Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/96d3ac17-9cc8-3e16-9496-25ff39e7036a.roa
File:                     96d3ac17-9cc8-3e16-9496-25ff39e7036a.roa (raw, json)
Hash identifier:          NhWOC/B7w1wNICR/cG5QcAEzWHLD/fmkGRwoA6clDBc=
Subject key identifier:   8C:32:65:7C:45:65:1F:65:3B:AF:52:FA:EC:83:67:E5:35:CD:BC:8C
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584D1F4A85F4571411F643035500
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/96d3ac17-9cc8-3e16-9496-25ff39e7036a.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36040
IP address blocks:        104.237.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:85:f4:57:14:11:f6:43:03:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=5c6838cb-081a-4e91-8dab-93a5c75ac54b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:89:1c:07:e3:e9:d2:f7:99:3f:f8:df:0f:
                    c4:bd:80:fe:14:99:ae:33:5c:91:9e:e2:1b:52:4e:
                    82:a3:ac:82:d5:68:96:da:7c:d9:d1:9e:b3:43:d2:
                    82:7c:fd:6b:27:83:b2:f6:0f:34:64:51:66:79:28:
                    c6:dc:c0:d2:be:53:42:89:86:d3:ff:65:27:db:77:
                    7e:66:da:f4:34:2b:9f:bc:43:c0:a0:2e:63:f4:27:
                    de:fc:08:8b:79:40:3d:46:5e:53:3c:78:45:30:58:
                    30:b6:b4:31:95:e7:2c:4f:90:0d:f5:4b:a6:8e:83:
                    42:df:4c:63:49:2c:91:eb:a4:be:a9:6b:d3:d8:1b:
                    96:98:2b:4c:f1:e0:9c:46:f8:b3:8d:2e:f6:97:e4:
                    e7:c7:e3:d0:97:4c:45:c7:6a:4b:38:44:34:4b:2b:
                    f1:fe:95:55:06:ec:4f:a2:9f:7d:be:21:4b:9c:d6:
                    79:e3:07:f1:96:a8:9a:f2:6f:03:f2:ac:b3:2a:b7:
                    b0:13:80:43:fe:2a:9c:41:57:3c:91:74:a1:f3:07:
                    d4:1a:6e:44:ef:60:ea:2c:43:6b:db:d8:3a:27:2a:
                    95:69:09:11:61:3d:2b:79:79:fb:b0:78:29:df:ab:
                    67:d2:57:13:da:1f:9e:be:a3:ad:01:6c:77:06:09:
                    4d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:32:65:7C:45:65:1F:65:3B:AF:52:FA:EC:83:67:E5:35:CD:BC:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/96d3ac17-9cc8-3e16-9496-25ff39e7036a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:10:78:eb:92:30:b5:20:2b:bd:3a:59:f1:3c:f4:34:dc:64:
         60:9f:df:e7:81:89:28:2a:fd:e5:4a:5c:72:01:7e:fe:f0:cf:
         d9:c1:21:76:1c:4a:99:b8:4d:3a:1b:86:03:67:1c:24:4e:59:
         13:41:10:9a:7c:9e:df:cc:00:02:7a:3b:61:a6:41:15:35:8b:
         8b:5a:43:b5:38:0d:54:19:6f:cc:5d:84:da:13:e9:32:a0:d0:
         40:43:04:b5:14:1d:58:8d:67:41:c6:21:17:4d:95:26:cc:5a:
         71:f7:61:0b:61:ff:5e:09:60:b2:c5:30:0b:a1:ef:ab:f5:e8:
         77:7e:e0:f1:d9:1b:b2:8e:aa:41:a0:03:17:e3:09:ed:14:a1:
         cf:67:14:da:2c:24:53:60:61:7c:02:88:de:fa:3d:64:6f:ce:
         92:47:72:52:04:23:6d:75:63:b8:90:b4:3e:0f:a0:c4:aa:95:
         31:a8:05:4f:0a:65:1b:01:fb:ca:9b:5b:23:e9:c1:4c:77:a1:
         50:c3:8e:09:57:70:73:65:44:3b:12:45:71:b6:4a:ec:1d:cd:
         72:33:6b:c5:c1:3a:db:6f:05:3d:1f:8e:d9:a5:9f:11:0f:24:
         df:70:a3:4a:46:00:09:ea:c7:30:ed:08:a2:2a:70:02:ac:27:
         92:8f:e2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:56:20 2026 by rpki-client