Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/99f97f09-2432-32c3-9a4f-b9f445550f2f.roa
File:                     99f97f09-2432-32c3-9a4f-b9f445550f2f.roa (raw, json)
Hash identifier:          UED+z2bsTnedg+HSPgcNi8Jf9uKp9E+NVn3Tm3tY2r4=
Subject key identifier:   09:D8:A8:F2:A3:44:8F:6F:87:2D:FB:A2:54:F5:18:5F:47:27:4B:C3
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D19B4DB544E94421C6A406680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/99f97f09-2432-32c3-9a4f-b9f445550f2f.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     200239
IP address blocks:        104.252.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:db:54:4e:94:42:1c:6a:40:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=c9aeb2ef-8cb2-4f7d-8e03-049c68b41d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1f:8a:a9:35:cd:c9:74:46:f7:10:08:27:6a:
                    ed:5c:b2:4d:33:a2:80:7f:37:56:d1:bc:64:43:cb:
                    02:6b:b1:c2:f5:c0:a4:e3:05:36:70:af:77:94:a5:
                    80:0c:bd:45:1d:4f:bc:06:73:5a:22:ba:ae:09:4f:
                    09:2e:57:fd:f8:97:38:fa:d4:a6:cd:e6:b8:1f:c1:
                    28:1e:57:f2:d2:4e:62:1a:fd:28:f7:1d:e3:f4:a9:
                    70:d9:f3:37:86:a6:95:c6:54:17:0a:e1:5c:29:cc:
                    15:1e:51:80:c2:81:b6:b4:50:e5:91:05:f3:45:5d:
                    3d:0c:64:50:34:ea:40:cf:0c:76:c3:6b:fb:67:f2:
                    8f:fe:dd:e7:63:89:07:bb:2a:82:7a:6b:ee:a6:b6:
                    ca:e7:51:d7:b1:47:00:16:d4:93:0d:3a:cb:e7:16:
                    65:b3:b9:49:cc:35:34:d2:97:95:db:b1:30:d5:59:
                    57:79:a6:81:97:05:d7:c1:c0:6e:e2:2b:e2:91:57:
                    a7:c1:05:1b:1c:12:7b:f1:c8:02:8b:63:9a:dc:a2:
                    ba:9a:54:be:e1:da:e7:37:ee:3c:28:d8:7c:bf:da:
                    9f:2d:4c:a9:68:a3:5b:91:ac:bc:69:5d:f1:b7:cb:
                    4e:86:5b:7f:9a:bf:d9:97:f8:68:a5:b6:e9:45:ee:
                    fb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D8:A8:F2:A3:44:8F:6F:87:2D:FB:A2:54:F5:18:5F:47:27:4B:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/99f97f09-2432-32c3-9a4f-b9f445550f2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:55:95:b0:bf:ca:c7:f9:b9:e8:20:52:9b:49:9a:53:66:09:
         59:c3:77:16:78:be:bf:69:50:da:0c:8c:ed:c8:b1:cf:b9:04:
         1f:20:29:33:ec:93:5c:ba:18:d5:22:02:db:1d:0a:55:27:53:
         1b:ea:aa:34:c9:b0:6a:25:d8:22:a8:0a:51:5d:d5:85:fc:d9:
         93:af:e2:9c:c2:91:46:e5:0c:78:76:c3:82:de:ea:62:43:78:
         16:37:b6:f1:f5:73:f8:3e:6b:8c:a4:69:70:dc:ea:6e:c0:ba:
         a7:06:e2:17:51:71:78:e2:7c:41:c5:cf:3b:84:7b:62:77:3c:
         b4:47:97:79:fe:5f:45:aa:d9:63:95:2d:81:48:4b:60:6e:77:
         f6:d5:ef:fc:17:18:74:48:f8:26:ba:8b:59:7d:27:0f:da:2e:
         7a:00:61:71:e4:7d:14:bd:25:51:41:ba:02:b9:e4:5a:6f:52:
         11:65:63:c6:92:e9:ad:e0:14:61:a1:95:25:c1:8b:a2:6e:5a:
         74:d6:eb:dd:92:bc:d8:35:d6:d2:55:47:b0:56:3d:54:57:76:
         e4:6b:de:25:5f:cc:55:b3:9b:d2:a7:cc:51:54:ea:8d:28:b8:
         7c:b9:4d:cc:a8:41:83:6f:45:10:10:c9:00:59:01:6c:fe:4e:
         69:0b:b5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:23:16 2026 by rpki-client