Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c1013b0b-a48b-31db-ad5f-184709524207.roa
File:                     c1013b0b-a48b-31db-ad5f-184709524207.roa (raw, json)
Hash identifier:          xMdMFo0PY4klLs2/YVNjf6ITKETM5bN7wAKiK7uApq0=
Subject key identifier:   8F:0E:C2:8A:0A:D4:79:8B:4B:DF:D4:03:BA:D3:9C:5A:A5:F5:0C:02
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584D1F4A75CC9CEA0BD14B4E84A0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c1013b0b-a48b-31db-ad5f-184709524207.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     36040
IP address blocks:        104.237.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:75:cc:9c:ea:0b:d1:4b:4e:84:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=c2491bff-2529-4087-b1da-15e4c34923b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c5:22:fe:60:59:76:e8:69:2f:fd:54:d3:16:
                    6c:4c:26:6d:7e:81:14:92:d0:3d:24:77:ac:65:40:
                    76:c1:c7:00:75:a9:63:87:85:fe:88:d4:16:8b:2a:
                    d8:90:e8:7b:77:8c:4d:c8:1f:2c:6b:2d:c1:b5:70:
                    6a:c3:96:74:97:af:a1:bb:ff:68:3e:e4:94:1b:20:
                    7b:18:bc:45:e0:8f:48:30:81:2a:a5:a3:93:d1:dc:
                    af:5d:99:dc:e5:eb:54:cf:a9:60:3b:8f:f1:d2:d4:
                    e1:14:a6:98:09:4e:43:f0:df:5c:b6:c9:d9:c0:cc:
                    59:f8:98:ad:a7:0f:80:08:77:14:11:64:0a:3e:d8:
                    63:d4:c0:2a:7d:9c:4a:57:20:81:89:22:10:0a:d4:
                    bf:dd:25:e1:15:7e:81:bc:89:bc:14:13:73:65:f2:
                    ac:1a:9b:a7:62:d0:28:f4:87:1e:18:ed:d6:2a:ee:
                    30:7c:3a:1f:67:0e:5b:92:47:b1:54:af:fc:ee:27:
                    3e:a3:d2:ac:3d:a7:8b:7b:8b:17:24:54:12:7f:c9:
                    28:91:22:0f:a4:5d:fd:3f:a6:bd:90:c4:90:6d:68:
                    43:5b:aa:50:f9:ce:1f:c3:12:89:50:ac:fa:5d:ed:
                    41:a1:5a:46:08:15:ea:da:80:ce:80:ca:e0:7d:1d:
                    cc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0E:C2:8A:0A:D4:79:8B:4B:DF:D4:03:BA:D3:9C:5A:A5:F5:0C:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c1013b0b-a48b-31db-ad5f-184709524207.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.237.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:0f:10:3a:86:c6:e3:bd:c9:af:0a:b5:d2:31:4a:07:b8:5d:
         13:d8:ee:c6:c8:47:d6:90:a5:ae:c6:8d:31:b4:20:cb:e7:1e:
         48:9c:94:f6:35:89:e6:62:5f:5d:fc:e2:aa:72:f9:49:0c:5b:
         10:58:82:76:d6:8e:80:4a:d9:1d:a3:53:f5:99:c1:8c:45:d4:
         d3:76:86:18:59:de:c0:e7:58:fe:a6:41:f1:f5:46:65:bf:80:
         a6:c2:e5:65:9b:f0:87:b3:a6:a8:82:4a:f6:cd:0a:70:a3:61:
         01:2b:3f:7c:c0:eb:f2:56:c9:61:ad:63:b5:93:91:59:f0:62:
         8d:9d:f4:ea:57:a8:fd:d7:c6:19:62:d5:15:fd:4f:b4:60:fd:
         20:ea:d4:72:5f:9d:5c:ed:46:96:65:0e:25:16:c4:3b:ae:09:
         64:5e:16:32:03:75:4d:db:ee:ac:8e:4e:20:28:91:c0:e2:cc:
         64:19:aa:82:fa:0f:16:36:37:a7:90:0c:db:13:83:05:32:27:
         0d:55:1b:4d:b3:4d:0e:28:15:80:9d:16:c3:60:76:76:6c:22:
         e9:5f:6b:7a:d4:6d:a3:40:f3:59:e8:10:69:ca:02:c1:89:20:
         83:83:7e:53:03:c1:ad:00:13:88:9e:cf:53:1f:73:bf:90:60:
         ab:42:45:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:57:37 2026 by rpki-client