Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7231a2c1-f58a-3216-97df-4a27434b2314.roa
File:                     7231a2c1-f58a-3216-97df-4a27434b2314.roa (raw, json)
Hash identifier:          vUjGDzyEn03hE7slpYuKBEWAWwtNWLNg3tzYJQBuSGk=
Subject key identifier:   68:2F:36:70:FA:E1:8F:63:11:1E:44:78:78:33:F2:7D:20:9D:81:FF
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D4672026E1879A3EA1D3DF180
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7231a2c1-f58a-3216-97df-4a27434b2314.roa
Signing time:             Tue 24 Mar 2026 13:37:52 +0000
ROA not before:           Tue 24 Mar 2026 13:37:52 +0000
ROA not after:            Mon 22 Jun 2026 13:37:52 +0000
asID:                     18779
IP address blocks:        104.252.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:72:02:6e:18:79:a3:ea:1d:3d:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 24 13:37:52 2026 GMT
            Not After : Jun 22 13:37:52 2026 GMT
        Subject: CN=749fcdbe-6d92-4e29-8986-d42da7f84465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c1:da:da:1c:98:b4:7d:8d:90:12:11:be:b7:
                    22:b0:f2:f7:eb:96:9e:50:ae:f9:a6:da:1f:b6:a4:
                    40:7d:88:3d:e0:5f:13:cf:52:e3:10:36:69:67:03:
                    9c:cf:74:5b:2b:fe:3a:71:b0:b6:32:4c:14:c8:70:
                    40:6c:fd:d1:a9:ba:a3:f7:d8:d1:e3:70:07:10:6a:
                    7e:5b:31:82:d4:fd:e9:21:58:d2:7d:2a:5c:fd:7d:
                    38:32:12:30:d9:14:6a:92:96:b7:d4:42:56:a2:1f:
                    27:d4:a6:cb:2c:02:54:51:3e:3b:71:c5:af:43:13:
                    04:61:01:5e:bb:28:6c:c2:bd:a6:9b:8a:12:3b:93:
                    3a:63:68:22:89:99:6a:b7:80:ef:1b:c9:df:46:76:
                    97:1d:3b:14:39:b3:1d:84:83:b6:98:f2:de:af:dc:
                    83:75:56:6f:6c:c8:41:ab:20:3b:e6:66:c7:3b:73:
                    79:92:62:57:0f:a1:73:96:e3:98:44:34:ed:f2:95:
                    72:3c:16:94:2e:96:6d:09:88:f3:e0:f2:4c:4b:87:
                    89:83:8e:d2:ff:a1:eb:b9:a6:a3:54:b5:b7:fb:83:
                    61:41:c6:28:ec:69:0d:97:80:54:5a:bb:b9:d0:96:
                    8e:e7:26:5c:0e:11:41:56:16:c1:ee:bc:19:ba:b5:
                    c2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2F:36:70:FA:E1:8F:63:11:1E:44:78:78:33:F2:7D:20:9D:81:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/7231a2c1-f58a-3216-97df-4a27434b2314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.252.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:f8:70:40:03:5c:48:f8:e5:0a:b1:29:e4:f9:46:6b:8c:0b:
         00:13:08:c1:a4:a6:03:ac:81:39:5a:e9:f8:a0:8e:84:e5:fd:
         ec:0a:06:98:f0:15:18:60:c1:80:7e:3f:c3:33:f6:2e:3f:e8:
         e1:21:9c:25:bc:d0:67:4e:d4:3e:c8:c3:73:62:42:0a:5d:80:
         78:19:05:82:29:ed:a9:c2:e2:23:1a:81:fb:70:e3:91:cf:8d:
         76:47:91:d8:a4:97:4b:ef:6f:d2:12:6c:00:78:c0:08:e7:c8:
         7e:ab:cb:49:be:9b:ca:66:a8:51:e7:08:69:c4:5e:67:02:1e:
         70:40:b4:ac:39:7e:58:3d:98:84:65:28:e5:b7:a2:42:7c:f1:
         d1:59:78:1d:3e:be:8c:7d:ea:dc:44:63:ea:45:bc:b5:ae:9e:
         04:86:25:38:b5:50:40:18:4b:f6:5d:8f:ac:03:65:2e:8c:e3:
         8f:3e:a3:da:42:4a:b5:ef:7f:f0:2a:d6:65:81:63:06:2c:d4:
         0d:f7:3b:77:6e:61:e2:31:9d:77:ff:24:d3:db:6d:47:06:dc:
         6b:68:2b:26:62:70:53:5a:f6:05:46:f0:c9:bf:8d:d3:56:b5:
         40:a2:9f:ae:4a:91:7a:5d:7f:d0:c6:67:97:78:19:66:29:84:
         f1:fd:f3:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GcgJuGHmj6h098YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDMyNDEzMzc1MloXDTI2MDYyMjEzMzc1MlowLzEtMCsGA1UEAxMk
NzQ5ZmNkYmUtNmQ5Mi00ZTI5LTg5ODYtZDQyZGE3Zjg0NDY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MHa2hyYtH2NkBIRvrcisPL365aeUK75ptof
tqRAfYg94F8Tz1LjEDZpZwOcz3RbK/46cbC2MkwUyHBAbP3Rqbqj99jR43AHEGp+
WzGC1P3pIVjSfSpc/X04MhIw2RRqkpa31EJWoh8n1KbLLAJUUT47ccWvQxMEYQFe
uyhswr2mm4oSO5M6Y2giiZlqt4DvG8nfRnaXHTsUObMdhIO2mPLer9yDdVZvbMhB
qyA75mbHO3N5kmJXD6FzluOYRDTt8pVyPBaULpZtCYjz4PJMS4eJg47S/6Hruaaj
VLW3+4NhQcYo7GkNl4BUWru50JaO5yZcDhFBVhbB7rwZurXCBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGgvNnD64Y9jER5EeHgz8n0gnYH/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNzIzMWEyYzEtZjU4YS0z
MjE2LTk3ZGYtNGEyNzQzNGIyMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPwzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEb4cEADXEj45QqxKeT5RmuMCwATCMGkpgOsgTla6figjoTl/ewKBpjw
FRhgwYB+P8Mz9i4/6OEhnCW80GdO1D7Iw3NiQgpdgHgZBYIp7anC4iMagftw45HP
jXZHkdikl0vvb9ISbAB4wAjnyH6ry0m+m8pmqFHnCGnEXmcCHnBAtKw5flg9mIRl
KOW3okJ88dFZeB0+vox96txEY+pFvLWungSGJTi1UEAYS/Zdj6wDZS6M448+o9pC
SrXvf/Aq1mWBYwYs1A33O3duYeIxnXf/JNPbbUcG3GtoKyZicFNa9gVG8Mm/jdNW
tUCin65KkXpdf9DGZ5d4GWYphPH985Q=
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:38:22 2026 by rpki-client