Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cab761d5-4d96-3241-a229-40fb17e27efd.roa
File:                     cab761d5-4d96-3241-a229-40fb17e27efd.roa (raw, json)
Hash identifier:          m3sgbU1Hoq4CQbZl4nJHfWmFirmLCfeL4F1C5UWITCk=
Subject key identifier:   FE:BB:77:53:D2:BA:DB:E3:66:60:1F:A8:5F:95:7E:AE:C8:F2:6C:0C
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CEE8CDF7E5DC5748749FB7980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cab761d5-4d96-3241-a229-40fb17e27efd.roa
Signing time:             Sat 21 Feb 2026 02:00:32 +0000
ROA not before:           Sat 21 Feb 2026 02:00:32 +0000
ROA not after:            Fri 22 May 2026 01:00:32 +0000
asID:                     202015
IP address blocks:        104.252.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ee:8c:df:7e:5d:c5:74:87:49:fb:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 21 02:00:32 2026 GMT
            Not After : May 22 01:00:32 2026 GMT
        Subject: CN=980e4cb7-c28c-4776-9c40-287708fe05fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b2:41:42:ba:b3:81:48:6e:af:3f:95:43:32:
                    1e:2c:ff:a4:c4:61:35:91:53:d5:89:25:21:5e:c0:
                    ba:88:90:06:b1:46:43:85:4e:c5:3d:63:bf:2c:78:
                    0f:11:03:21:fe:07:ae:6d:78:6d:94:0d:cc:96:26:
                    04:93:87:99:b2:01:88:c1:27:fa:e9:35:60:d1:45:
                    e5:5a:73:5a:03:71:c5:a0:c6:39:55:ed:ff:37:ca:
                    b7:38:e3:99:7a:26:d7:0c:d4:dc:c4:c6:c0:73:bf:
                    f1:b0:48:f7:2d:8a:2d:d9:6f:61:6a:22:61:ba:4b:
                    23:11:ca:fa:09:00:f0:ed:ad:be:08:65:32:32:99:
                    b0:27:fa:92:17:3c:60:06:55:ae:12:1b:eb:4e:8a:
                    1b:43:85:e1:93:22:60:af:65:83:a8:df:3f:ca:a6:
                    67:4e:92:81:aa:0b:da:e4:c7:54:1d:a2:a7:78:52:
                    e6:e4:e1:74:bc:d6:6d:af:e4:2b:29:9e:b1:83:a8:
                    71:22:f6:57:e4:25:e3:a2:8f:0e:c3:ee:08:4c:69:
                    86:1d:f4:72:20:b7:1d:9d:94:99:9f:ee:54:02:76:
                    2e:68:dd:63:8a:3d:c9:0e:d4:9c:91:30:35:eb:a8:
                    27:6e:ea:d7:98:cc:b9:70:1d:40:91:79:34:cc:01:
                    f4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BB:77:53:D2:BA:DB:E3:66:60:1F:A8:5F:95:7E:AE:C8:F2:6C:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cab761d5-4d96-3241-a229-40fb17e27efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:35:84:01:b3:5a:01:3b:7a:71:17:28:96:18:c0:a9:e0:ff:
         58:5c:94:a7:85:39:a6:0a:05:19:30:da:59:1d:e3:c3:10:e5:
         58:df:f3:8c:5e:ed:da:b4:db:e3:01:dd:fd:15:4f:c2:32:c6:
         05:ff:09:3f:d0:af:28:07:cd:90:e1:06:e1:ef:c5:0a:7c:7c:
         c7:2b:ed:60:94:cf:17:fc:25:d2:0f:6f:69:ea:ba:8e:bb:0e:
         bf:ed:cd:51:cc:a5:e2:d0:90:7e:44:8c:60:03:7e:71:a3:ec:
         81:79:0d:ec:27:30:36:e9:a5:12:79:e7:f1:30:42:ce:07:75:
         03:3b:9d:5d:5f:ef:a2:cf:f8:2c:6e:55:e4:0a:db:ec:3b:66:
         09:5c:b5:73:58:24:2c:87:a2:6d:e0:fa:31:63:60:ef:4a:6c:
         fa:ce:1c:f2:1d:90:f4:bf:00:22:40:fc:de:79:36:39:4b:3c:
         36:e6:f9:67:19:77:0f:da:db:2a:05:6e:ae:5f:01:2b:1e:49:
         75:fb:51:d2:a7:12:75:34:46:e5:e7:5e:36:cd:b9:03:0c:06:
         28:5a:8b:9e:75:a5:b0:1d:e4:b8:62:91:46:5c:71:37:41:50:
         17:aa:90:50:d1:01:89:74:e1:77:2d:88:ab:c4:74:f3:cc:f8:
         69:d9:5f:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzujN9+XcV0h0n7eYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDIyMTAyMDAzMloXDTI2MDUyMjAxMDAzMlowLzEtMCsGA1UEAxMk
OTgwZTRjYjctYzI4Yy00Nzc2LTljNDAtMjg3NzA4ZmUwNWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57JBQrqzgUhurz+VQzIeLP+kxGE1kVPViSUh
XsC6iJAGsUZDhU7FPWO/LHgPEQMh/geubXhtlA3MliYEk4eZsgGIwSf66TVg0UXl
WnNaA3HFoMY5Ve3/N8q3OOOZeibXDNTcxMbAc7/xsEj3LYot2W9haiJhuksjEcr6
CQDw7a2+CGUyMpmwJ/qSFzxgBlWuEhvrToobQ4XhkyJgr2WDqN8/yqZnTpKBqgva
5MdUHaKneFLm5OF0vNZtr+QrKZ6xg6hxIvZX5CXjoo8Ow+4ITGmGHfRyILcdnZSZ
n+5UAnYuaN1jij3JDtSckTA166gnburXmMy5cB1AkXk0zAH0EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP67d1PSutvjZmAfqF+Vfq7I8mwMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvY2FiNzYxZDUtNGQ5Ni0z
MjQxLWEyMjktNDBmYjE3ZTI3ZWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPyrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAo1hAGzWgE7enEXKJYYwKng/1hclKeFOaYKBRkw2lkd48MQ5Vjf84xe
7dq02+MB3f0VT8IyxgX/CT/QrygHzZDhBuHvxQp8fMcr7WCUzxf8JdIPb2nquo67
Dr/tzVHMpeLQkH5EjGADfnGj7IF5DewnMDbppRJ55/EwQs4HdQM7nV1f76LP+Cxu
VeQK2+w7ZglctXNYJCyHom3g+jFjYO9KbPrOHPIdkPS/ACJA/N55NjlLPDbm+WcZ
dw/a2yoFbq5fASseSXX7UdKnEnU0RuXnXjbNuQMMBihai551pbAd5LhikUZccTdB
UBeqkFDRAYl04XctiKvEdPPM+GnZX6E=
-----END CERTIFICATE-----
Generated at Tue Feb 24 15:46:39 2026 by rpki-client