Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2ba66495-1e17-379f-9a90-2cc8dbf7141a.roa
File:                     2ba66495-1e17-379f-9a90-2cc8dbf7141a.roa (raw, json)
Hash identifier:          u6eFXKnTCSV37xsikn4Xgz7qPY5RjshcMkAivO5FlRE=
Subject key identifier:   2A:5F:69:30:C8:51:9D:5B:DF:52:57:5B:1D:4F:BC:3E:8C:48:ED:AB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D2D3F8C3099C7AEAFD472A520
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2ba66495-1e17-379f-9a90-2cc8dbf7141a.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     11404
IP address blocks:        104.165.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:8c:30:99:c7:ae:af:d4:72:a5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=75698a39-e149-462a-b9a3-4a9ecca9456c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1b:7d:ae:fb:2f:cc:69:a6:07:a9:e8:8e:22:
                    84:c3:7d:b4:78:db:ed:fa:30:10:12:75:76:98:5d:
                    0f:c1:f8:c6:a7:68:ff:83:fe:8e:a9:92:bd:6e:2f:
                    eb:7e:9f:2e:56:cc:97:34:a1:11:5e:88:8f:f2:9d:
                    07:e0:03:31:e5:5b:74:a5:b7:f9:80:ff:15:4d:b2:
                    4d:0e:ae:c9:c3:c4:de:b5:a4:ad:f8:a9:24:0a:4f:
                    a1:87:ce:11:ed:1e:c3:4c:7a:3b:18:2e:e8:c3:a4:
                    4b:a4:15:23:24:e4:e1:c0:07:48:ee:95:5e:f8:b3:
                    29:0f:22:bb:28:ef:d6:79:40:7d:13:65:b2:41:f5:
                    69:cf:04:6e:09:b6:0f:00:18:2e:e8:40:f7:bb:3c:
                    ff:d1:88:b9:b2:73:36:69:7c:f2:93:bb:89:07:59:
                    ec:51:9b:f7:a6:f9:68:83:04:e6:62:05:ba:a5:a2:
                    e3:a4:4c:9b:ba:51:80:e1:12:5d:a9:c9:28:b0:e6:
                    96:20:7e:c0:fa:09:e8:cc:fd:9d:5c:0e:cc:9e:da:
                    93:8b:c8:a2:27:51:26:93:67:a0:5e:57:65:58:80:
                    16:fa:71:1c:ea:1d:3e:dc:0e:9d:95:38:84:4b:0e:
                    e7:62:e9:1a:c0:67:ed:5a:6d:fa:7d:e8:93:c4:ca:
                    91:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5F:69:30:C8:51:9D:5B:DF:52:57:5B:1D:4F:BC:3E:8C:48:ED:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2ba66495-1e17-379f-9a90-2cc8dbf7141a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:0f:b7:c9:8d:46:d9:27:bf:8c:0b:53:9e:8a:d3:00:03:b8:
         d7:07:de:0d:7a:c5:a0:e1:fb:41:85:17:23:23:00:4a:0e:ea:
         c9:ff:94:63:dc:e5:55:d8:8f:3e:af:29:eb:67:54:3d:c5:4b:
         c4:05:d7:49:63:64:7c:a7:81:75:a4:99:47:44:d1:02:c2:9e:
         b9:87:74:d4:cd:e4:e1:9c:94:17:63:45:22:2a:1e:c7:94:6e:
         fc:44:13:b7:d9:a1:fc:d2:a0:56:3a:b3:01:6f:e1:d2:b1:ed:
         ce:5f:ab:42:d8:af:c3:3b:ab:2d:5e:c2:33:d4:8b:e5:27:59:
         cc:ab:14:4b:6d:7a:d0:9d:95:15:5f:89:6e:93:ae:8d:e0:d0:
         f8:bc:05:a7:5e:98:6c:8b:a2:23:a5:f0:f9:b9:0a:ac:58:10:
         3f:ee:b8:2c:0f:30:ac:78:1b:fb:92:68:69:4c:c4:1d:eb:fa:
         f7:fe:60:bf:69:29:f1:27:8b:7c:c5:15:44:41:ce:83:9b:b8:
         ce:31:c8:c9:dd:f3:cf:71:8c:0c:b6:b8:7a:e1:18:9e:f8:fd:
         1c:c0:d2:41:84:d6:c1:de:3e:03:ba:a0:6e:5a:48:9c:11:42:
         d2:ea:b9:06:39:30:86:eb:1c:dc:75:a1:c3:67:2c:1d:58:11:
         e1:1e:23:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP4wwmceur9RypSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk
NzU2OThhMzktZTE0OS00NjJhLWI5YTMtNGE5ZWNjYTk0NTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvht9rvsvzGmmB6nojiKEw320eNvt+jAQEnV2
mF0PwfjGp2j/g/6OqZK9bi/rfp8uVsyXNKERXoiP8p0H4AMx5Vt0pbf5gP8VTbJN
Dq7Jw8TetaSt+KkkCk+hh84R7R7DTHo7GC7ow6RLpBUjJOThwAdI7pVe+LMpDyK7
KO/WeUB9E2WyQfVpzwRuCbYPABgu6ED3uzz/0Yi5snM2aXzyk7uJB1nsUZv3pvlo
gwTmYgW6paLjpEybulGA4RJdqckosOaWIH7A+gnozP2dXA7MntqTi8iiJ1Emk2eg
XldlWIAW+nEc6h0+3A6dlTiESw7nYukawGftWm36feiTxMqRHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCpfaTDIUZ1b31JXWx1PvD6MSO2rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmJhNjY0OTUtMWUxNy0z
NzlmLTlhOTAtMmNjOGRiZjcxNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKXqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACgPt8mNRtknv4wLU56K0wADuNcH3g16xaDh+0GFFyMjAEoO6sn/lGPc
5VXYjz6vKetnVD3FS8QF10ljZHyngXWkmUdE0QLCnrmHdNTN5OGclBdjRSIqHseU
bvxEE7fZofzSoFY6swFv4dKx7c5fq0LYr8M7qy1ewjPUi+UnWcyrFEttetCdlRVf
iW6Tro3g0Pi8BademGyLoiOl8Pm5CqxYED/uuCwPMKx4G/uSaGlMxB3r+vf+YL9p
KfEni3zFFURBzoObuM4xyMnd889xjAy2uHrhGJ74/RzA0kGE1sHePgO6oG5aSJwR
QtLquQY5MIbrHNx1ocNnLB1YEeEeIzs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:36:07 2026 by rpki-client