Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4e88a012-d142-3824-9b78-07390931f2c7.roa
File:                     4e88a012-d142-3824-9b78-07390931f2c7.roa (raw, json)
Hash identifier:          1FIzI5exCUlv6r6b/GM2wYDsqYhFOF1+jCX6w7r8Y4s=
Subject key identifier:   9F:53:39:14:2B:57:49:1C:63:24:33:41:2E:E7:03:F7:22:2A:07:11
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D2BDA119080DEED0436424200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4e88a012-d142-3824-9b78-07390931f2c7.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     61317
IP address blocks:        104.252.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:11:90:80:de:ed:04:36:42:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=4236768a-78df-48df-8689-79776b851f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:e4:32:4d:85:53:72:86:77:ea:96:99:b2:
                    f8:6a:ca:d6:2d:9a:2c:59:b3:9b:97:d4:94:2a:a1:
                    3e:64:b9:26:75:51:72:cc:16:e2:f2:fe:e2:5a:d5:
                    97:4e:5a:63:f7:d7:d1:83:1a:9a:11:a0:08:12:44:
                    e7:2e:dc:e7:11:f8:2f:05:a1:70:5e:1b:9b:2b:d5:
                    63:08:c7:ed:74:20:60:07:56:75:09:fb:0f:78:0d:
                    7b:13:b8:55:23:cc:bc:d8:b7:b5:cb:82:fe:34:74:
                    2d:52:86:15:b1:58:26:22:9c:84:66:b1:bc:78:78:
                    00:10:bc:32:76:31:ba:51:1b:53:84:f0:c2:2d:c6:
                    9f:af:87:6a:87:a1:c7:f1:69:0a:28:bd:3f:21:61:
                    44:37:b5:2a:1d:44:fa:a4:9f:8d:01:d0:be:3b:3c:
                    40:24:69:1b:4a:42:e2:e5:25:f7:28:6f:f1:54:37:
                    3f:84:29:bc:cf:7b:e6:d6:0a:26:5b:f2:4f:d2:eb:
                    9c:97:47:c2:e1:2a:1c:4b:97:ea:cd:97:2d:ae:58:
                    fd:f8:02:2d:73:58:03:9c:2e:5b:be:95:49:99:df:
                    3b:6b:9e:fe:88:43:c4:c7:e1:f8:8c:cd:2f:d5:ba:
                    c1:20:8d:3e:bf:12:fc:8c:4c:c4:a3:fe:09:c6:24:
                    7d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:53:39:14:2B:57:49:1C:63:24:33:41:2E:E7:03:F7:22:2A:07:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4e88a012-d142-3824-9b78-07390931f2c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:ff:33:f5:58:fb:1f:31:5b:1e:03:56:57:09:13:b4:23:5a:
         2d:7a:67:eb:6c:27:b4:6c:95:0f:29:cb:af:99:35:0c:54:11:
         b1:6f:6f:8e:cf:e2:69:69:91:a8:bf:18:4c:5e:ab:f8:50:14:
         05:47:bf:e3:4b:9a:e3:7e:ac:95:49:ed:65:bb:e8:77:9a:31:
         a5:9c:93:d8:b1:ef:73:c7:a2:fb:db:7b:00:e1:9d:71:8b:fd:
         bf:08:0e:c3:c6:17:25:82:cd:13:35:df:58:22:cb:9a:f5:b7:
         d5:67:5b:67:0f:70:30:55:80:3f:6f:a6:8e:87:07:09:aa:08:
         ae:f1:fc:63:da:5f:ee:57:1b:d6:cc:5f:47:d3:55:f1:25:90:
         ad:b9:7e:0a:fc:c6:d6:19:45:36:1e:aa:5f:21:7b:fb:b6:fc:
         e7:ed:dd:bf:c6:e7:db:f9:cc:bc:10:0b:ef:2b:89:d8:19:ca:
         ea:8e:58:ae:88:d8:54:e1:b8:b7:37:a9:98:19:b1:0b:df:34:
         07:a9:12:5b:46:8c:44:46:c8:6c:f6:11:10:7b:d0:d7:87:95:
         b4:77:dc:93:72:1c:20:75:a9:51:87:41:0b:82:36:08:4f:0d:
         d0:c8:1d:36:16:11:63:e5:36:43:05:ea:1d:e4:3a:35:98:74:
         ed:75:b1:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2hGQgN7tBDZCQgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk
NDIzNjc2OGEtNzhkZi00OGRmLTg2ODktNzk3NzZiODUxZjliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhbkMk2FU3KGd+qWmbL4asrWLZosWbObl9SU
KqE+ZLkmdVFyzBbi8v7iWtWXTlpj99fRgxqaEaAIEkTnLtznEfgvBaFwXhubK9Vj
CMftdCBgB1Z1CfsPeA17E7hVI8y82Le1y4L+NHQtUoYVsVgmIpyEZrG8eHgAELwy
djG6URtThPDCLcafr4dqh6HH8WkKKL0/IWFEN7UqHUT6pJ+NAdC+OzxAJGkbSkLi
5SX3KG/xVDc/hCm8z3vm1gomW/JP0uucl0fC4SocS5fqzZctrlj9+AItc1gDnC5b
vpVJmd87a57+iEPEx+H4jM0v1brBII0+vxL8jEzEo/4JxiR9VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ9TORQrV0kcYyQzQS7nA/ciKgcRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGU4OGEwMTItZDE0Mi0z
ODI0LTliNzgtMDczOTA5MzFmMmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPwIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIn/M/VY+x8xWx4DVlcJE7QjWi16Z+tsJ7RslQ8py6+ZNQxUEbFvb47P
4mlpkai/GExeq/hQFAVHv+NLmuN+rJVJ7WW76HeaMaWck9ix73PHovvbewDhnXGL
/b8IDsPGFyWCzRM131giy5r1t9VnW2cPcDBVgD9vpo6HBwmqCK7x/GPaX+5XG9bM
X0fTVfElkK25fgr8xtYZRTYeql8he/u2/Oft3b/G59v5zLwQC+8ridgZyuqOWK6I
2FThuLc3qZgZsQvfNAepEltGjERGyGz2ERB70NeHlbR33JNyHCB1qVGHQQuCNghP
DdDIHTYWEWPlNkMF6h3kOjWYdO11sZs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:46:34 2026 by rpki-client