Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5b90c14b-12c3-303d-b425-102cf8be7925.roa
File:                     5b90c14b-12c3-303d-b425-102cf8be7925.roa (raw, json)
Hash identifier:          zZ49ueSGZaBK3kWkBXQh/dH84zazlTnEIIztayEfgiA=
Subject key identifier:   91:40:EF:03:37:A4:99:18:1B:6D:16:47:F9:AF:24:C5:5D:E8:20:15
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CB01DC512D94C0E55A3B18680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5b90c14b-12c3-303d-b425-102cf8be7925.roa
Signing time:             Thu 29 Jan 2026 17:16:53 +0000
ROA not before:           Thu 29 Jan 2026 17:16:53 +0000
ROA not after:            Wed 29 Apr 2026 16:16:53 +0000
asID:                     211273
IP address blocks:        104.253.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b0:1d:c5:12:d9:4c:0e:55:a3:b1:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 29 17:16:53 2026 GMT
            Not After : Apr 29 16:16:53 2026 GMT
        Subject: CN=cf254b7e-152d-4c2c-b4c5-015dcfd488dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:26:5e:62:2c:e1:39:74:65:33:dd:d9:c9:
                    27:27:54:bf:8c:81:e2:33:2b:16:a6:71:76:3e:4c:
                    7f:d5:e6:10:ff:33:40:0e:ed:d7:2b:5f:64:cd:85:
                    68:48:73:0a:a2:a3:58:2b:98:eb:83:7f:dd:e4:45:
                    06:a6:73:c9:87:1d:73:99:77:4c:87:dd:b6:56:d0:
                    73:89:bb:f9:48:09:6e:46:da:69:f4:79:ee:98:c7:
                    d0:dc:08:dd:fd:3f:e9:17:c3:b7:46:7b:17:b7:45:
                    90:9d:e0:96:9c:a6:64:49:77:33:91:87:f9:6e:6a:
                    d7:e3:24:9b:d1:ff:f7:ab:0f:7b:68:20:e1:68:ae:
                    ed:4f:20:07:46:0d:a4:11:2e:6c:19:bb:20:8d:80:
                    38:9c:86:0e:49:ae:3e:76:44:f4:74:7e:77:b9:b4:
                    2f:ef:5d:5c:ba:66:ab:6d:44:c9:6c:df:7b:a0:1c:
                    88:e1:bf:04:16:a6:30:c8:25:61:6e:a9:ba:7e:83:
                    d3:4b:a0:88:d9:6c:07:7c:a0:1d:cf:1c:94:d5:cd:
                    4a:31:87:b4:85:56:ee:16:17:36:be:fb:28:92:a1:
                    8e:8f:f1:2f:4b:3a:dd:ca:4e:f1:c3:8f:c5:17:91:
                    d2:e6:6f:49:44:0a:60:c7:6e:20:cd:ea:a1:1b:8b:
                    17:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:40:EF:03:37:A4:99:18:1B:6D:16:47:F9:AF:24:C5:5D:E8:20:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5b90c14b-12c3-303d-b425-102cf8be7925.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:06:73:be:8c:64:b9:aa:97:5a:8e:5e:e4:a8:7f:ad:ae:91:
         87:62:83:d4:eb:70:67:53:50:b2:35:55:de:db:86:80:7f:df:
         c9:3a:67:82:76:40:49:fb:a5:48:26:69:51:23:19:f0:b8:67:
         9f:8d:0d:d6:d0:80:07:63:36:17:01:21:f3:9d:83:d1:3d:3e:
         00:79:2e:c2:cb:b1:31:2a:89:db:14:92:2e:ff:07:d7:8e:56:
         c7:68:54:bd:78:72:0f:fd:5c:fa:f5:aa:b2:39:8a:04:4f:c7:
         74:fd:99:93:b9:25:25:e3:6f:9f:2b:76:6b:26:95:7b:08:dc:
         13:db:8a:ac:0b:ee:d2:86:1b:bf:88:67:23:a8:28:53:85:3d:
         d6:2b:5f:4c:f2:0e:a3:42:87:8c:05:4c:a0:ee:43:43:33:44:
         87:b4:17:ab:07:44:7e:07:9f:13:fa:2e:4b:0c:23:68:6b:3f:
         5d:38:f3:0e:44:e2:3a:ac:25:ca:13:ec:55:b5:c4:70:c3:18:
         97:54:f0:64:eb:f4:09:ca:3d:65:0e:9c:d4:0a:45:03:be:5f:
         8f:29:aa:aa:75:88:5b:79:67:ff:33:53:15:f5:f9:e2:ab:95:
         ae:82:4f:48:c0:18:c4:18:93:94:95:40:a8:60:2b:04:b2:ee:
         0e:9f:f6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 15:44:46 2026 by rpki-client