f1:56:
         df:a9:6a:5a:69:42:35:3b:a3:e2:09:4d:8e:55:0f:ac:ec:33:
         86:93:ab:2e:e2:02:9c:f8:b9:48:ba:b4:45:c6:77:0c:87:d3:
         bb:0c:b8:de:98:64:d6:24:02:03:b7:77:53:0b:71:33:40:64:
         d9:f1:80:4f:9b:f1:08:6f:a3:bd:a7:90:8b:7b:de:a0:ab:f7:
         b1:31:1f:88:bf:ba:18:5d:67:65:a0:80:24:b8:51:a1:ac:68:
         d2:96:94:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:21:46 2026 by rpki-client