Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32bce3c7-4124-37b3-abf3-aa2f79db27aa.roa
File:                     32bce3c7-4124-37b3-abf3-aa2f79db27aa.roa (raw, json)
Hash identifier:          MKjikYBuwqAprNIYy86k1BxoHtrq+91qga2OzYZLTXA=
Subject key identifier:   AC:5E:F6:D9:D4:FA:90:AF:94:02:02:86:22:AB:C1:BB:22:D0:DD:13
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D343A340F767F7F33C4FDF040
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32bce3c7-4124-37b3-abf3-aa2f79db27aa.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     212238
IP address blocks:        104.164.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:34:0f:76:7f:7f:33:c4:fd:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=2fa515f5-f873-4ca2-adab-af527c5f8d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e0:b3:62:9a:a4:e1:99:34:91:af:05:27:6e:
                    be:0a:1c:5d:54:68:e1:ee:23:36:a7:b8:85:af:7c:
                    27:5b:d2:fa:33:b4:22:26:d0:97:db:7a:e4:8f:32:
                    22:dd:dd:ec:8b:8b:2e:69:82:bc:ee:f9:80:56:52:
                    2e:60:ba:87:c6:e0:ff:97:49:aa:5d:ba:39:37:ec:
                    50:f1:4e:e5:cc:12:e2:f5:52:8f:13:1a:e8:4d:06:
                    0f:6d:35:7d:3a:b4:98:f7:dc:79:e5:6b:a6:8f:a1:
                    9d:f6:d2:8b:18:6b:35:05:96:4a:85:59:66:6a:b6:
                    cb:f8:31:32:6c:f5:45:e3:66:46:f4:cb:d5:02:95:
                    73:41:8d:e5:69:57:28:3a:24:5a:02:fe:82:7b:6c:
                    83:18:e4:28:18:22:aa:30:bd:74:e4:67:1b:5d:3c:
                    04:21:11:06:d7:19:47:3f:3c:65:64:8c:db:c6:91:
                    ad:35:b6:88:8c:7f:6e:36:50:fb:b1:2e:53:5a:13:
                    5d:33:5c:82:8e:d8:d8:13:fe:91:4d:d9:4b:17:8c:
                    bc:56:03:0f:c9:77:86:aa:29:fa:52:be:d1:70:63:
                    6d:74:4e:ab:d0:34:80:f4:dc:2e:32:68:7c:d1:0b:
                    bf:61:65:0f:1c:3a:07:b9:e6:1a:18:af:72:a8:43:
                    ef:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5E:F6:D9:D4:FA:90:AF:94:02:02:86:22:AB:C1:BB:22:D0:DD:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/32bce3c7-4124-37b3-abf3-aa2f79db27aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:55:0d:b4:45:85:a9:bc:ac:3c:ff:a2:ab:ae:fe:1c:47:d0:
         28:b4:a6:d1:f0:fc:f3:a3:fe:94:48:7a:66:71:9d:7a:ce:6b:
         6e:07:0e:12:02:00:d4:6f:f2:7f:11:e6:81:43:4e:c7:cf:89:
         9a:9a:ed:d6:a5:46:2a:5a:5d:6c:c1:19:42:60:a1:36:dc:3b:
         c5:6b:03:e1:e6:4f:8f:59:86:86:22:52:fc:bf:82:dd:86:ba:
         4a:5e:c9:ca:c2:5a:ba:71:51:9b:bc:6b:88:04:98:93:84:f8:
         a5:31:52:bc:a6:23:83:f8:40:2d:fd:a9:5c:fa:62:19:75:1f:
         f4:da:7e:ce:67:01:15:ec:d4:cd:ca:4c:a3:ac:b7:b5:93:71:
         12:b1:fc:25:b1:2f:d3:f0:0e:a9:26:e8:1e:fd:02:8b:1a:7d:
         f5:67:60:7e:b7:35:01:34:68:e4:98:a9:f2:32:82:0c:14:a1:
         5f:0f:7d:06:f1:bd:b2:8a:ea:09:07:9f:84:44:54:a5:9d:b5:
         d6:39:00:6b:8d:a9:8b:86:9f:0c:c7:48:1b:06:61:c2:73:ba:
         75:2e:1f:cd:4c:06:87:b8:db:ff:b1:4c:68:12:a2:6f:d9:bf:
         4c:dd:36:0f:fa:f9:9f:8c:7c:7b:c2:14:20:dd:c4:a2:e1:3d:
         f9:39:42:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:20:53 2026 by rpki-client