Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/45ce3d96-bd9f-3465-9a21-4647bad6e7df.roa
File:                     45ce3d96-bd9f-3465-9a21-4647bad6e7df.roa (raw, json)
Hash identifier:          VHS+qC2xthqoNRQBaSCrNkLy5Ju+yO0rki/nCLDNA3Y=
Subject key identifier:   C2:46:85:C7:48:51:C7:36:E7:CD:CC:AF:47:04:BF:E1:48:57:D9:2A
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584DDE85C878D19A5517FED6D060
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/45ce3d96-bd9f-3465-9a21-4647bad6e7df.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     14061
IP address blocks:        104.236.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:85:c8:78:d1:9a:55:17:fe:d6:d0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=7b3b9ccd-3a89-41c3-972a-bb50ef28825e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d6:27:c4:5d:9e:d7:ff:8e:ba:c6:b5:ab:5c:
                    8c:4f:93:8f:c0:f2:95:83:04:df:de:ee:6b:55:bf:
                    dd:7f:9a:6c:35:44:9e:4b:1e:7b:6f:9f:41:49:8f:
                    ae:09:14:fe:0b:65:f5:18:5e:0c:e1:25:08:48:03:
                    d9:07:4c:47:22:6a:a8:8d:01:ff:29:f1:47:50:1a:
                    99:29:db:b2:5a:75:99:12:73:d8:b0:21:dc:d9:8c:
                    d5:23:03:d2:96:8b:b8:0b:d8:5d:dd:02:fb:98:ee:
                    7f:a6:ae:1a:10:6b:f3:f6:80:d3:3b:2a:c0:33:c9:
                    1b:ac:d8:51:0e:64:df:80:f9:b0:1b:de:37:ba:67:
                    8e:c0:c2:50:85:7c:ff:b3:d0:c4:b1:68:28:80:58:
                    69:d9:dd:55:bc:4b:ad:6f:de:06:b5:1d:e0:3c:cd:
                    98:43:2d:8c:72:88:06:e0:97:30:af:5a:c3:1d:58:
                    26:b1:25:51:b7:b1:81:7c:3b:5f:46:a9:02:64:06:
                    b6:86:27:07:2c:1c:5a:45:83:42:fb:36:3f:65:2b:
                    7a:9d:33:e5:00:ca:e9:9d:d4:35:2d:ab:30:07:62:
                    d8:a1:6f:53:34:a2:3f:21:75:ee:af:b6:39:a9:92:
                    3b:c5:c4:69:9c:79:dd:0c:aa:e1:3f:3d:8b:2d:40:
                    ce:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:46:85:C7:48:51:C7:36:E7:CD:CC:AF:47:04:BF:E1:48:57:D9:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/45ce3d96-bd9f-3465-9a21-4647bad6e7df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.236.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:15:fb:13:11:97:34:20:ac:20:5d:65:3f:e5:7f:02:87:4e:
         6b:f1:04:ce:31:79:13:32:f1:69:18:d2:52:9a:b6:ab:c8:7f:
         c4:e8:24:df:35:8e:42:23:4b:70:46:6c:01:25:fe:89:2a:d9:
         5c:76:32:8a:38:a3:7d:d0:f5:83:99:be:43:78:22:11:d1:9b:
         52:e1:76:b6:24:43:67:23:f4:d5:7d:f3:d4:f0:aa:ee:cc:85:
         4c:39:89:46:41:c0:46:f4:24:d9:e5:01:da:98:b4:ad:5c:c6:
         c5:a8:a0:96:58:c7:bc:c9:f3:e0:64:85:e2:b4:49:77:89:95:
         b5:88:13:68:8e:e8:67:75:df:c8:a8:c0:13:99:ec:75:05:ac:
         d4:8f:51:a6:44:3c:df:f7:b4:04:fe:a6:d6:1c:f8:e4:48:63:
         1e:83:e8:32:07:03:9e:01:88:c8:0f:16:39:ec:b9:44:e7:dd:
         e1:ea:8d:bc:04:0a:22:a0:84:08:a9:d2:1f:a7:60:b4:a2:35:
         33:09:37:39:a5:9f:cf:60:8d:56:5a:ab:81:e3:5f:bc:f4:a0:
         45:91:26:4b:94:8b:77:4a:d4:c4:d9:0b:3c:9a:8f:14:84:e6:
         f8:fe:b6:e2:ce:bc:5e:38:66:34:d9:c3:2b:53:e6:7d:35:20:
         e7:78:af:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:54:55 2026 by rpki-client