Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/012f7b1f-4dda-3629-9c3d-e6d0828a40ff.roa
File:                     012f7b1f-4dda-3629-9c3d-e6d0828a40ff.roa (raw, json)
Hash identifier:          jrX7cyqIiOTd2inOegMxUKCyEQ05fz/qWpAVWn9ZIIQ=
Subject key identifier:   ED:29:20:17:E2:B7:60:48:A6:D1:8C:44:CB:05:B8:E5:E1:BB:95:F0
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584DE150832AE40411021A259000
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/012f7b1f-4dda-3629-9c3d-e6d0828a40ff.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        104.218.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:83:2a:e4:04:11:02:1a:25:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=a21dcf7f-1800-4fcd-8ee8-6b2b17785ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:10:8b:88:9e:c1:cf:47:9d:5f:24:eb:9b:44:
                    c9:89:85:d8:c9:6f:20:57:26:d5:92:29:8a:54:3a:
                    ad:c3:31:34:20:77:44:62:68:ee:f3:e5:ea:c4:a2:
                    b6:5b:4a:34:25:2e:df:44:3d:c7:b6:1d:c3:04:05:
                    09:b8:f2:92:fb:d9:9e:06:04:68:f8:d6:bc:ba:9b:
                    57:42:ec:ff:30:a9:7a:3c:c8:ae:e2:a1:5d:b2:42:
                    9e:17:1d:40:16:53:ee:6e:9a:ba:8a:17:18:d1:64:
                    40:66:ee:73:1c:4f:ea:f8:27:7a:f6:37:34:42:c5:
                    20:72:2f:67:cf:bb:27:e1:a4:ff:f0:da:bd:27:1f:
                    28:29:0b:3f:40:79:1a:8a:a5:f9:f5:4e:62:7e:26:
                    8a:72:66:72:28:e3:51:0d:d7:50:76:01:72:ae:23:
                    b1:11:2b:c5:35:48:7d:f7:88:90:ca:8d:ba:e6:95:
                    23:3b:62:00:1c:6b:2d:4f:39:01:c2:2b:f1:e6:a6:
                    62:d5:5d:dd:68:58:54:25:f8:c3:1f:69:fa:cf:1b:
                    ab:7c:9f:46:61:f4:48:3f:78:79:59:f4:ab:33:72:
                    18:25:98:65:bd:45:7c:a3:a7:0d:ca:5f:d6:87:62:
                    a2:d8:fe:ff:09:50:63:a0:b3:2b:c0:38:24:cc:33:
                    f0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:29:20:17:E2:B7:60:48:A6:D1:8C:44:CB:05:B8:E5:E1:BB:95:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/012f7b1f-4dda-3629-9c3d-e6d0828a40ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:86:04:b4:86:bc:05:61:4e:e8:97:40:74:d0:e9:d1:f0:05:
         29:5f:93:35:2c:98:70:02:bb:bb:44:36:fd:6e:7f:84:8e:95:
         20:e4:72:4d:be:55:60:f8:49:90:4b:42:63:b4:f7:67:54:20:
         9b:8e:24:03:a4:e5:8f:0c:28:74:90:58:0f:bd:a5:ea:ef:01:
         77:0e:60:da:5f:46:3f:04:8a:44:4e:21:33:0c:ef:6d:62:d6:
         80:00:46:a3:8e:5c:71:2c:55:92:7d:98:7b:7c:37:49:69:ff:
         04:8e:96:d0:73:fc:bb:08:91:ee:74:4d:98:76:0e:ca:48:ea:
         ad:e3:ee:df:f0:eb:b6:95:bb:f5:de:a9:b8:a7:14:34:46:33:
         b9:5a:0d:df:66:c9:5b:86:a9:a0:b6:2f:0a:b8:05:e7:91:01:
         51:5f:a6:e8:03:05:d9:b3:1d:27:e8:e4:9d:1a:0a:87:4c:72:
         00:df:79:08:5e:cc:84:b6:d3:7c:4a:41:cf:7d:cc:f0:a7:d0:
         02:7e:9c:ec:da:fa:01:52:22:95:2c:2b:e5:f3:58:86:d9:d1:
         f5:d9:a3:2c:3a:63:8f:32:ee:9f:f4:af:6f:54:6e:3f:12:09:
         2a:9a:c4:49:17:14:14:5d:3c:8f:1a:60:e4:f7:26:7e:f8:ab:
         a9:fa:90:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 14:19:57 2026 by rpki-client