Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/051b7c7f-da1b-33b1-9854-40f8280d05be.roa
File:                     051b7c7f-da1b-33b1-9854-40f8280d05be.roa (raw, json)
Hash identifier:          MMWLacYZjY8lY1OmITefRAOyazPnYA/K8UHgZvIrPBg=
Subject key identifier:   EE:8F:26:32:44:59:AB:B6:03:3D:EE:81:4A:34:01:7E:30:56:56:0E
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D1D0777A6687576BE64BE9380
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/051b7c7f-da1b-33b1-9854-40f8280d05be.roa
Signing time:             Mon 09 Mar 2026 17:35:04 +0000
ROA not before:           Mon 09 Mar 2026 17:35:04 +0000
ROA not after:            Sun 07 Jun 2026 17:35:04 +0000
asID:                     398781
IP address blocks:        104.253.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:07:77:a6:68:75:76:be:64:be:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  9 17:35:04 2026 GMT
            Not After : Jun  7 17:35:04 2026 GMT
        Subject: CN=0a8e3268-5423-4148-977b-d9b59fd37948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:69:57:73:7d:bd:3d:38:c9:e5:09:d8:a7:18:
                    2a:c5:da:8d:ee:a1:3f:e3:51:97:18:a2:96:59:42:
                    60:c1:a3:76:dd:60:cd:36:85:2f:45:b9:b0:d7:91:
                    a8:ac:71:2d:4e:8b:50:62:ca:4d:f9:07:bb:ce:ef:
                    85:80:5d:79:8c:46:f7:82:e8:23:db:fa:c3:7d:de:
                    0c:e3:ab:d7:e2:f1:78:5f:b3:cc:8e:be:ca:54:b8:
                    91:59:83:83:3b:e3:10:ea:43:d3:f7:a7:6c:c4:70:
                    e2:f2:46:a7:61:2b:42:71:a7:59:bc:05:da:0b:72:
                    ac:67:79:21:1c:7a:be:48:ee:30:aa:1f:81:e4:1e:
                    5d:0d:e8:22:66:3a:d6:50:cb:4a:5d:f2:c5:bf:e2:
                    74:6b:47:e1:1c:96:0c:28:8a:16:f6:ac:9c:14:8c:
                    25:7d:43:02:41:df:49:31:cf:10:5d:3b:3d:e1:cb:
                    16:b9:2b:01:55:08:5c:8e:81:66:05:be:f4:38:b2:
                    b8:8d:75:f8:e2:b2:cf:56:59:23:0b:3a:fe:4f:7e:
                    db:4c:2a:7c:c3:aa:88:ea:65:95:17:5c:8b:91:4a:
                    ca:6d:8e:01:c7:43:f5:4b:1c:a5:32:bf:44:e4:ad:
                    f3:84:ab:fe:d8:88:6c:46:d2:83:4c:6e:43:2b:db:
                    bd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8F:26:32:44:59:AB:B6:03:3D:EE:81:4A:34:01:7E:30:56:56:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/051b7c7f-da1b-33b1-9854-40f8280d05be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:12:57:31:e1:d4:51:c2:69:4c:07:ca:59:a5:9a:2f:af:cd:
         63:98:28:3f:11:ac:d4:e4:80:4e:41:71:ef:20:44:e4:46:63:
         66:bb:dc:ec:0f:30:fd:19:1b:eb:fe:3d:68:85:48:28:91:d8:
         32:0f:f5:bd:7d:d0:26:de:9d:22:2a:35:9d:99:3f:3a:ac:87:
         16:e4:d4:93:7c:23:76:ce:61:eb:76:a0:2b:b6:73:89:a1:66:
         6f:37:d0:e2:59:59:c0:c5:c2:b5:55:66:a0:76:56:77:38:e6:
         99:e2:ee:fd:56:0b:7f:44:87:d5:cc:aa:a4:61:33:56:b2:70:
         b4:e7:71:73:94:c9:88:50:fa:d4:7e:3d:3a:dc:ef:68:f3:c6:
         fa:b2:f9:25:48:50:07:da:01:23:35:94:be:ef:83:c3:81:c8:
         f5:a8:a0:a5:c7:44:9b:c0:86:c8:fd:a5:59:7c:77:52:17:01:
         41:08:02:b1:a0:56:76:05:c8:82:ae:8d:86:a5:6b:eb:6a:c9:
         b7:32:5e:7f:47:b1:a3:3a:b9:95:41:5f:c0:03:86:66:8e:4c:
         b8:a7:8b:aa:eb:be:03:af:ef:4a:78:7c:04:51:89:dd:87:f7:
         20:bc:fb:f9:b2:f5:c4:f4:08:da:31:4a:3f:2e:4e:8a:5c:25:
         b0:71:a8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 18:51:22 2026 by rpki-client