Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3e1c8bf5-4965-34e2-b4bd-2712eea3998e.roa
File:                     3e1c8bf5-4965-34e2-b4bd-2712eea3998e.roa (raw, json)
Hash identifier:          kNTHHxws9I6uAMZhiSTmzOyr9yLKoeyTuDFF0JFtmhw=
Subject key identifier:   5D:A8:19:6A:8C:21:00:2D:B0:08:C8:98:DC:59:68:21:BA:F0:CE:39
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D300AAE20CAE412AD49388340
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3e1c8bf5-4965-34e2-b4bd-2712eea3998e.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     44559
IP address blocks:        104.165.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:ae:20:ca:e4:12:ad:49:38:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=ab0f8f17-7197-4416-8c07-8f2b069c1fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:91:ba:36:9a:90:75:e6:8d:fd:00:db:a3:3f:
                    77:93:63:dc:63:10:2d:ae:c4:63:0e:16:11:f9:86:
                    be:db:ab:c2:02:4c:f5:41:1c:2f:8a:57:5f:11:8b:
                    09:3e:a1:9f:46:94:f4:4c:ec:92:e4:d3:af:e6:11:
                    be:5e:09:b6:4c:11:c8:c5:40:17:83:fa:c8:f8:3a:
                    07:7f:0c:b3:89:57:28:93:58:51:96:da:a8:bf:b6:
                    60:c6:05:f9:81:9a:b1:ce:9e:a5:08:eb:a5:7d:f0:
                    32:0d:ea:d6:0e:94:09:88:db:a1:cd:cd:54:ad:6e:
                    ed:4a:d9:41:03:dc:78:ec:56:ba:24:c0:36:eb:e0:
                    4d:39:a3:74:ed:f8:75:00:b4:67:47:4c:e6:37:4f:
                    11:81:cf:1a:92:93:4c:34:16:b1:cb:bb:6e:cb:41:
                    d2:91:84:df:74:e5:ba:93:f9:d2:f6:72:41:ea:a7:
                    4b:3e:29:06:a7:c1:e8:11:3e:27:61:23:fa:2b:43:
                    dd:ef:e2:c8:8b:d5:b4:53:34:57:95:96:3e:41:98:
                    15:a5:6a:31:19:f8:18:82:c8:49:23:f3:d9:3c:3b:
                    f9:d7:26:73:e5:c7:75:76:9b:64:ea:6f:99:bb:ae:
                    48:59:e8:84:ef:79:62:fb:91:08:d4:3e:d1:9c:85:
                    de:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A8:19:6A:8C:21:00:2D:B0:08:C8:98:DC:59:68:21:BA:F0:CE:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3e1c8bf5-4965-34e2-b4bd-2712eea3998e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.165.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:f9:58:a8:d0:0d:a3:2c:26:b7:59:95:15:66:4b:a7:38:d2:
         95:cf:0e:35:b0:59:62:e9:4d:f0:b0:96:f5:61:d8:7c:74:ab:
         ba:59:67:73:16:ab:b0:2f:c0:8b:e2:b9:87:a7:39:47:b9:8c:
         23:3f:eb:f5:73:2a:2c:cd:70:8d:50:65:0a:ef:b3:0c:fc:69:
         b7:75:95:c0:df:4f:13:2f:48:0b:3a:12:fd:b1:78:71:49:c5:
         f8:54:98:bf:77:a3:37:7d:6e:41:79:0f:0f:98:bf:eb:45:65:
         55:79:0a:8a:79:e9:da:b0:0a:d3:54:cd:53:f8:58:3e:0a:de:
         11:bb:f8:c8:31:e0:11:96:6b:4d:14:31:cd:d3:77:98:cd:5d:
         e9:0c:86:e0:71:d5:0a:28:32:ee:bc:73:4c:49:78:9c:da:25:
         c5:da:15:31:2d:fe:ef:5d:65:02:4c:d2:72:d4:8c:ff:e2:ff:
         3e:9d:30:93:3b:a2:41:20:69:68:36:c8:08:cc:a9:e3:07:16:
         30:b9:34:12:76:0c:15:e0:08:6b:64:74:43:b0:63:b2:45:5c:
         6e:40:53:da:2f:26:18:3f:85:c4:7b:24:85:32:fd:4e:59:3c:
         cb:a0:c7:42:2f:b8:af:cc:0a:85:72:aa:02:26:c3:3f:c3:65:
         08:15:a2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:53 2026 by rpki-client