Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/06cc6c4e-9ddb-3801-8f27-53564015d724.roa
File:                     06cc6c4e-9ddb-3801-8f27-53564015d724.roa (raw, json)
Hash identifier:          t7kMf8KG+pvqryP84Xd4y7KLOEWsXfuWDQrmVPENczY=
Subject key identifier:   32:A3:C3:C3:8D:10:30:51:F1:01:17:07:6B:9F:07:54:B6:C0:BA:67
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584EB9AC4FFD96CDEAD1496AF680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/06cc6c4e-9ddb-3801-8f27-53564015d724.roa
Signing time:             Tue 04 Aug 2026 13:00:12 +0000
ROA not before:           Tue 04 Aug 2026 13:00:12 +0000
ROA not after:            Mon 02 Nov 2026 14:00:12 +0000
asID:                     209697
IP address blocks:        104.164.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:ac:4f:fd:96:cd:ea:d1:49:6a:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Aug  4 13:00:12 2026 GMT
            Not After : Nov  2 14:00:12 2026 GMT
        Subject: CN=ce350c79-5e2c-4a51-969f-4ab83b35b47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:aa:e4:63:6a:8b:45:81:e7:3b:ce:79:45:c7:
                    e9:fe:75:90:a7:04:a4:e2:ef:57:b4:e1:8e:17:58:
                    f3:4b:61:1c:76:5c:03:3c:a1:0b:a4:05:f0:d1:2f:
                    12:82:09:ed:d1:c0:66:0d:a1:4d:26:20:b6:b3:57:
                    ea:39:f8:6a:1e:7c:7e:27:1d:07:27:41:15:12:02:
                    46:77:0f:06:31:9a:92:41:3e:8f:aa:5f:7e:49:65:
                    74:28:1f:c6:40:ba:bd:a3:71:ed:f1:7f:3f:46:a7:
                    3a:48:1b:11:56:32:45:b8:fa:27:53:88:da:54:b4:
                    5e:3f:3f:20:1e:8a:32:5c:b7:0a:f1:23:7f:eb:7c:
                    8b:0e:13:02:de:c1:01:6d:04:41:22:79:50:63:c7:
                    34:f6:99:1a:ea:6f:2b:73:c3:eb:da:72:02:89:08:
                    ef:9d:0f:49:ac:e0:35:20:7e:9b:1f:31:6f:1b:3a:
                    af:cc:70:b5:ba:b1:b4:f8:95:9f:8e:7e:76:db:e6:
                    61:c7:21:fa:8e:b6:28:29:02:9f:c6:ae:50:3e:85:
                    2a:0d:8e:f3:11:64:b8:51:32:01:4a:17:f1:2b:f1:
                    9b:a7:64:19:96:80:c9:d1:17:c7:24:f1:40:df:1a:
                    e7:23:c4:d3:ad:23:52:8e:8b:95:d4:22:56:f7:a1:
                    90:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A3:C3:C3:8D:10:30:51:F1:01:17:07:6B:9F:07:54:B6:C0:BA:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/06cc6c4e-9ddb-3801-8f27-53564015d724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b7:77:8f:be:39:df:12:78:b9:5f:6f:3e:c3:47:25:ad:ab:
         44:35:19:a6:01:b2:bc:9b:8e:de:56:39:bc:dc:79:d6:6a:28:
         0a:e8:0b:71:76:ff:a1:b1:6d:4d:e2:5e:fb:c0:7b:42:b9:d0:
         5d:85:50:7a:c4:3d:be:58:18:20:be:e7:dd:8a:1b:52:78:62:
         b9:e8:9c:50:5b:d3:28:d8:47:5d:2b:44:b7:a9:d3:0a:70:99:
         31:c6:03:8d:28:1b:93:a1:47:04:a3:68:af:48:50:3d:e2:98:
         ff:c7:ca:bb:f4:3b:1c:c6:81:6a:b5:85:bc:51:f6:16:ec:d8:
         5b:eb:1d:db:c6:29:92:86:94:d1:d8:3a:3f:ac:d1:0d:ac:13:
         cb:a6:01:f6:21:12:a4:d4:1e:99:79:3b:39:42:e2:c1:87:78:
         27:9c:c4:80:22:c7:b5:2d:48:76:8b:ec:13:2c:31:ca:8e:1a:
         ee:7a:62:5a:74:c3:cb:16:74:58:d0:fd:a0:85:29:29:5a:14:
         5c:54:fb:ad:50:e0:18:ef:49:af:21:ff:8c:e9:38:f6:fa:5c:
         99:0d:7f:c0:f5:bb:3e:21:47:28:4a:64:36:c0:82:54:84:30:
         b7:be:7b:af:90:d2:38:21:c7:f4:57:da:78:15:5d:79:05:69:
         e1:3b:38:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 15:11:33 2026 by rpki-client