Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a968e58d-3376-3479-b96f-438d8a08012c.roa
File:                     a968e58d-3376-3479-b96f-438d8a08012c.roa (raw, json)
Hash identifier:          pzc/NBxmoyvvVqz9fNzex42R+5toUkmZoM+VaYuhVN0=
Subject key identifier:   13:13:6D:75:51:2F:9F:26:35:E3:20:59:24:D0:48:75:6F:9B:77:40
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D4A8FBA71B0D957C6C00ADBA0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a968e58d-3376-3479-b96f-438d8a08012c.roa
Signing time:             Thu 26 Mar 2026 01:00:32 +0000
ROA not before:           Thu 26 Mar 2026 01:00:32 +0000
ROA not after:            Wed 24 Jun 2026 01:00:32 +0000
asID:                     50056
IP address blocks:        104.252.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 31 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4a:8f:ba:71:b0:d9:57:c6:c0:0a:db:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 26 01:00:32 2026 GMT
            Not After : Jun 24 01:00:32 2026 GMT
        Subject: CN=656e8212-5f10-43bb-b8d7-aab4a2bf4832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:57:ee:26:1b:3f:9b:22:05:12:33:29:88:d5:
                    33:58:f5:61:59:73:42:b3:95:5d:09:46:13:92:76:
                    d9:e5:fc:3a:c8:cb:e1:a5:8a:94:d5:10:89:a1:a1:
                    94:22:62:6c:40:a9:62:3d:a6:52:d4:61:d5:cd:db:
                    67:ce:70:a1:78:0f:ac:84:8a:dd:8e:5e:99:26:fd:
                    ea:3f:ad:bb:22:d0:da:af:9f:75:b7:e7:d2:ee:33:
                    ce:67:6a:b4:2c:0c:89:91:8c:36:a6:04:b5:8c:81:
                    d4:f0:cd:82:5e:da:e8:2b:75:0a:4f:f2:8f:ad:8d:
                    08:74:80:3f:39:e3:b8:10:10:a1:d1:b0:92:7d:ce:
                    a3:63:de:b2:5e:4f:f2:d7:85:27:d2:7d:5f:58:75:
                    01:f2:a1:22:01:a4:22:fe:18:e1:7d:65:2c:d9:4e:
                    22:6b:8d:5e:71:77:d0:d1:32:89:f1:53:72:41:37:
                    fa:e5:ad:22:70:a4:83:0d:83:1b:9b:4d:f3:d9:32:
                    fc:e3:b6:74:28:43:78:33:26:6f:9d:53:7e:6d:b8:
                    16:55:b2:43:da:0e:21:9a:33:67:c7:b0:b2:92:98:
                    02:7a:2e:5c:7d:e6:a3:16:9f:89:32:1b:57:dc:82:
                    44:57:68:bc:f5:f8:6b:81:7a:ef:41:30:87:85:ef:
                    5c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:13:6D:75:51:2F:9F:26:35:E3:20:59:24:D0:48:75:6F:9B:77:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/a968e58d-3376-3479-b96f-438d8a08012c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:93:00:65:0f:bc:31:56:fc:db:9c:a3:f2:1c:83:3d:78:3d:
         c4:c8:89:c3:8d:4f:20:c9:4e:99:70:0e:91:4c:1c:fb:9a:eb:
         f5:91:bc:d7:94:19:e8:c8:9a:c5:f7:e6:c8:ca:6b:97:f7:5a:
         4a:a1:06:67:8a:f3:db:42:54:dd:9d:96:de:59:75:49:02:f6:
         74:a0:e4:48:e9:7a:f8:df:40:b7:85:3c:a2:33:ae:84:db:e9:
         e6:96:d4:a9:ca:b7:04:d5:a2:59:e4:62:a6:0e:d6:cd:50:e9:
         01:82:6d:47:c0:1b:0e:d1:3f:05:d8:af:fd:82:db:01:14:09:
         2b:14:f3:47:08:57:b8:31:7e:19:95:3b:cd:93:fc:7d:74:fd:
         46:3c:18:06:09:05:dc:da:f8:f0:73:b8:11:bb:7c:19:bb:1f:
         7c:44:45:7f:f2:53:99:38:bc:88:43:0d:07:14:6b:2d:60:f7:
         8e:e7:84:3e:16:7a:d7:c3:86:68:2c:71:d7:32:d7:30:4c:cb:
         1f:2a:54:8d:10:1f:e5:10:02:21:c6:24:75:b0:29:00:26:08:
         3a:cf:76:86:85:b9:50:24:ff:4e:33:4f:c3:9f:d6:61:7f:97:
         35:e1:09:0e:9a:36:fa:66:5f:ca:bf:aa:66:32:27:2b:62:1a:
         a4:6d:54:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:16:12 2026 by rpki-client