Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/012f7b1f-4dda-3629-9c3d-e6d0828a40ff.roa
File:                     012f7b1f-4dda-3629-9c3d-e6d0828a40ff.roa (raw, json)
Hash identifier:          AF+3nVo9CU1aTagHcXr5sCCjrloi7MOEWBaCeWuXxaY=
Subject key identifier:   DD:0B:3A:43:EB:8E:45:5F:50:64:A7:C3:BE:EF:8A:42:EC:80:47:B5
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584EA78F6A559FE8DE0C7D6D3480
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/012f7b1f-4dda-3629-9c3d-e6d0828a40ff.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        104.218.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:6a:55:9f:e8:de:0c:7d:6d:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4bff7f61-abc0-412f-901a-ddbc1853a436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c1:1e:1c:39:46:08:eb:af:38:fd:96:c2:43:
                    39:5e:8c:bc:7a:d0:b9:04:18:6d:e6:23:f4:ad:46:
                    58:49:99:c3:d1:4c:32:99:5c:dc:9b:f8:24:79:3e:
                    15:2e:b3:a5:b9:8b:94:08:8d:47:c7:93:6d:31:3e:
                    2d:5a:ce:1f:f5:c7:0b:a3:eb:7b:78:0d:ef:56:5f:
                    00:64:2e:f7:b4:8c:66:64:8c:0a:4a:39:bb:b7:18:
                    f8:19:f1:4e:51:86:e7:f8:7f:1a:f8:8f:45:aa:a9:
                    0d:39:e0:b5:f4:b1:91:c7:0a:3a:83:cd:75:68:72:
                    5e:c6:8d:44:ae:e2:9e:cd:1f:2f:be:69:c0:e6:24:
                    e0:f2:3b:7f:5b:45:73:68:3f:6a:21:46:08:6e:0c:
                    82:aa:18:dc:2c:13:06:e5:92:08:f9:52:62:42:29:
                    18:11:a8:db:c7:f8:39:e4:6b:99:71:38:a1:be:f4:
                    16:57:ae:94:15:00:4d:cc:84:92:a3:21:c1:47:8a:
                    bd:15:87:4c:8e:23:d5:5c:e6:29:d9:a4:32:e2:a1:
                    dc:92:c1:5f:35:01:14:b5:25:37:79:35:d0:49:97:
                    c7:71:e5:22:06:b3:64:f0:6c:d6:d4:78:de:d4:c8:
                    92:36:f5:1b:d4:0a:45:7b:69:02:b0:00:73:28:42:
                    5e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0B:3A:43:EB:8E:45:5F:50:64:A7:C3:BE:EF:8A:42:EC:80:47:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/012f7b1f-4dda-3629-9c3d-e6d0828a40ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.218.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:15:29:22:48:b5:7d:be:ef:fb:88:03:80:83:87:d4:e9:5d:
         b7:6f:72:0e:d3:b0:63:d4:bf:83:7e:e9:23:c6:17:67:bd:e4:
         c6:89:bc:a5:16:ea:fa:8c:99:c1:0b:6f:3d:47:af:f8:96:f2:
         61:28:3e:00:c2:da:d0:67:d4:b7:d4:98:9f:9e:49:ef:b3:b7:
         13:a8:d2:65:1c:68:aa:aa:d1:a2:b6:e7:64:cb:ca:b5:c6:e2:
         86:e6:d7:08:e0:56:c4:77:94:2b:2e:d1:ba:b2:a5:38:87:d4:
         ba:41:00:0c:cd:b2:0c:6c:4a:a2:9b:4d:36:12:79:5d:bf:44:
         f6:f9:e7:13:5e:12:27:4d:25:dc:c5:4d:a0:f8:49:4d:96:61:
         22:d1:49:a4:0b:af:ba:84:b2:04:25:40:5b:5b:f1:10:0c:d7:
         e7:a6:b0:43:e2:b6:ba:87:40:df:fe:29:dd:5d:c6:83:5a:06:
         21:f9:9d:0e:d9:ed:4e:c5:c4:16:49:c0:95:4b:9f:08:40:5d:
         e3:33:3d:ed:b1:9f:75:ce:06:74:87:ca:9c:8d:03:66:cb:25:
         e3:85:c1:28:b2:67:92:d4:c6:55:b0:08:5e:84:66:b9:9b:0e:
         c5:ac:9a:05:fd:1b:78:e0:7c:d0:77:8c:af:94:e9:d1:d8:55:
         cc:92:9a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:23 2026 by rpki-client