Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/95e82ee4-8842-3e45-a302-e8de4f783cb6.roa
File:                     95e82ee4-8842-3e45-a302-e8de4f783cb6.roa (raw, json)
Hash identifier:          NPHcynptAgwxawbmcm5xOD+Id+aFnkmVx1lmjDG/VAc=
Subject key identifier:   1C:29:4B:21:BF:CE:A5:91:39:F3:E9:02:B1:2D:1B:F3:D2:4D:12:9D
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584DCF2B0693F577117B7184B540
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/95e82ee4-8842-3e45-a302-e8de4f783cb6.roa
Signing time:             Tue 12 May 2026 13:00:30 +0000
ROA not before:           Tue 12 May 2026 13:00:30 +0000
ROA not after:            Mon 10 Aug 2026 13:00:30 +0000
asID:                     214238
IP address blocks:        104.164.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2b:06:93:f5:77:11:7b:71:84:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 12 13:00:30 2026 GMT
            Not After : Aug 10 13:00:30 2026 GMT
        Subject: CN=c852f035-ee9e-4828-b3d4-5380ca3d3306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e9:13:a4:3d:90:00:59:39:d3:ba:d1:97:02:
                    ca:db:af:c8:aa:25:02:86:a6:f1:de:30:cc:36:ca:
                    4c:a3:40:fe:b3:32:53:5d:97:41:da:fa:53:8d:65:
                    15:c5:07:49:b5:88:4f:00:b5:97:21:ac:1a:ff:bd:
                    36:4a:21:99:1b:32:03:ab:ac:07:aa:49:3d:f3:62:
                    7f:26:1f:1f:6d:53:35:06:38:71:16:ce:d2:04:dd:
                    4a:d4:db:15:cb:aa:8e:a4:56:d2:dd:b4:a8:a1:03:
                    e5:71:39:85:23:92:09:57:9b:25:87:0a:e4:20:44:
                    a4:cf:c6:14:65:77:80:c9:f3:37:8c:f7:c7:8a:11:
                    a7:f0:82:9f:49:92:06:1d:6a:f0:57:86:e7:b3:db:
                    e2:a3:c8:48:d8:de:28:a8:64:b6:dd:93:5d:f4:93:
                    d5:86:fb:03:0d:e0:91:d3:1c:e8:87:bb:5d:fb:dd:
                    f4:ee:38:df:a6:50:fc:28:05:fe:02:53:6f:58:0b:
                    24:d6:14:eb:29:92:83:07:74:75:05:07:bd:24:ec:
                    b0:ea:25:d0:7a:a5:a9:11:64:21:6c:50:14:2e:75:
                    65:a1:fe:21:d1:71:62:a1:fb:12:5a:70:c8:fe:2c:
                    cc:98:ac:da:bf:5b:3c:81:ca:2d:0d:89:a0:ad:9f:
                    58:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:29:4B:21:BF:CE:A5:91:39:F3:E9:02:B1:2D:1B:F3:D2:4D:12:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/95e82ee4-8842-3e45-a302-e8de4f783cb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.164.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:22:a3:c4:d1:e9:26:06:83:f4:6b:18:85:c1:1c:c2:42:08:
         c1:cd:d0:83:ad:3d:d2:e5:34:d7:e1:4d:81:8d:7f:43:97:49:
         26:aa:60:1a:ef:e6:29:24:3c:05:bb:69:77:15:f5:bf:c3:53:
         d6:82:b6:85:5c:18:05:58:af:20:bb:b4:89:85:f1:2b:61:f9:
         d1:11:96:e9:d6:bf:f7:7d:30:76:87:dd:a1:da:a7:bd:52:a6:
         64:9e:48:e3:e4:b5:dd:df:02:71:4e:f3:45:db:a4:92:87:2b:
         b1:37:63:7e:f0:8b:96:89:30:7b:20:fb:9b:e3:dd:07:0a:59:
         15:6e:ae:0c:58:2d:8e:c1:83:52:4a:4c:66:07:85:0d:21:94:
         27:86:6b:e9:70:f8:b6:96:a6:6c:65:42:51:e9:5c:2d:8e:78:
         e6:f0:86:28:b5:28:ea:ce:db:33:c9:f7:cf:a8:0b:6c:20:fd:
         03:33:8c:fc:08:78:15:4a:4f:7f:0f:8c:b5:bc:15:50:c6:cc:
         52:4b:89:4c:4e:88:b9:d6:2d:8e:52:9e:6a:f1:53:28:8f:87:
         b4:01:20:2b:bd:e6:99:e4:1c:2b:18:fa:ba:c6:7b:c0:12:ad:
         d2:a4:2f:06:96:44:63:ae:90:91:df:7a:62:8c:ae:7d:cb:dd:
         a4:63:4e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:11:35 2026 by rpki-client