Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/bdf60038-367e-3a99-b78a-c1ac1a5d01bd.roa
File:                     bdf60038-367e-3a99-b78a-c1ac1a5d01bd.roa (raw, json)
Hash identifier:          bjzjv0feiFvisha6hoJeRMxJSSoKGv0cKD3Hv3J4Yzo=
Subject key identifier:   80:8F:6C:F3:69:64:9E:1F:4F:C4:A8:6C:D4:84:9B:CD:4F:AD:EC:00
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584D1F4A59CFAB7BF74D4F8A0D80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/bdf60038-367e-3a99-b78a-c1ac1a5d01bd.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36040
IP address blocks:        104.237.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:59:cf:ab:7b:f7:4d:4f:8a:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=3bcc0f76-1cdb-4457-a539-0c0768fe9cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1e:0b:35:5e:a1:f3:7e:75:77:a9:8b:46:69:
                    f1:1c:34:b6:91:77:de:c6:49:d4:ed:54:6d:a8:db:
                    b1:61:19:90:1b:b0:37:fc:ef:dc:35:3f:d0:a6:5c:
                    69:4d:42:62:fb:04:50:6e:70:42:1b:81:12:c4:ab:
                    92:57:db:27:81:6c:db:14:29:c0:63:fb:75:fc:8e:
                    f3:e0:4f:ed:cc:ee:f6:a1:dd:d6:ef:ae:a8:d1:de:
                    55:11:4a:6a:0f:d0:ea:2f:2d:54:38:13:b1:c0:71:
                    06:51:22:12:6e:81:25:f4:af:f5:b4:8e:c3:de:35:
                    ee:69:77:54:c1:ec:27:2a:75:fb:91:20:bc:87:6c:
                    05:39:1d:03:02:b6:6c:22:7d:a3:e9:c0:c0:3f:53:
                    c9:e8:02:13:bd:01:e4:30:ee:c5:b9:ea:4f:e1:38:
                    65:b5:08:06:6e:f1:67:b5:1d:49:b9:94:c2:b8:05:
                    a1:5b:2e:a3:33:c8:ab:2c:db:dd:4f:0f:1e:3b:c6:
                    8a:28:c1:52:92:bd:08:ba:1a:f8:0e:62:4e:d8:e1:
                    1c:51:40:30:65:e8:1c:be:84:85:9b:07:b9:26:17:
                    81:00:8e:90:56:52:f1:43:ff:6b:38:b3:da:08:de:
                    2f:ac:1d:bf:6b:bd:bf:77:3e:f7:e0:ec:d3:57:61:
                    91:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8F:6C:F3:69:64:9E:1F:4F:C4:A8:6C:D4:84:9B:CD:4F:AD:EC:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/bdf60038-367e-3a99-b78a-c1ac1a5d01bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:4f:6b:a8:6a:d6:4d:21:da:23:60:66:e6:e3:5a:2a:a0:7d:
         6e:2b:78:c0:d7:85:e7:13:6f:5f:c4:cb:97:75:9a:fd:bf:40:
         db:85:ab:df:da:f8:97:e6:81:9b:16:71:47:93:ea:61:70:8a:
         21:e7:a0:30:4d:eb:1e:ba:b5:0d:e3:86:3c:13:4a:94:eb:9d:
         73:51:fb:3d:53:2d:54:de:f5:81:09:b7:e0:71:93:68:97:c6:
         d6:4a:8c:10:21:cf:94:e8:08:5c:81:d8:1f:27:83:c2:dd:f9:
         8f:36:fd:1a:30:cc:5e:5f:5c:84:31:24:d2:39:bb:ce:2e:2b:
         68:ca:53:db:82:18:b1:4a:6d:13:42:ee:62:1b:d2:28:01:a7:
         a2:da:d1:31:6b:e3:d8:31:54:a4:b4:9b:7e:a2:bc:7a:35:7e:
         aa:3c:32:12:71:f1:57:8c:83:4c:37:c4:1c:ab:fd:99:27:7f:
         12:80:28:9c:3e:86:65:3f:0d:bd:b9:e6:32:5d:48:46:74:af:
         b4:3b:f4:cd:47:34:4e:8a:82:90:92:9e:9f:2a:59:76:55:ce:
         fd:92:63:39:0e:16:5c:ee:98:cf:8b:28:cc:1f:98:3b:a0:11:
         b4:b2:23:0b:d5:f9:f8:2d:93:17:c5:94:15:e4:49:16:7b:9d:
         c2:c8:c9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:56:10 2026 by rpki-client