Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cca1fb3f-0e75-3f06-9166-10c9d9693c57.roa
File:                     cca1fb3f-0e75-3f06-9166-10c9d9693c57.roa (raw, json)
Hash identifier:          l87CZPJPzhuuPeWGG72bsI55+atQspMWxor/TPVeobg=
Subject key identifier:   6C:AA:31:99:78:65:AD:02:8B:2E:0A:6D:D9:E8:D9:17:0B:FB:9A:39
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CE4642060B5B8A899948B4800
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cca1fb3f-0e75-3f06-9166-10c9d9693c57.roa
Signing time:             Tue 17 Feb 2026 10:40:41 +0000
ROA not before:           Tue 17 Feb 2026 10:40:41 +0000
ROA not after:            Mon 18 May 2026 09:40:41 +0000
asID:                     215728
IP address blocks:        104.252.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:64:20:60:b5:b8:a8:99:94:8b:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 17 10:40:41 2026 GMT
            Not After : May 18 09:40:41 2026 GMT
        Subject: CN=a69a9a3e-3275-49be-bbe8-675ec3743fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c3:9d:32:c4:48:ab:a5:ea:5a:78:03:9d:78:
                    b8:11:b9:c1:c5:52:2b:03:4a:17:6c:68:0b:e7:31:
                    91:60:a7:72:c8:62:8d:6e:1f:e8:f0:e4:2a:f5:f9:
                    00:4a:52:36:d4:1f:92:d8:53:fc:09:4b:e1:61:98:
                    7e:ff:00:9f:b9:59:39:b2:2b:c7:24:2f:14:d6:7d:
                    e8:66:01:5e:0e:cc:44:b5:04:60:b6:c8:ad:6d:c3:
                    67:52:40:29:5e:61:ff:2f:59:59:cd:3a:0d:5b:6a:
                    68:37:03:94:9c:d2:95:a5:c4:0e:80:90:29:91:f0:
                    11:8e:5e:c5:de:0e:58:66:95:a7:ad:1b:27:01:64:
                    ff:d5:3f:c5:34:2d:e0:0b:b3:da:d4:21:d6:50:12:
                    7d:0d:29:53:f0:78:92:43:61:df:f2:a4:b1:20:5d:
                    69:42:69:34:eb:0a:c3:55:c5:e1:3f:b2:bc:66:31:
                    c0:8f:0f:c7:00:ad:77:3b:d1:42:10:68:27:78:cb:
                    2d:89:46:76:ca:e7:08:f9:8c:28:e6:bb:06:61:6b:
                    dd:c9:ed:2c:68:a5:dd:6b:db:b0:25:1d:6a:ea:1b:
                    ce:dd:67:9d:d2:91:e5:32:50:9f:3e:7c:f6:f0:7d:
                    08:6d:18:eb:d1:f9:b9:e3:6e:ad:e5:18:f6:b7:cc:
                    61:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AA:31:99:78:65:AD:02:8B:2E:0A:6D:D9:E8:D9:17:0B:FB:9A:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/cca1fb3f-0e75-3f06-9166-10c9d9693c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:0d:ae:ce:74:64:fb:9f:c4:9b:42:a7:50:0b:5a:e3:a0:fd:
         d2:bf:b8:fc:31:30:17:97:ca:4c:d6:35:25:0b:00:f1:cc:36:
         88:dc:50:03:9c:2d:64:de:b2:46:dd:e3:d6:45:70:11:5d:1a:
         28:4c:33:6f:9e:c7:4b:c1:95:a9:56:2f:1f:f1:f8:4c:48:8c:
         44:c7:38:ba:9c:b4:bb:af:26:d9:1a:d2:c7:0c:e1:0a:25:ff:
         7d:f1:14:29:25:4a:92:b0:3f:aa:91:af:43:d2:87:f3:2e:94:
         d1:99:cc:c2:8a:c3:4c:bf:9e:06:2b:af:e2:0c:ba:c1:bf:e7:
         7b:fd:fb:5f:59:5c:b2:19:3f:e7:86:b8:72:cd:8f:2c:01:97:
         f0:f2:e0:f8:8e:4a:71:7d:c7:cf:64:ff:3d:2e:7a:c6:f5:c4:
         91:9f:55:b9:93:19:d6:4a:b6:c7:ae:fa:99:26:47:f3:6d:c8:
         5f:50:87:59:49:d7:50:c7:db:af:7a:75:af:69:cc:f1:bf:f2:
         aa:04:c5:9f:5d:a9:a5:69:33:85:b6:4f:4e:d3:3a:32:42:3d:
         bd:7b:fc:c3:d1:47:d3:af:b9:94:34:34:27:d5:91:22:22:00:
         73:7c:6c:c5:1e:4c:d7:81:60:3a:21:5d:a5:c2:01:74:5e:28:
         3d:ac:bb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 15:44:26 2026 by rpki-client