Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f7217e6f-c124-3853-a9c0-575fda865e91.roa
File:                     f7217e6f-c124-3853-a9c0-575fda865e91.roa (raw, json)
Hash identifier:          0BtOKF5qlmF2lQy89tVpmPiry2XuJgPDKe3D7j8up6c=
Subject key identifier:   46:72:E9:2D:11:74:AC:EA:FA:81:EB:F9:34:47:62:EE:9D:7D:B3:4B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CC07CA07C6DD9FAB18B914F00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f7217e6f-c124-3853-a9c0-575fda865e91.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     264617
IP address blocks:        104.252.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:a0:7c:6d:d9:fa:b1:8b:91:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=0e564293-05fd-43df-a41d-39e1b9c79d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:14:53:35:05:95:bd:0c:5a:bf:6b:bb:77:
                    f7:0f:41:57:5b:75:0c:51:e1:cb:11:61:e9:90:a1:
                    9c:39:8f:8f:dd:18:b3:21:38:d1:04:bf:e4:c1:2b:
                    fb:ff:5c:5e:b6:ae:0c:76:4c:bd:ba:d8:8e:24:d0:
                    12:22:73:b6:f4:3e:c6:f5:94:0f:f4:b7:d3:81:58:
                    44:14:0a:58:2c:95:10:4a:9f:fc:24:dd:22:f7:3f:
                    ab:cb:2a:04:21:7c:38:7b:67:e2:fa:4e:90:d2:e9:
                    4a:15:28:54:24:4e:75:1e:64:b5:f0:1a:8b:2c:47:
                    e2:81:cb:14:70:c6:cc:3a:6f:30:fd:56:ec:a2:29:
                    b5:aa:71:8f:87:2a:d5:e8:90:05:b5:89:33:6b:7a:
                    ae:ef:44:61:2a:b5:54:81:51:91:09:00:b3:20:98:
                    2c:79:4c:a8:19:9a:cc:5d:1f:ef:bf:44:6c:15:88:
                    7f:c9:73:8a:55:1a:3d:8e:21:54:bc:91:02:0e:bb:
                    37:9b:61:59:17:c9:c2:d1:e0:e9:64:a4:8d:a6:fc:
                    f3:e4:5e:e5:c9:87:8d:da:cc:0b:ab:85:be:74:87:
                    a1:bb:d5:b7:33:05:ff:6e:b3:ed:b4:54:34:e0:e1:
                    76:7b:c2:47:ca:8b:01:94:e5:0d:ec:43:29:1f:10:
                    0f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:72:E9:2D:11:74:AC:EA:FA:81:EB:F9:34:47:62:EE:9D:7D:B3:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f7217e6f-c124-3853-a9c0-575fda865e91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:67:fc:a1:3f:18:38:27:e8:12:70:83:fd:03:86:70:9f:bb:
         55:c1:e7:aa:fa:0f:df:ed:0b:8f:3f:1b:52:9b:77:5c:b3:e8:
         eb:79:fd:db:81:b4:1c:80:fb:3b:92:3d:46:63:7c:82:2e:96:
         f7:0c:42:b7:ae:e5:9e:ff:23:4b:22:58:9a:18:45:67:fb:ba:
         06:3e:c5:9f:44:77:b0:7f:3a:98:cd:06:88:15:44:38:0e:4a:
         ca:a5:db:18:6a:85:47:b9:0b:2d:e2:cf:0d:b1:5a:df:c0:34:
         e5:14:2f:1d:ed:ed:50:b4:e0:d9:8c:a6:ed:3f:05:4b:1f:2c:
         17:91:d3:06:da:d9:65:f4:99:8a:f2:8f:9e:3a:85:78:c8:fc:
         82:77:9b:ff:51:36:aa:0c:52:f8:b1:f9:a0:f9:20:d2:1b:a7:
         e8:1e:4f:48:04:b0:16:26:47:ea:a5:fa:a2:ee:51:07:ba:b6:
         81:88:a4:84:70:56:cc:1a:21:dc:e7:76:cd:5d:33:27:a8:1f:
         70:6b:74:4c:7f:6f:ce:5e:c8:e7:db:ab:b0:32:7e:1e:f8:9c:
         32:64:fe:7f:60:6c:8a:d5:a7:9e:2f:5a:a6:c2:46:f4:4f:6c:
         ee:b4:1b:bb:c1:a2:a3:88:e6:eb:45:7e:5e:0a:e1:ec:3a:b8:
         84:fe:f5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 15:48:17 2026 by rpki-client