Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8025fad3-a1d2-336a-afe2-e5c1ba5a9def.roa
File:                     8025fad3-a1d2-336a-afe2-e5c1ba5a9def.roa (raw, json)
Hash identifier:          q1NOac9MTtZIhiqrl+4/V0LrA2v4jsWlKpBn7BmD/tU=
Subject key identifier:   7C:EB:31:C3:2C:86:22:D5:12:EB:C6:A4:A4:FE:0A:EB:FE:26:41:AF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D1F4A520999E8C7D1FF19A91C
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8025fad3-a1d2-336a-afe2-e5c1ba5a9def.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     396982
IP address blocks:        104.199.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:52:09:99:e8:c7:d1:ff:19:a9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=f82357e7-1974-4ca3-9941-e3d62fd1f3d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e0:11:d8:46:59:b3:ab:b1:2f:3b:b2:bf:98:
                    f5:54:2a:b9:17:0f:de:04:cc:eb:c0:90:ff:d8:5d:
                    71:75:c5:9b:17:a1:c8:43:14:ca:cb:c5:f2:ae:1c:
                    88:18:0f:a2:d2:d7:47:d0:02:92:0a:c5:75:49:a8:
                    ae:e1:2e:03:4f:01:e0:61:40:15:26:cb:c5:ce:51:
                    03:94:7b:31:0b:a4:7e:df:a5:76:86:41:7d:74:f5:
                    a2:2a:d6:b8:d0:ec:7e:1a:d0:1a:a4:b5:24:0b:c5:
                    54:1f:87:b3:69:5d:45:ef:d5:f9:e5:2e:54:8f:0e:
                    83:83:c2:3a:c1:5f:d9:81:a0:a9:ba:27:47:c9:81:
                    e3:cd:2a:84:e0:95:44:02:2b:e6:3d:43:75:a8:0e:
                    45:34:9d:7c:eb:ac:91:6d:5b:c6:c2:8e:d6:96:ff:
                    1a:5e:bf:79:29:26:4b:22:c6:85:01:47:0f:ed:30:
                    d8:01:ec:44:fd:6f:25:a9:35:02:b1:e4:72:85:c0:
                    57:79:77:b5:5f:c4:1f:41:23:06:66:ea:58:51:89:
                    fb:c2:12:02:fc:a9:8c:98:a0:38:18:9c:b4:ff:a1:
                    eb:7e:5e:dd:4b:bf:f1:15:c6:a5:f8:d6:66:e2:b9:
                    80:04:cf:57:45:21:c3:73:41:24:be:8d:92:5a:4c:
                    70:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EB:31:C3:2C:86:22:D5:12:EB:C6:A4:A4:FE:0A:EB:FE:26:41:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8025fad3-a1d2-336a-afe2-e5c1ba5a9def.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.199.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:78:33:f9:6d:b0:22:99:11:19:44:3a:90:e2:4e:32:57:35:
         bb:95:70:ab:b3:3d:93:3d:89:3d:85:23:79:e2:f9:19:5e:39:
         13:48:17:5d:c6:bd:38:31:4b:3f:d8:14:b4:c1:30:30:7f:1d:
         9f:62:8b:e5:58:66:6f:ac:c9:1a:59:dd:28:0f:35:85:3c:4e:
         09:fb:07:3a:06:e3:49:46:a0:a6:ef:23:aa:89:8b:f3:81:8d:
         47:12:db:63:d3:72:54:8a:71:da:8a:ec:ad:e1:bc:69:8e:5c:
         e5:e8:b9:19:35:f7:6b:b8:4b:15:8b:36:19:85:b0:75:bc:61:
         e1:03:e1:ca:98:a3:8f:d0:a9:ee:8b:9c:d7:47:b8:7a:ee:c8:
         03:42:24:3e:fd:25:6f:64:48:7c:3c:de:86:a9:83:e2:a3:a9:
         c1:04:bb:42:3e:ad:d6:7d:ed:a1:8f:65:c6:dc:b6:e3:97:9e:
         d7:09:1b:4f:db:df:05:27:9d:a3:d9:d3:f1:52:68:b8:22:8f:
         ff:c2:6e:9e:e4:47:83:21:95:4f:7d:f1:b5:76:95:6b:dd:65:
         c1:ee:6c:b1:18:94:1a:f0:de:36:ac:c8:aa:74:f3:a2:2d:30:
         03:43:23:1f:e8:26:7c:f6:5b:e8:19:51:41:1a:29:7b:75:16:
         5e:86:61:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:47:46 2026 by rpki-client