Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88ed0aba-63b0-3f4b-8767-f7a40665d5ac.roa
File:                     88ed0aba-63b0-3f4b-8767-f7a40665d5ac.roa (raw, json)
Hash identifier:          PDgj6aEvM3wz92yFTfABOYfzKubbMlR9W0bKUY0n+sw=
Subject key identifier:   5F:F6:1E:AE:F6:AB:76:D6:CD:04:BE:0E:A9:A0:06:60:BE:C4:33:21
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584F49744C582E5BA1988FE21A00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88ed0aba-63b0-3f4b-8767-f7a40665d5ac.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398781
IP address blocks:        104.164.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:4c:58:2e:5b:a1:98:8f:e2:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fd3a735e-1f6d-449f-acc4-b0e242260404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:20:aa:4d:2d:58:33:21:74:7f:27:cf:77:
                    48:4d:0f:a6:dd:5d:a9:a8:6a:14:37:48:b9:7e:da:
                    9b:8f:c6:86:62:91:83:35:6f:a0:59:57:42:26:ca:
                    48:ad:c4:41:3e:1b:f9:ec:dd:84:bd:8a:d2:80:7b:
                    7a:e1:6b:56:84:6b:cc:da:11:ef:c5:9c:70:7f:a2:
                    0a:68:88:23:75:bd:62:52:c2:09:88:fd:8a:b9:03:
                    98:06:82:4f:03:d8:ed:f8:f5:82:be:fc:30:da:8d:
                    9b:df:e9:3e:b0:2a:dd:04:83:bc:ff:54:92:9c:50:
                    fe:8e:8e:54:ac:3f:17:93:de:18:72:9d:1c:6c:f1:
                    b0:0b:22:2c:84:54:80:c4:b3:9b:e6:a4:cf:73:f0:
                    39:19:49:13:d2:a5:a7:78:68:72:18:0c:93:16:6d:
                    92:f8:88:d1:02:bc:12:ca:09:4b:18:15:b1:11:9b:
                    2c:36:3b:eb:2e:3d:f4:74:0d:36:e6:61:20:29:61:
                    0f:c8:de:99:16:7c:ad:f4:1b:1f:7c:9c:a2:ab:21:
                    6b:8e:e9:8b:90:01:e4:ab:bf:a8:fb:66:35:d0:3d:
                    d4:2a:93:a7:90:3a:e2:e0:81:61:06:bc:51:db:ab:
                    3f:38:6d:b3:11:b6:f9:06:e3:9c:d9:a4:be:e4:54:
                    62:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F6:1E:AE:F6:AB:76:D6:CD:04:BE:0E:A9:A0:06:60:BE:C4:33:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/88ed0aba-63b0-3f4b-8767-f7a40665d5ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:9f:e2:f9:7f:dd:9c:8d:bd:ad:60:07:c0:74:f9:b6:66:cb:
         4f:d6:0f:b6:98:53:1e:f7:d1:1c:e7:e9:dd:bd:0f:62:11:f2:
         2c:0b:a1:8c:ca:45:fc:d3:43:13:f3:f0:c6:ae:87:67:91:b3:
         ba:e4:b6:c2:88:ce:9c:20:9f:de:27:63:c1:de:01:80:31:4a:
         33:b1:95:27:69:b6:33:60:1e:b1:43:27:ef:11:b4:1e:c9:d5:
         43:9e:4d:3e:25:91:0c:41:a4:20:59:80:67:2b:f1:91:e9:b9:
         35:d5:51:81:54:9e:3d:cd:6c:e0:9e:c6:43:b7:1b:41:39:76:
         79:fb:48:de:48:cd:69:18:22:d9:19:f4:88:09:70:14:14:7b:
         96:b0:1b:dc:7a:15:fb:9f:3e:8d:e0:98:2c:2e:8f:d3:80:25:
         bf:79:99:64:60:fb:49:0b:02:63:ba:21:3e:70:75:e2:8e:cf:
         8f:5b:ac:58:db:38:0f:de:c8:8a:ce:df:ee:20:83:d7:3a:86:
         2d:59:ca:02:36:03:cc:bb:41:1a:54:ad:5a:b8:29:22:43:61:
         21:ae:cd:36:02:f5:62:e4:a0:fe:5b:14:72:fb:11:66:ee:74:
         d5:1f:3e:84:2e:db:55:16:8f:d2:0b:83:54:99:2b:50:aa:18:
         db:b1:6a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:15:44 2026 by rpki-client