Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/56ad9c83-4928-3274-ad1e-bc9b339fc175.roa
File:                     56ad9c83-4928-3274-ad1e-bc9b339fc175.roa (raw, json)
Hash identifier:          Zsgj1I5booMnBXT8Fdxn2T00asTyAdJFUO2oNFLeYKQ=
Subject key identifier:   8E:B9:48:9D:BD:8F:1A:18:82:6E:2F:C5:BF:27:88:36:93:A4:4F:DE
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584D1F4A52F3CE7DBCC56995F080
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/56ad9c83-4928-3274-ad1e-bc9b339fc175.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36040
IP address blocks:        104.237.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:52:f3:ce:7d:bc:c5:69:95:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=170b06c3-cd94-42e4-830b-de97ff7635aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:e7:5e:c0:ff:3d:21:56:f2:d9:62:98:a9:
                    b6:66:7c:2c:fc:3c:c6:6b:c6:2f:e2:1f:cb:d5:da:
                    72:35:b4:59:09:d0:4d:43:95:74:d2:bd:04:a1:50:
                    09:e6:cf:0d:e3:40:b4:24:af:23:30:8a:14:f3:ce:
                    4e:d9:97:10:0f:54:bb:1b:21:76:29:ab:0e:70:d5:
                    58:c4:53:c7:05:23:42:c0:4d:93:d9:e1:f7:62:ac:
                    1f:d0:3a:6e:26:a4:2d:fb:54:76:12:ed:56:83:67:
                    53:a4:f5:96:1f:7e:bd:78:83:e2:49:e6:ef:aa:26:
                    aa:29:53:73:e9:9a:e2:fd:40:f8:6b:df:d5:62:1f:
                    d0:30:1c:4a:46:06:d0:ce:ad:3c:b9:2c:c9:e7:cc:
                    27:44:1b:9b:c8:cd:6c:d1:3f:7b:da:22:98:5c:71:
                    cc:77:21:a1:12:93:59:77:28:6a:d7:04:d1:1a:d3:
                    0c:eb:6a:cb:8f:a8:1d:5b:8e:4a:f3:05:a2:96:3f:
                    5e:5a:e2:30:31:dc:a2:c4:33:8a:d0:bb:8d:45:2c:
                    2c:38:d4:23:90:2e:79:7c:d5:83:cd:55:a7:7c:3e:
                    72:80:65:c4:45:6d:aa:22:00:3d:39:3f:d0:3a:88:
                    8c:c5:5d:4d:ad:73:f0:50:73:df:6b:8b:00:47:fc:
                    c5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B9:48:9D:BD:8F:1A:18:82:6E:2F:C5:BF:27:88:36:93:A4:4F:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/56ad9c83-4928-3274-ad1e-bc9b339fc175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:9c:3c:34:71:47:5c:e0:94:bb:44:82:7d:69:98:74:73:97:
         af:02:44:ec:c5:8c:53:1e:93:2c:ae:1b:88:87:51:8c:26:47:
         12:6c:c4:52:3c:9c:dc:83:9b:43:0e:f5:82:5a:a8:86:8b:30:
         4b:9b:4d:19:d1:6d:c9:3c:58:7d:2a:1b:b0:32:62:2c:a4:70:
         14:f2:2e:a0:5b:1c:13:8f:4e:69:57:8c:ad:01:ec:ef:b2:11:
         20:06:1d:d3:40:07:97:67:45:28:b3:4a:37:8d:40:91:02:6a:
         63:2d:ea:7f:7a:13:d0:1b:25:63:f2:a7:f7:d0:00:0b:1e:55:
         1a:75:e1:da:e1:9e:05:a0:8b:dd:23:13:ac:2e:ad:67:6c:2b:
         26:56:ac:2d:a9:7e:10:0b:e9:49:f4:6a:1b:b0:23:b8:f4:54:
         e9:05:5f:4e:4f:cb:f0:f4:c2:c7:92:5e:e6:2d:28:9a:05:69:
         2e:30:cc:2b:bc:62:8d:0d:f0:d1:60:5a:37:80:aa:35:91:2e:
         2d:f6:e1:05:70:29:54:93:4d:9d:69:e9:fd:f3:90:af:1c:9d:
         bf:db:b5:cc:10:d1:2e:5f:f5:5d:d3:25:b6:4a:de:b2:5a:e1:
         f3:06:be:00:63:45:4a:95:2d:67:9b:b7:88:60:50:95:24:45:
         98:4c:13:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:58:18 2026 by rpki-client