Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9f3fc9ab-1597-32dc-9621-fb8cb6a9eac4.roa
File:                     9f3fc9ab-1597-32dc-9621-fb8cb6a9eac4.roa (raw, json)
Hash identifier:          nflpQkLcy0+ZZS0AYTFAOCx7LbC+8gEy1bKYdj3WUAs=
Subject key identifier:   14:7A:28:D8:50:74:66:B1:21:25:10:BD:DD:AA:5B:EB:B6:1A:E2:DB
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D343A2965FC304793920F8140
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9f3fc9ab-1597-32dc-9621-fb8cb6a9eac4.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     400899
IP address blocks:        104.253.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:29:65:fc:30:47:93:92:0f:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=aa8ed385-af69-471c-8cd7-b1cff7a4c971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:a3:82:bb:ff:de:b7:d3:06:7c:95:56:ef:
                    20:a5:56:7f:a1:88:43:ec:ba:49:d0:0d:82:2b:1e:
                    06:c6:af:f3:d2:3c:3c:b7:62:35:db:cd:ba:c3:2d:
                    a0:ef:d6:73:0d:e5:e6:39:41:2a:e1:a9:b7:83:72:
                    91:5e:a5:49:a2:13:f1:b0:43:87:61:cd:bf:f9:0b:
                    d5:18:34:c0:6e:2d:34:94:5a:77:2e:ff:a3:49:af:
                    7b:01:7f:ed:71:e1:3f:7d:36:80:56:f2:c8:20:a1:
                    fd:ab:aa:04:6f:9a:e8:5b:c1:2a:c6:0c:51:bf:74:
                    0b:01:54:66:29:94:b0:0f:3e:92:8d:0d:a4:88:34:
                    4f:0b:f4:04:1b:24:82:d9:2a:6d:0a:e0:90:fe:b1:
                    f9:da:e5:af:87:25:b2:a7:63:a4:52:1e:d1:9b:ce:
                    3a:65:cc:fe:d2:81:09:92:40:ab:91:b2:12:af:da:
                    d7:7e:4f:f3:ca:6a:23:7b:70:f5:98:f5:f8:03:7d:
                    58:a5:fe:6c:1a:03:79:d7:60:1d:89:d7:52:cc:aa:
                    48:3c:16:10:22:d3:79:f3:a1:2c:06:db:9a:1d:50:
                    c5:ab:eb:a0:e0:fd:6b:7d:db:0a:7d:bd:d1:b6:69:
                    4c:ed:a5:0e:d1:3b:20:87:b7:45:d3:ad:97:c6:54:
                    ef:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7A:28:D8:50:74:66:B1:21:25:10:BD:DD:AA:5B:EB:B6:1A:E2:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9f3fc9ab-1597-32dc-9621-fb8cb6a9eac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.253.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:6c:61:a6:df:fd:1f:19:66:d1:6d:b9:00:99:93:22:8d:22:
         6d:3f:97:95:81:ab:d1:11:09:3a:09:96:0e:2f:c2:e4:49:c0:
         a0:f0:9c:cc:56:57:05:f9:63:1b:f5:bd:3a:48:88:86:29:32:
         a0:bd:17:6b:28:c9:25:a0:83:6b:4a:34:ee:2b:71:95:b2:e5:
         9f:16:05:86:94:3b:18:52:91:e6:27:bc:70:2f:1d:9d:19:70:
         d5:6d:29:92:e8:c6:5d:24:c8:af:ed:ec:34:e3:9e:1b:02:1b:
         1d:86:89:10:86:9b:b0:aa:67:0e:93:22:8a:e1:48:8c:31:52:
         2b:29:f1:05:28:b0:7c:4b:ff:1f:67:4d:81:e2:d1:b1:77:bc:
         69:af:fb:bc:f7:74:14:1d:1a:61:1c:be:31:77:2f:11:71:46:
         bf:98:a6:79:0c:52:09:ed:63:ec:3f:4a:c3:d7:5a:e4:e8:95:
         2a:89:54:e3:8d:63:c2:3f:c3:75:fe:ea:24:ee:64:ce:af:19:
         27:2b:4f:76:74:34:47:b3:bd:e0:d2:56:8f:f8:84:29:99:bd:
         95:2f:dd:e3:5a:93:52:87:43:f7:84:62:ae:1d:93:d3:c2:88:
         21:28:dc:3d:b4:53:62:e6:50:91:fe:b3:e0:20:66:07:ec:5a:
         9a:aa:1a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:41:35 2026 by rpki-client