Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/041a8ec5-3743-33d8-8eee-3a8c66f0ae5e.roa
File:                     041a8ec5-3743-33d8-8eee-3a8c66f0ae5e.roa (raw, json)
Hash identifier:          6BLAjLHm4okxiXnXjKUeY7OkANCMln6fuxwyqRTPOCQ=
Subject key identifier:   1A:0B:4B:A7:2A:F2:E7:91:A6:33:52:D5:E1:36:79:B8:42:66:DD:0E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EA794E22B2E703DD45BD36C80
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/041a8ec5-3743-33d8-8eee-3a8c66f0ae5e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     29802
IP address blocks:        104.164.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:e2:2b:2e:70:3d:d4:5b:d3:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cb78e0a8-768b-4d25-b702-0b54230622fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:08:11:8c:aa:e4:73:b6:e2:1e:cb:47:21:
                    01:99:05:6e:a0:27:4d:f1:69:7d:40:73:f5:5c:ea:
                    00:31:bf:51:7c:1f:f3:f2:a1:8c:91:52:a0:27:ad:
                    6a:15:92:8f:81:91:d6:9c:f0:83:ec:b3:91:9a:a3:
                    50:ab:88:2f:40:4e:dc:c8:8d:8e:d2:4e:03:fc:29:
                    ec:09:25:03:8e:53:65:44:24:2d:ea:10:43:12:c1:
                    85:13:46:eb:1d:d3:c8:7d:50:a4:7b:45:fa:03:56:
                    e8:b0:22:22:0c:b6:94:eb:34:3c:e1:1a:9d:5b:af:
                    86:19:80:b4:d6:2a:df:42:f7:81:29:ca:65:12:e3:
                    1d:a1:30:e4:0f:6d:f5:82:41:03:0a:73:ed:62:6f:
                    c6:00:99:84:8c:b6:75:7f:1e:37:98:f5:fe:9a:a4:
                    df:9e:5f:0d:16:70:2d:b5:83:1a:0d:c3:6e:f7:df:
                    14:02:77:c1:a8:c3:9c:89:22:8a:59:95:1c:97:06:
                    5f:e8:61:20:bb:ca:81:19:b3:85:90:21:6e:a9:2e:
                    12:cc:19:02:49:69:74:9f:eb:9b:36:3e:e8:bb:80:
                    f3:64:2b:42:f2:33:c6:a1:e0:90:33:65:3c:5b:e7:
                    12:45:8f:22:cf:8c:96:eb:c2:d5:9d:7c:0f:4b:8f:
                    cd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0B:4B:A7:2A:F2:E7:91:A6:33:52:D5:E1:36:79:B8:42:66:DD:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/041a8ec5-3743-33d8-8eee-3a8c66f0ae5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:d1:98:42:db:23:ae:6c:18:df:61:9f:b6:21:fe:a3:a9:b2:
         0f:bf:7b:e1:61:a1:0f:1e:23:29:54:d2:7e:ca:74:76:a2:a6:
         87:25:d1:d2:ac:a2:f4:6a:ff:76:76:f4:91:61:0f:d9:2b:f8:
         22:c3:c7:1f:a6:99:f9:8c:94:77:80:e0:c1:48:3d:31:76:5c:
         55:c2:6b:2f:7e:73:2f:5c:a0:af:68:f6:2e:7e:1d:17:eb:fb:
         81:dd:1f:fc:68:7d:84:05:e1:ad:a9:34:68:6c:3a:50:74:0a:
         8c:c2:8d:9d:3f:cf:14:f6:0a:6f:75:b2:e6:05:46:ac:b1:8e:
         44:22:87:8b:0b:71:b8:b0:5a:ee:06:26:6e:b5:d2:61:cb:f8:
         1b:7f:6f:41:c9:e0:65:1b:44:98:c1:45:d3:f2:72:82:4f:be:
         e6:9f:ab:66:a3:fa:50:69:5d:61:54:40:c3:20:76:2a:0b:9f:
         eb:cb:f1:30:8e:3d:fb:55:49:d6:64:50:16:26:e0:39:1e:cf:
         f8:20:8f:34:fa:0d:7a:bb:48:83:ae:17:d1:4c:aa:3e:b5:ce:
         75:19:4e:8c:99:eb:ce:ab:8b:77:27:23:38:1e:0b:72:65:74:
         c0:f6:07:1d:20:15:53:a4:a2:45:7b:97:1f:4a:85:df:a5:4b:
         45:7f:68:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:42:35 2026 by rpki-client