Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd9a2471-cfce-367f-a352-22881d569720.roa
File:                     fd9a2471-cfce-367f-a352-22881d569720.roa (raw, json)
Hash identifier:          ud6hB2+eFatgkk4seog/QfDryl38AhoL9Us/KmnPM0Y=
Subject key identifier:   98:6C:41:4E:FE:9F:12:0C:DD:57:BD:E0:B6:A7:22:16:9A:C9:95:67
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584D1F4A7FE5E65658209C239540
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd9a2471-cfce-367f-a352-22881d569720.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     396982
IP address blocks:        104.196.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:7f:e5:e6:56:58:20:9c:23:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=9cd51262-2d5d-44c7-a885-47a9a0bbb8e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:02:d3:3d:ec:a8:66:d4:4d:b8:7c:28:35:97:
                    e4:84:b7:a1:2f:64:98:8e:9c:51:07:75:42:9d:7d:
                    3b:60:e3:95:d3:b3:6e:24:90:de:df:4b:5b:8c:bc:
                    e3:b8:f8:2a:3b:53:87:84:6b:d2:3b:83:3b:64:ba:
                    c7:59:a7:36:9e:c8:da:6c:33:1c:3d:42:0e:e8:87:
                    fc:06:58:bd:a2:62:94:ca:60:dd:f4:3f:ce:ed:12:
                    5a:8d:b8:f4:f3:61:9e:08:c6:5b:b8:49:7e:39:00:
                    b8:33:40:16:af:95:5f:9b:aa:96:e7:2e:ef:6d:06:
                    8d:ad:4b:b2:1c:a6:ed:2e:68:06:ab:af:2f:a7:fb:
                    f2:37:b0:f4:4e:96:a5:25:7e:c0:f0:ab:b4:f2:a7:
                    36:63:e7:cd:3e:b1:b0:fb:9a:bf:62:9f:bf:e2:10:
                    eb:e1:08:81:2f:bc:6f:0a:be:e6:c5:7b:e6:47:98:
                    87:6a:52:f6:46:bd:84:4c:93:41:62:f0:08:1b:85:
                    95:84:13:75:8d:36:ed:45:a3:82:27:b1:29:0c:5b:
                    b1:79:3f:9c:72:89:28:84:7e:32:c0:9b:52:9a:cb:
                    4d:f8:c2:a4:55:55:ad:c4:16:73:66:91:f1:ca:d3:
                    cf:4a:50:9c:61:98:7b:4f:db:54:ad:de:4a:61:eb:
                    a0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6C:41:4E:FE:9F:12:0C:DD:57:BD:E0:B6:A7:22:16:9A:C9:95:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/fd9a2471-cfce-367f-a352-22881d569720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.196.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:84:2c:f4:f5:5e:60:56:0f:6d:39:97:f7:de:7b:85:47:b7:
         ec:99:b5:a3:8e:1e:cc:ef:5b:12:f8:ce:5f:59:27:ed:e7:7d:
         b7:70:87:90:e4:2c:6d:4b:b8:9f:b6:8b:07:bc:37:25:28:27:
         5b:cc:3f:72:5d:41:88:45:5f:d8:90:eb:ce:e2:86:e2:06:d1:
         28:e4:cc:12:7a:56:a9:a4:36:74:1c:23:ee:17:aa:66:bb:96:
         6c:b8:34:ea:5f:be:e5:60:12:56:ec:de:32:fc:28:1e:0d:86:
         be:c2:58:0f:77:53:2f:ad:39:0e:02:7b:ed:b0:55:2a:30:10:
         e0:bf:1f:4a:a6:98:b2:ae:e5:27:90:6f:cb:b2:1a:09:1b:68:
         64:e4:da:e8:7e:86:60:95:09:8c:ab:8c:6c:1e:04:65:ba:fe:
         96:69:ab:9b:23:4a:f1:75:ae:5c:86:61:7b:cd:d1:ea:f1:95:
         2d:88:7b:78:00:70:5c:88:e7:da:6b:29:ce:2a:5a:4c:f5:3c:
         e7:50:02:2a:52:49:e7:21:ad:e3:15:8f:22:aa:a9:ca:06:85:
         df:37:83:a4:2b:77:cc:1f:4e:7f:b0:5a:b4:9f:d3:28:ae:21:
         f2:b4:b2:be:4d:e5:40:5d:06:56:61:5a:9a:b6:e6:a6:5d:57:
         0b:8e:f7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:54:22 2026 by rpki-client